The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-643:01 advisory.

    KVM (for Kernel-based Virtual Machine) is a full virtualization solution for Linux on x86 hardware.
    Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual     machine has private virtualized hardware: a network card, disk, graphics adapter, etc.
    Security issues fixed with this release:
     CVE-2011-4622     The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not     properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt     controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer     dereference) by starting a timer.
     CVE-2011-0029     Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm     0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and     possibly execute arbitrary code via crafted legacy mode packets.
     CVE-2011-4347     No information available at the time of writing, please refer to the CVE the links below.
    Fixed bugs:
     Previously, if the virtual CPU affinity was set, asynchronous I/O threads, created by threads of the     virtual CPU, inherited the affinity and could make a guest VM unresponsive, unable to reboot or shut down,     with the following message:
    INFO: task insmod:426 blocked for more than 120 seconds. echo 0 > /proc/sys/kernel/hung_task_timeout_secs     disables this message.
    Asynchronous I/O threads are now created by the main thread and inherit the main thread affinity; VMs do     not become unstable anymore.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. (CVE-2011-4127)

A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. (CVE-2011-4622)

A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. (CVE-2012-0038)

A flaw was found in the Linux kernel's ext4 file system when mounting a corrupt filesystem. A user-assisted remote attacker could exploit this flaw to cause a denial of service. (CVE-2012-2100).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-4307     Nageswara R Sastry reported an issue in the ext4     filesystem. Local users with the privileges to mount a     filesystem can cause a denial of service (BUG) by     providing a s_log_groups_per_flex value greater than 31.

  - CVE-2011-1833     Vasiliy Kulikov of Openwall and Dan Rosenberg discovered     an information leak in the eCryptfs filesystem. Local     users were able to mount arbitrary directories.

  - CVE-2011-4347     Sasha Levin reported an issue in the device assignment     functionality in KVM. Local users with permission to     access /dev/kvm could assign unused pci devices to a     guest and cause a denial of service (crash).

  - CVE-2012-0045     Stephan Barwolf reported an issue in KVM. Local users in     a 32-bit guest running on a 64-bit system can crash the     guest with a syscall instruction.

  - CVE-2012-1090     CAI Qian reported an issue in the CIFS filesystem. A     reference count leak can occur during the lookup of     special files, resulting in a denial of service (oops)     on umount.

  - CVE-2012-1097     H. Peter Anvin reported an issue in the regset     infrastructure. Local users can cause a denial of     service (NULL pointer dereference) by triggering the     write methods of readonly regsets.

Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. (CVE-2011-4347)

Stephan Barwolf discovered a flaw in the KVM (kernel-based virtual machine) subsystem of the Linux kernel. A local unprivileged user can crash use this flaw to crash VMs causing a deny of service.
(CVE-2012-0045)

H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system.
(CVE-2012-1097)

A flaw was discovered in the Linux kernel's cgroups subset. A local attacker could use this flaw to crash the system. (CVE-2012-1146).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. (CVE-2011-4347)

Stephan Barwolf discovered a flaw in the KVM (kernel-based virtual machine) subsystem of the Linux kernel. A local unprivileged user can crash use this flaw to crash VMs causing a deny of service.
(CVE-2012-0045)

A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. (CVE-2012-1090)

H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system.
(CVE-2012-1097)

Tetsuo Handa reported a flaw in the OOM (out of memory) killer of the Linux kernel. A local unprivileged user can exploit this flaw to cause system unstability and denial of services. (CVE-2012-4398).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0350 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    This update fixes the following security issues:

    * A buffer overflow flaw was found in the way the Linux kernel's XFS file     system implementation handled links with overly long path names. A local,     unprivileged user could use this flaw to cause a denial of service or     escalate their privileges by mounting a specially-crafted disk.
    (CVE-2011-4077, Moderate)

    * Flaws in ghash_update() and ghash_final() could allow a local,     unprivileged user to cause a denial of service. (CVE-2011-4081, Moderate)

