The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1778 advisory.

    - [security] keys: Ensure we free the assoc array edit if edit is valid (David Howells) [1246039 1244171]     {CVE-2015-1333}
    - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240760 1240761] {CVE-2015-5364     CVE-2015-5366}
    - [x86] bpf_jit: fix compilation of large bpf programs (Denys Vlasenko) [1236938 1236939] {CVE-2015-4700}
    - [net] sctp: fix ASCONF list handling (Marcelo Leitner) [1227960 1206474] {CVE-2015-3212}
    - [fs] ext4: allocate entire range in zero range (Lukas Czerner) [1193909 1187071] {CVE-2015-0275}
    - [x86] ASLR bruteforce possible for vdso library (Jacob Tanenbaum) [1184898 1184899] {CVE-2014-9585}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

* A flaw was found in the kernel's implementation of the Berkeley Packet Filter (BPF). A local attacker could craft BPF code to crash the system by creating a situation in which the JIT compiler would fail to correctly optimize the JIT image on the last pass. This would lead to the CPU executing instructions that were not part of the JIT code. (CVE-2015-4700, Important)

* Two flaws were found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use these flaws to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in applications using the edge triggered epoll functionality. (CVE-2015-5364, CVE-2015-5366, Important)

* A flaw was found in the way the Linux kernel's ext4 file system handled the 'page size > block size' condition when the fallocate zero range functionality was used. A local attacker could use this flaw to crash the system. (CVE-2015-0275, Moderate)

* It was found that the Linux kernel's keyring implementation would leak memory when adding a key to a keyring via the add_key() function.
A local attacker could use this flaw to exhaust all available memory on the system. (CVE-2015-1333, Moderate)

* A race condition flaw was found in the way the Linux kernel's SCTP implementation handled Address Configuration lists when performing Address Configuration Change (ASCONF). A local attacker could use this flaw to crash the system via a race condition triggered by setting certain ASCONF options on a socket. (CVE-2015-3212, Moderate)

* An information leak flaw was found in the way the Linux kernel's Virtual Dynamic Shared Object (vDSO) implementation performed address randomization. A local, unprivileged user could use this flaw to leak kernel memory addresses to user-space. (CVE-2014-9585, Low)

This update also fixes several bugs.

The system must be rebooted for this update to take effect.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1778 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    * A flaw was found in the kernel's implementation of the Berkeley Packet     Filter (BPF). A local attacker could craft BPF code to crash the system by     creating a situation in which the JIT compiler would fail to correctly     optimize the JIT image on the last pass. This would lead to the CPU     executing instructions that were not part of the JIT code. (CVE-2015-4700,     Important)

    * Two flaws were found in the way the Linux kernel's networking     implementation handled UDP packets with incorrect checksum values. A remote     attacker could potentially use these flaws to trigger an infinite loop in     the kernel, resulting in a denial of service on the system, or cause a     denial of service in applications using the edge triggered epoll     functionality. (CVE-2015-5364, CVE-2015-5366, Important)

    * A flaw was found in the way the Linux kernel's ext4 file system handled     the page size > block size condition when the fallocate zero range     functionality was used. A local attacker could use this flaw to crash the     system. (CVE-2015-0275, Moderate)

    * It was found that the Linux kernel's keyring implementation would leak     memory when adding a key to a keyring via the add_key() function. A local     attacker could use this flaw to exhaust all available memory on the system.
    (CVE-2015-1333, Moderate)

    * A race condition flaw was found in the way the Linux kernel's SCTP     implementation handled Address Configuration lists when performing Address     Configuration Change (ASCONF). A local attacker could use this flaw to     crash the system via a race condition triggered by setting certain ASCONF     options on a socket. (CVE-2015-3212, Moderate)

    * An information leak flaw was found in the way the Linux kernel's Virtual     Dynamic Shared Object (vDSO) implementation performed address     randomization. A local, unprivileged user could use this flaw to leak     kernel memory addresses to user-space. (CVE-2014-9585, Low)

    Red Hat would like to thank Daniel Borkmann for reporting CVE-2015-4700,     and Canonical for reporting the CVE-2015-1333 issue. The CVE-2015-0275     issue was discovered by Xiong Zhou of Red Hat, and the CVE-2015-3212 issue     was discovered by Ji Jianwen of Red Hat Engineering.

