The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-489:04 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system.  The     kernel handles the basic functions of the operating system:  memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2011-1593     Multiple integer overflows in the next_pidmap function in kernel/pid.c in     the Linux kernel before 2.6.38.4 allow local users to cause a denial of service     (system crash) via a crafted (1) getdents or (2) readdir system call.
    CVE-2011-1898     Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not     have interrupt remapping, allows guest OS users to gain host OS privileges by using DMA to generate MSI     interrupts by writing to the interrupt injection registers.
    CVE-2011-2492     The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data     structures, which allows local users to obtain potentially sensitive information from kernel memory via a     crafted getsockopt system call, related to (1) the l2cap_sock_getsockopt_old function in     net/bluetooth/l2cap_sock.c and (2) the rfcomm_sock_getsockopt_old function in net/bluetooth/rfcomm/sock.c.
    CVE-2011-2689     The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the     size of a chunk allocation is a multiple of the block size, which allows local users to cause a denial of     service (BUG and system crash) by arranging for all resource groups to have too little free space.
    CVE-2011-2695     Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to     cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a     write operation involving a block number corresponding to the largest possible 32-bit unsigned     integer.
    CVE-2011-0999     mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent creation of a transparent huge     page (THP) during the existence of a temporary stack for an exec system call, which allows local users to     cause a denial of service (memory consumption) or possibly have unspecified other impact via a crafted     application.
    CVE-2011-1010     Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2     allows local users to cause a denial of service (panic) or possibly have unspecified other impact via a     malformed Mac OS partition table.
    CVE-2011-1082     fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data     structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to     cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes     epoll_create and epoll_ctl system calls.
    CVE-2011-1090     The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL     data in memory that is allocated by kmalloc but not properly freed, which allows local users to cause a     denial of service (panic) via a crafted attempt to set an ACL.
    CVE-2011-1163     The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly     handle an invalid number of partitions, which might allow local users to obtain potentially sensitive     information from kernel heap memory via vectors related to partition-table parsing.
    CVE-2011-1494     Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux     kernel 2.6.38 and earlier might allow local users to gain privileges or cause a denial of service (memory     corruption) via an ioctl call specifying a crafted value that triggers a heap-based buffer overflow.
    CVE-2011-1495     drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and     (2) offset values before performing memory copy operations, which might allow local users to gain     privileges, cause a denial of service (memory corruption), or obtain sensitive information from kernel     memory via a crafted ioctl call, related to the _ctl_do_mpt_command and _ctl_diag_read_buffer functions.
    CVE-2010-3296     The cxgb_extension_ioctl function in drivers/net/cxgb3/cxgb3_main.c in the Linux kernel before 2.6.36-rc5     does not properly initialize a certain structure member, which allows local users to obtain potentially     sensitive information from kernel stack memory via a CHELSIO_GET_QSET_NUM ioctl call.
    CVE-2010-4346     The install_special_mapping function in mm/mmap.c in the Linux kernel before 2.6.37-rc6 does not make an     expected security_file_mmap function call, which allows local users to bypass intended mmap_min_addr     restrictions and possibly conduct NULL pointer dereference attacks via a crafted assembly-language     application.
    CVE-2010-4526     Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2     through 2.6.33 allows remote attackers to cause a denial of service (panic) via an ICMP unreachable     message to a socket that is already locked by a user, which causes the socket to be freed and triggers     list corruption, related to the sctp_wait_for_connect function.
    CVE-2011-0521     The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2     does not check the sign of a certain integer field, which allows local users to cause a denial of service     (memory corruption) or possibly have unspecified other impact via a negative value.
    CVE-2011-0695     Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in     Linux kernel 2.6.x allows remote attackers to cause a denial of service (panic) by sending an InfiniBand     request while other request handlers are still running, which triggers an invalid pointer dereference.
    CVE-2011-0710     The task_show_regs function in arch/s390/kernel/traps.c in the Linux kernel before     2.6.38-rc4-next-20110216 on the s390 platform allows local users to obtain the values of the registers of     an arbitrary process by reading a status file under /proc/.
    CVE-2010-4565     The bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN)     implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename     containing a kernel memory address, which allows local users to obtain potentially sensitive information     about kernel memory use by listing this filename.
    CVE-2010-4649     Integer overflow in the ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux     kernel before 2.6.37 allows local users to cause a denial of service (memory corruption) or possibly have     unspecified other impact via a large value of a certain structure member.
    CVE-2011-0711     The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not     initialize a certain structure member, which allows local users to obtain potentially sensitive     information from kernel stack memory via an FSGEOMETRY_V1 ioctl call.
    CVE-2011-0712     Multiple buffer overflows in the caiaq Native Instruments USB audio functionality in the Linux kernel     before 2.6.38-rc4-next-20110215 might allow attackers to cause a denial of service or possibly have     unspecified other impact via a long USB device name, related to (1) the snd_usb_caiaq_audio_init function     in sound/usb/caiaq/audio.c and (2) the snd_usb_caiaq_midi_init function in sound/usb/caiaq/midi.c.
    CVE-2011-1013     Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct     Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in     the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations, and     consequently cause a denial of service (system crash) or possibly have unspecified other impact, via a     crafted num_crtcs (aka vb_num) structure member in an ioctl argument.
    CVE-2011-1016     The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the     AA resolve registers, which allows local users to write to arbitrary memory locations associated with (1)     Video RAM (aka VRAM) or (2) the Graphics Translation Table (GTT) via crafted values.
    CVE-2011-1044     The ib_uverbs_poll_cq function in drivers/infiniband/core/uverbs_cmd.c in the Linux kernel before 2.6.37     does not initialize a certain response buffer, which allows local users to obtain potentially sensitive     information from kernel memory via vectors that cause this buffer to be only partially filled, a different     vulnerability than CVE-2010-4649.
    CVE-2010-3858     The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN     is used, does not properly restrict the stack memory consumption of the (1) arguments and (2) environment     for a 32-bit application on a 64-bit platform, which allows local users to cause a denial of service     (system crash) via a crafted exec system call, a related issue to CVE-2010-2240.
    CVE-2011-1598     The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate     a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference)     or possibly have unspecified other impact via a crafted release operation.
    CVE-2011-1748     The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate     a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference)     or possibly have unspecified other impact via a crafted release operation.
    CVE-2010-4250     CVE-2010-4251     CVE-2010-4648     CVE-2010-4655     CVE-2010-4656     CVE-2011-0006     CVE-2011-0716     CVE-2011-0726     CVE-2011-1019     CVE-2011-1023     CVE-2011-1079     CVE-2011-1080     CVE-2011-1093     CVE-2011-1170     CVE-2011-1171     CVE-2011-1172     CVE-2011-1182     CVE-2011-1478     CVE-2011-1573     CVE-2011-1576     CVE-2011-1581     CVE-2011-1767     CVE-2011-1768     CVE-2011-1770     CVE-2011-1771     CVE-2011-1776     CVE-2011-2183     CVE-2011-2213     CVE-2011-2479     CVE-2011-2491     CVE-2011-2495     CVE-2011-2497     CVE-2011-2517     No information available at the time of writing, please refer to the CVE links below.
    Fixed bugs:
    Too many to list everything here, see the changelog     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3296     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3858     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4250     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4251     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4346     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4526     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4565     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4648     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4649     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4655     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4656     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0006     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0521     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0695     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0710     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0711     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0712     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0716     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0726     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0999     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1010     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1013     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1016     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1019     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1023     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1044     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1079     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1080     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1082     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1090     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1093     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1163     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1170     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1171     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1172     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1182     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1478     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1494     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1495     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1573     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1576     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1581     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1593     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1598     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1748     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1767     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1768     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1770     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1771     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1776     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1898     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2183     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2213     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2479     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2491     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2492     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2495     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2497     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2517     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2689     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2695