    * A flaw was found in the Linux kernel's Journaling Block Device (JBD). A     local, unprivileged user could use this flaw to crash the system by     mounting a specially-crafted ext3 or ext4 disk. (CVE-2011-4132, Moderate)

    * It was found that the kvm_vm_ioctl_assign_device() function in the KVM     (Kernel-based Virtual Machine) subsystem of a Linux kernel did not check if     the user requesting device assignment was privileged or not. A local,     unprivileged user on the host could assign unused PCI devices, or even     devices that were in use and whose resources were not properly claimed by     the respective drivers, which could result in the host crashing.
    (CVE-2011-4347, Moderate)

    * Two flaws were found in the way the Linux kernel's __sys_sendmsg()     function, when invoked via the sendmmsg() system call, accessed user-space     memory. A local, unprivileged user could use these flaws to cause a denial     of service. (CVE-2011-4594, Moderate)

    * The RHSA-2011:1530 kernel update introduced an integer overflow flaw in     the Linux kernel. On PowerPC systems, a local, unprivileged user could use     this flaw to cause a denial of service. (CVE-2011-4611, Moderate)

    * A flaw was found in the way the KVM subsystem of a Linux kernel handled     PIT (Programmable Interval Timer) IRQs (interrupt requests) when there was     no virtual interrupt controller set up. A local, unprivileged user on the     host could force this situation to occur, resulting in the host crashing.
    (CVE-2011-4622, Moderate)

    * A flaw was found in the way the Linux kernel's XFS file system     implementation handled on-disk Access Control Lists (ACLs). A local,     unprivileged user could use this flaw to cause a denial of service or     escalate their privileges by mounting a specially-crafted disk.
    (CVE-2012-0038, Moderate)

    * A flaw was found in the way the Linux kernel's KVM hypervisor     implementation emulated the syscall instruction for 32-bit guests. An     unprivileged guest user could trigger this flaw to crash the guest.
    (CVE-2012-0045, Moderate)

    * A divide-by-zero flaw was found in the Linux kernel's igmp_heard_query()     function. An attacker able to send certain IGMP (Internet Group Management     Protocol) packets to a target system could use this flaw to cause a denial     of service. (CVE-2012-0207, Moderate)

    Red Hat would like to thank Nick Bowler for reporting CVE-2011-4081; Sasha     Levin for reporting CVE-2011-4347; Tetsuo Handa for reporting     CVE-2011-4594; Maynard Johnson for reporting CVE-2011-4611; Wang Xi for     reporting CVE-2012-0038; Stephan Brwolf for reporting CVE-2012-0045; and     Simon McVittie for reporting CVE-2012-0207. Upstream acknowledges Mathieu     Desnoyers as the original reporter of CVE-2011-4594.

    This update also fixes several bugs. Documentation for these changes will     be available shortly from the Technical Notes document linked to in the     References section.

    Users should upgrade to these updated packages, which contain backported     patches to correct these issues, and fix the bugs noted in the Technical     Notes. The system must be rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This USN was released in error and has been removed.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Somnath Kotur discovered an error in the Linux kernel's VLAN (virtual lan) and be2net drivers. An attacker on the local network could exploit this flaw to cause a denial of service. (CVE-2011-3347).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

This update fixes the following security issues :

  - A buffer overflow flaw was found in the way the Linux     kernel's XFS file system implementation handled links     with overly long path names. A local, unprivileged user     could use this flaw to cause a denial of service or     escalate their privileges by mounting a specially     crafted disk. (CVE-2011-4077, Moderate)

  - Flaws in ghash_update() and ghash_final() could allow a     local, unprivileged user to cause a denial of service.
    (CVE-2011-4081, Moderate)

  - A flaw was found in the Linux kernel's Journaling Block     Device (JBD). A local, unprivileged user could use this     flaw to crash the system by mounting a specially crafted     ext3 or ext4 disk. (CVE-2011-4132, Moderate)

  - It was found that the kvm_vm_ioctl_assign_device()     function in the KVM (Kernel-based Virtual Machine)     subsystem of a Linux kernel did not check if the user     requesting device assignment was privileged or not. A     local, unprivileged user on the host could assign unused     PCI devices, or even devices that were in use and whose     resources were not properly claimed by the respective     drivers, which could result in the host crashing.
    (CVE-2011-4347, Moderate)