    This update also fixes several bugs. Refer to the following Knowledgebase     article for further information:

    https://access.redhat.com/articles/1614563

    All kernel users are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. The system must be     rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002226 advisory.

    The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to     cause a denial of service (BUG) via a crafted fallocate zero-range request.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-504:03 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any     Linux operating system.  The kernel handles the basic functions     of the operating system: memory allocation, process allocation, device     input and output, etc.
    Security issues fixed with this release:
    CVE-2014-9585     The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel     through 3.18.2 does not properly choose memory locations for the vDSO     area, which makes it easier for local users to bypass the ASLR     protection mechanism by guessing a location at the end of a PMD.
    CVE-2015-0275
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2015-1333     Memory leak in the __key_link_end function in security/keys/keyring.c     in the Linux kernel before 4.1.4 allows local users to cause a denial     of service (memory consumption) via many add_key system calls that     refer to existing keys.
    CVE-2015-3212     Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2     allows local users to cause a denial of service (list corruption and     panic) via a rapid series of system calls related to sockets, as     demonstrated by setsockopt calls.
    CVE-2015-4700     The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the     Linux kernel before 4.0.6 allows local users to cause a denial of     service (system crash) by creating a packet filter and then loading     crafted BPF instructions that trigger late convergence by the JIT     compiler.
    CVE-2015-5364     The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux     kernel before 4.0.6 do not properly consider yielding a processor,     which allows remote attackers to cause a denial of service (system     hang) via incorrect checksums within a UDP packet flood.
    CVE-2015-5366     The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux     kernel before 4.0.6 provide inappropriate -EAGAIN return values, which     allows remote attackers to cause a denial of service (EPOLLET epoll     application read outage) via an incorrect checksum in a UDP packet, a     different vulnerability than CVE-2015-5364.
    Fixed bugs:

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Xiong Zhou discovered a bug in the way the EXT4 filesystem handles fallocate zero range functionality when the page size is greater than the block size. A local attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2015-0275)

Wen Xu discovered a use-after-free flaw in the Linux kernel's ipv4 ping support. A local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges on the system. (CVE-2015-3636).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001947 advisory.

    The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to     cause a denial of service (BUG) via a crafted fallocate zero-range request.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Update to latest upstream stable release, Linux v3.18.8. Numerous bugfixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The 3.18.9 stable update contains a number of important fixes across the tree. Update to the latest stable upstream release, Linux v3.18.8.
Numerous fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2636-1 advisory.

    Xiong Zhou discovered a bug in the way the EXT4 filesystem handles fallocate zero range functionality when     the page size is greater than the block size. A local attacker could exploit this flaw to cause a denial     of service (system crash). (CVE-2015-0275)

    Wen Xu discovered a use-after-free flaw in the Linux kernel's ipv4 ping support. A local user could     exploit this flaw to cause a denial of service (system crash) or gain administrative privileges on the     system. (CVE-2015-3636)

    A memory corruption flaw was discovered in the Linux kernel's scsi subsystem. A local attacker could     potentially exploit this flaw to cause a denial of service (system crash). (CVE-2015-4036)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1787 advisory.

    The kernel-rt packages contain the Linux kernel, the core of any Linux     operating system.

