The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-228:02 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system.  The     kernel handles the basic functions of the operating system:  memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2011-1020     The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the     /proc directory tree of a process after this process performs an exec of a setuid program, which allows     local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write     system calls.
    CVE-2011-3347     CVE-2011-3638     No information available at the time of writing, see the CVE link below.
    CVE-2011-4110     The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to     cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined     key and updating a negative key into a fully instantiated key.
    CVE-2011-1162     The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local     users to read the results of the previous TPM command.
    CVE-2011-1577     Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38     and earlier allows physically proximate attackers to cause a denial of service (OOPS) or possibly have     unspecified other impact via a crafted size of the EFI GUID partition-table header on removable media.
    CVE-2012-0056     The mem_write function in Linux kernel 2.6.39 and other versions, when ASLR is disabled, does not properly     check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by     modifying process memory, as demonstrated by Mempodipper.
    CVE-2011-2494     CVE-2011-2699     CVE-2011-2905     CVE-2011-3188     CVE-2011-3191     CVE-2011-3353     CVE-2011-3359     CVE-2011-3363     CVE-2011-3593     CVE-2011-4326     CVE-2011-4127     No information available at the time of writing, please refer to the CVE links     below.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0052 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    This update fixes the following security issue:

    * It was found that permissions were not checked properly in the Linux     kernel when handling the /proc/[pid]/mem writing functionality. A local,     unprivileged user could use this flaw to escalate their privileges. Refer     to Red Hat Knowledgebase article DOC-69129, linked to in the References,     for further information. (CVE-2012-0056, Important)

    Red Hat would like to thank Jri Aedla for reporting this issue.

    This update fixes the following bugs:

    * The RHSA-2011:1849 kernel update introduced a bug in the Linux kernel     scheduler, causing a WARNING: at kernel/sched.c:5915 thread_return     message and a call trace to be logged. This message was harmless, and was     not due to any system malfunctions or adverse behavior. With this update,     the WARN_ON_ONCE() call in the scheduler that caused this harmless message     has been removed. (BZ#768288)

    * The RHSA-2011:1530 kernel update introduced a regression in the way     the Linux kernel maps ELF headers for kernel modules into kernel memory.
    If a third-party kernel module is compiled on a Red Hat Enterprise Linux     system with a kernel prior to RHSA-2011:1530, then loading that module on     a system with RHSA-2011:1530 kernel would result in corruption of one byte     in the memory reserved for the module. In some cases, this could prevent     the module from functioning correctly. (BZ#769595)

    * On some SMP systems the tsc may erroneously be marked as unstable during     early system boot or while the system is under heavy load. A Clocksource     tsc unstable message was logged when this occurred. As a result the system     would switch to the slower access, but higher precision HPET clock.

    The tsc=reliable kernel parameter is supposed to avoid this problem by     indicating that the system has a known good clock, however, the parameter     only affected run time checks.  A fix has been put in to avoid the boot     time checks so that the TSC remains as the clock for the duration of     system runtime. (BZ#755867)

    Users should upgrade to these updated packages, which contain backported     patches to correct these issues. The system must be rebooted for this     update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Update to the 3.1.10 stable release (Fedora 2.6.41.10). Also fixes CVEs :

  - CVE-2012-0056

    - CVE-2011-4127

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Rebase F16 to the 3.2.1 stable release. Also fixes CVEs :

  - CVE-2012-0056

    - CVE-2011-4127

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Juri Aedla discovered that the kernel incorrectly handled /proc/<pid>/mem permissions. A local attacker could exploit this and gain root privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0061 advisory.

    The kernel-rt packages contain the Linux kernel, the core of any Linux     operating system.

    This update fixes the following security issue:

    * It was found that permissions were not checked properly in the Linux     kernel when handling the /proc/[pid]/mem writing functionality. A local,     unprivileged user could use this flaw to escalate their privileges. Refer     to Red Hat Knowledgebase article DOC-69129, linked to in the References,     for further information. (CVE-2012-0056, Important)

    Red Hat would like to thank Jri Aedla for reporting this issue.

    Users should upgrade to these updated packages, which correct this issue.
    The system must be rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284039	MiracleLinux 4 : kernel-2.6.32-220.4.1.el6 (AXSA:2012-228:02)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/2/12	critical
57657	RHEL 6 : kernel (RHSA-2012:0052)	Nessus	Red Hat Local Security Checks	2012/1/24	2025/4/14	high
57673	Fedora 15 : kernel-2.6.41.10-3.fc15 (2012-0861)	Nessus	Fedora Local Security Checks	2012/1/25	2021/1/11	medium
57674	Fedora 16 : kernel-3.2.1-3.fc16 (2012-0876)	Nessus	Fedora Local Security Checks	2012/1/25	2021/1/11	medium
57697	Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerability (USN-1342-1)	Nessus	Ubuntu Local Security Checks	2012/1/26	2019/9/19	medium
76636	RHEL 6 : kernel-rt (RHSA-2012:0061)	Nessus	Red Hat Local Security Checks	2014/7/22	2025/4/15	high

检测

插件搜索

critical

high

medium

medium

medium

high