  - Two flaws were found in the way the Linux kernel's
    __sys_sendmsg() function, when invoked via the     sendmmsg() system call, accessed user-space memory. A     local, unprivileged user could use these flaws to cause     a denial of service. (CVE-2011-4594, Moderate)

  - A flaw was found in the way the KVM subsystem of a Linux     kernel handled PIT (Programmable Interval Timer) IRQs     (interrupt requests) when there was no virtual interrupt     controller set up. A local, unprivileged user on the     host could force this situation to occur, resulting in     the host crashing. (CVE-2011-4622, Moderate)

  - A flaw was found in the way the Linux kernel's XFS file     system implementation handled on-disk Access Control     Lists (ACLs). A local, unprivileged user could use this     flaw to cause a denial of service or escalate their     privileges by mounting a specially crafted disk.
    (CVE-2012-0038, Moderate)

  - A flaw was found in the way the Linux kernel's KVM     hypervisor implementation emulated the syscall     instruction for 32-bit guests. An unprivileged guest     user could trigger this flaw to crash the guest.
    (CVE-2012-0045, Moderate)

  - A divide-by-zero flaw was found in the Linux kernel's     igmp_heard_query() function. An attacker able to send     certain IGMP (Internet Group Management Protocol)     packets to a target system could use this flaw to cause     a denial of service. (CVE-2012-0207, Moderate)

Users should upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1042 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    This update fixes the following security issues:

    * A local, unprivileged user could use an integer overflow flaw in     drm_mode_dirtyfb_ioctl() to cause a denial of service or escalate their     privileges. (CVE-2012-0044, Important)

    * It was found that the kvm_vm_ioctl_assign_device() function in the KVM     (Kernel-based Virtual Machine) subsystem of a Linux kernel did not check if     the user requesting device assignment was privileged or not. A local,     unprivileged user on the host could assign unused PCI devices, or even     devices that were in use and whose resources were not properly claimed by     the respective drivers, which could result in the host crashing.
    (CVE-2011-4347, Moderate)

    * A flaw was found in the way the Linux kernel's XFS file system     implementation handled on-disk Access Control Lists (ACLs). A local,     unprivileged user could use this flaw to cause a denial of service or     escalate their privileges by mounting a specially-crafted disk.
    (CVE-2012-0038, Moderate)

    * It was found that the Linux kernel's register set (regset) common     infrastructure implementation did not check if the required get and set     handlers were initialized. A local, unprivileged user could use this flaw     to cause a denial of service by performing a register set operation with a     ptrace() PTRACE_SETREGSET or PTRACE_GETREGSET request. (CVE-2012-1097,     Moderate)

    * A race condition was found in the Linux kernel's memory management     subsystem in the way pmd_none_or_clear_bad(), when called with mmap_sem in     read mode, and Transparent Huge Pages (THP) page faults interacted. A     privileged user in a KVM guest with the ballooning functionality enabled     could potentially use this flaw to crash the host. A local, unprivileged     user could use this flaw to crash the system. (CVE-2012-1179, Moderate)

    Red Hat would like to thank Chen Haogang for reporting CVE-2012-0044; Sasha     Levin for reporting CVE-2011-4347; Wang Xi for reporting CVE-2012-0038; and     H. Peter Anvin for reporting CVE-2012-1097.