    * Two flaws were found in the way the Linux kernel's networking     implementation handled UDP packets with incorrect checksum values. A remote     attacker could potentially use these flaws to trigger an infinite loop in     the kernel, resulting in a denial of service on the system, or cause a     denial of service in applications using the edge triggered epoll     functionality. (CVE-2015-5364, CVE-2015-5366, Important)

    * A flaw was found in the way the Linux kernel's ext4 file system handled     the page size > block size condition when the fallocate zero range     functionality was used. A local attacker could use this flaw to crash the     system. (CVE-2015-0275, Moderate)

    * It was found that the Linux kernel's keyring implementation would leak     memory when adding a key to a keyring via the add_key() function. A local     attacker could use this flaw to exhaust all available memory on the system.
    (CVE-2015-1333, Moderate)

    * A race condition flaw was found in the way the Linux kernel's SCTP     implementation handled Address Configuration lists when performing Address     Configuration Change (ASCONF). A local attacker could use this flaw to     crash the system via a race condition triggered by setting certain ASCONF     options on a socket. (CVE-2015-3212, Moderate)

    * An information leak flaw was found in the way the Linux kernel's Virtual     Dynamic Shared Object (vDSO) implementation performed address     randomization. A local, unprivileged user could use this flaw to leak     kernel memory addresses to user-space. (CVE-2014-9585, Low)

    Red Hat would like to thank Canonical for reporting the CVE-2015-1333     issue. The CVE-2015-0275 issue was discovered by Xiong Zhou of Red Hat, and     the CVE-2015-3212 issue was discovered by Ji Jianwen of Red Hat     Engineering.

    This update provides a build of the kernel-rt package for Red Hat     Enterprise MRG 2.5 that is layered on Red Hat Enterprise Linux 6, and fixes     the following issues:

    * Fix regression in scsi_send_eh_cmnd()

    * boot hangs at Console: switching to colour dummy device 80x25

    * Update tcp stack to 3.17 kernel

    * ksoftirqd high CPU usage due to stray tasklet from ioatdma driver

    (BZ#1245345)

    This update also fixes the following bugs:

    * The configuration option CONFIG_RTC_HCTOSYS was disabled on the realtime     kernel causing the RTC clock to be adjusted with the UTC time even if the     system is configured to set the RTC to the local time. By enabling the     CONFIG_RTC_HCTOSYS configuration option, when the system is configured to     use local time, RTC will correctly update with the local time and not try     to use another timezone. (BZ#1248047)

    * In the realtime kernel, if a rt_mutex was taken while in interrupt     context the normal priority inheritance protocol would falsely identify a     deadlock and trigger a kernel crash. The patch that added the rt_mutex in     this interrupt context was reverted. (BZ#1250649)

    All kernel-rt users are advised to upgrade to these updated packages, which     correct these issues and add these enhancements. The system must be     rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
85958	Oracle Linux 7 : kernel (ELSA-2015-1778)	Nessus	Oracle Linux Local Security Checks	2015/9/16	2026/2/9	critical
85960	Scientific Linux Security Update : kernel on SL7.x x86_64 (20150915)	Nessus	Scientific Linux Local Security Checks	2015/9/16	2021/1/14	high
86702	RHEL 7 : kernel (RHSA-2015:1778)	Nessus	Red Hat Local Security Checks	2015/11/3	2025/4/15	critical
286393	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002226)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/15	medium
289141	MiracleLinux 7 : kernel-3.10.0-229.14.1.el7 (AXSA:2015-504:03)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/19	critical
84124	Ubuntu 14.10 : linux vulnerabilities (USN-2637-1)	Nessus	Ubuntu Local Security Checks	2015/6/11	2021/1/19	medium
286424	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001947)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/15	medium
81717	Fedora 21 : kernel-3.18.8-201.fc21 (2015-3011)	Nessus	Fedora Local Security Checks	2015/3/10	2021/1/11	critical
81863	Fedora 20 : kernel-3.18.9-100.fc20 (2015-3594)	Nessus	Fedora Local Security Checks	2015/3/17	2021/1/11	critical
84123	Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-2636-1)	Nessus	Ubuntu Local Security Checks	2015/6/11	2024/8/27	high
85979	RHEL 6 : kernel-rt (RHSA-2015:1787)	Nessus	Red Hat Local Security Checks	2015/9/17	2024/6/3	critical

检测

插件搜索

critical

high

critical

medium

critical

medium

medium

critical

critical

high

critical