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2015 advisory.

    - sctp: fix to calc the INIT/INIT-ACK chunk length correctly is set {CVE-2011-1573}
    - dccp: fix oops on Reset after close {CVE-2011-1093}
    - bridge: netfilter: fix information leak {CVE-2011-1080}
    - Bluetooth: bnep: fix buffer overflow {CVE-2011-1079}
    - net: don't allow CAP_NET_ADMIN to load non-netdev kernel modules {CVE-2011-1019}
    - drm/radeon/kms: check AA resolve registers on r300 {CVE-2011-1016}
    - drm/radeon: fix regression with AA resolve checking {CVE-2011-1016}
    - drm: fix unsigned vs signed comparison issue in modeset ctl ioctl {CVE-2011-1013}
    - proc: protect mm start_code/end_code in /proc/pid/stat {CVE-2011-0726}
    - ALSA: caiaq - Fix possible string-buffer overflow {CVE-2011-0712}
    - xfs: zero proper structure size for geometry calls {CVE-2011-0711}
    - xfs: prevent leaking uninitialized stack memory in FSGEOMETRY_V1 {CVE-2011-0711}
    - ima: fix add LSM rule bug {CVE-2011-0006}
    - IB/uverbs: Handle large number of entries in poll CQ {CVE-2010-4649, CVE-2011-1044}
    - CAN: Use inode instead of kernel address for /proc file {CVE-2010-4565}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284480	MiracleLinux 4 : kernel-2.6.32-131.12.1.el6 (AXSA:2011-489:04)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/19	high
68416	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2015)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	medium

检测

插件搜索

high

medium