    This update also fixes the following bugs:

    * When a RoCE (RDMA over Converged Ethernet) adapter with active RoCE     communications was taken down suddenly (either by adapter failure or the     intentional shutdown of the interface), the ongoing RoCE communications     could cause the kernel to panic and render the machine unusable. A patch     has been provided to protect the kernel in this situation and to pass an     error up to the application still using the interface after it has been     taken down instead. (BZ#799944)

    * The fix for Red Hat Bugzilla bug 713494, released via RHSA-2011:0928,     introduced a regression. Attempting to change the state of certain     features, such as GRO (Generic Receive Offload) or TSO (TCP segment     offloading), for a 10 Gigabit Ethernet card that is being used in a     virtual LAN (VLAN) resulted in a kernel panic. (BZ#816974)

    * If a new file was created on a Network File System version 4 (NFSv4)     share, the ownership was set to nfsnobody (-2) until it was possible to     upcall to the idmapper. As a consequence, subsequent file system operations     could incorrectly use -2 for the user and group IDs for the given file,     causing certain operations to fail. In reported cases, this issue also     caused Viminfo file is not writable errors for users running Vim with     files on an NFSv4 share. (BZ#820960)

    Users should upgrade to these updated packages, which contain backported     patches to correct these issues. The system must be rebooted for this     update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory.

    - [fs] xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink() (Carlos Maiolino) [749161     694702] {CVE-2011-4077}
    - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749161 694702] {CVE-2011-4077}
    - [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772870 772871]     {CVE-2012-0207}
    - [fs] xfs: validate acl count (Eric Sandeen) [773282 773283] {CVE-2012-0038}
    - [virt] kvm: x86: fix missing checks in syscall emulation (Marcelo Tosatti) [773390 773391]     {CVE-2012-0045}
    - [virt] kvm: x86: extend 'struct x86_emulate_ops' with 'get_cpuid' (Marcelo Tosatti) [773390 773391]     {CVE-2012-0045}
    - [kernel] crypto: ghash - Avoid null pointer dereference if no key is set (Jiri Benc) [749481 749482]     {CVE-2011-4081}
    - [fs] jbd2: validate sb->s_first in journal_get_superblock() (Eryu Guan) [753344 693981] {CVE-2011-4132}
    - [net] fix unsafe pointer access in sendmmsg (Jiri Benc) [761668 760798] {CVE-2011-4594}
    - [perf] powerpc: Handle events that raise an exception without overflowing (Steve Best) [767917 755737]     {CVE-2011-4611}
    - [virt] x86: Prevent starting PIT timers in the absence of irqchip support (Marcelo Tosatti) [769634     769550] {CVE-2011-4622}
    - [virt] KVM: Device assignment permission checks (Alex Williamson) [756092 756093] {CVE-2011-4347}
    - [virt] KVM: Remove ability to assign a device without iommu support (Alex Williamson) [756092 756093]     {CVE-2011-4347}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284424	MiracleLinux 3 : kvm-83-249.0.1.AXS3 (AXSA:2012-643:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
58270	Ubuntu 10.04 LTS : linux vulnerabilities (USN-1389-1)	Nessus	Ubuntu Local Security Checks	2012/3/7	2019/9/19	high
58486	Debian DSA-2443-1 : linux-2.6 - privilege escalation/denial of service	Nessus	Debian Local Security Checks	2012/3/27	2021/1/11	high
58741	Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1421-1)	Nessus	Ubuntu Local Security Checks	2012/4/13	2019/9/19	critical
58871	Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1426-1)	Nessus	Ubuntu Local Security Checks	2012/4/25	2019/9/19	high
58261	RHEL 6 : kernel (RHSA-2012:0350)	Nessus	Red Hat Local Security Checks	2012/3/7	2024/11/4	high
58495	Ubuntu 10.10 : linux vulnerabilities (USN-1407-1)	Nessus	Ubuntu Local Security Checks	2012/3/27	2019/9/19	critical
58497	Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerabilities (USN-1409-1)	Nessus	Ubuntu Local Security Checks	2012/3/27	2019/9/19	medium
58870	Ubuntu 10.04 LTS : linux vulnerabilities (USN-1425-1)	Nessus	Ubuntu Local Security Checks	2012/4/25	2019/9/19	high
61277	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120306)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
64044	RHEL 6 : kernel (RHSA-2012:1042)	Nessus	Red Hat Local Security Checks	2013/1/24	2025/4/15	high
68491	Oracle Linux 6 : kernel (ELSA-2012-0350)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	high

检测

插件搜索

high

high

high

critical

high

high

critical

medium

high

high

high

high