The linux kernel did not properly account for PTE pages when deciding which task to kill in out of memory conditions. A local, unprivileged could exploit this flaw to cause a denial of service. (CVE-2011-2498)

A flaw was discovered in the TOMOYO LSM's handling of mount system calls. An unprivileged user could oops the system causing a denial of service. (CVE-2011-2518)

Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service.
(CVE-2011-3353)

A bug was discovered in the Linux kernel's calculation of OOM (Out of memory) scores, that would result in the wrong process being killed. A user could use this to kill the process with the highest OOM score, even if that process belongs to another user or the system.
(CVE-2011-4097)

A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. (CVE-2011-4622)

A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. (CVE-2012-0038)

Chen Haogang discovered an integer overflow that could result in memory corruption. A local unprivileged user could use this to crash the system. (CVE-2012-0044)

A flaw was found in the linux kernels IPv4 IGMP query processing. A remote attacker could exploit this to cause a denial of service.
(CVE-2012-0207).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

a. vCenter and ESX update to JRE 1.6.0 Update 31

   The Oracle (Sun) JRE is updated to version 1.6.0_31, which    addresses multiple security issues. Oracle has documented the    CVE identifiers that are addressed by this update in the Oracle    Java SE Critical Patch Update Advisory of February 2012.

b. vCenter Update Manager update to JRE 1.5.0 Update 36

   The Oracle (Sun) JRE is updated to 1.5.0_36 to address multiple    security issues.  Oracle has documented the CVE identifiers that    are addressed in JRE 1.5.0_36 in the Oracle Java SE Critical    Patch Update Advisory for June 2012.

c. Update to ESX/ESXi userworld OpenSSL library

   The ESX/ESXi userworld OpenSSL library is updated from version    0.9.8p to version 0.9.8t to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-4180, CVE-2010-4252,    CVE-2011-0014, CVE-2011-4108, CVE-2011-4109, CVE-2011-4576,    CVE-2011-4577, CVE-2011-4619, and CVE-2012-0050 to these issues.

d. Update to ESX service console OpenSSL RPM

   The service console OpenSSL RPM is updated to version    0.9.8e-22.el5_8.3 to resolve a security issue.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-2110 to this issue.

e. Update to ESX service console kernel

   The ESX service console kernel is updated to resolve multiple    security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2011-1833, CVE-2011-2484,    CVE-2011-2496, CVE-2011-3188, CVE-2011-3209, CVE-2011-3363,    CVE-2011-4110, CVE-2011-1020, CVE-2011-4132, CVE-2011-4324,    CVE-2011-4325, CVE-2012-0207, CVE-2011-2699, and CVE-2012-1583    to these issues.

f. Update to ESX service console Perl RPM

   The ESX service console Perl RPM is updated to    perl-5.8.8.32.1.8999.vmw to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2010-2761, CVE-2010-4410, and    CVE-2011-3597 to these issues.

g. Update to ESX service console libxml2 RPMs

   The ESX service console libmxl2 RPMs are updated to    libxml2-2.6.26-2.1.15.el5_8.2 and    libxml2-python-2.6.26-2.1.15.el5_8.2 to resolve a security    issue.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-0841 to this issue.

h. Update to ESX service console glibc RPM

   The ESX service console glibc RPM is updated to version    glibc-2.5-81.el5_8.1 to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)   has assigned the names CVE-2009-5029, CVE-2009-5064,    CVE-2010-0830, CVE-2011-1089, CVE-2011-4609, and CVE-2012-0864    to these issue.

i. Update to ESX service console GnuTLS RPM

   The ESX service console GnuTLS RPM is updated to version    1.4.1-7.el5_8.2 to resolve multiple security issues.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the names CVE-2011-4128, CVE-2012-1569, and    CVE-2012-1573 to these issues.

j. Update to ESX service console popt, rpm, rpm-libs,    and rpm-python RPMS

   The ESX service console popt, rpm, rpm-libs, and rpm-python RPMS    are updated to the following versions to resolve multiple    security issues :
      - popt-1.10.2.3-28.el5_8
      - rpm-4.4.2.3-28.el5_8
      - rpm-libs-4.4.2.3-28.el5_8
      - rpm-python-4.4.2.3-28.el5_8

   The Common Vulnerabilities and Exposures project (cve.mitre.org)    has assigned the name CVE-2012-0060, CVE-2012-0061, and    CVE-2012-0815 to these issues.

k. Vulnerability in third-party Apache Struts component

   The version of Apache Struts in vCenter Operations has been    updated to 2.3.4 which addresses an arbitrary file overwrite    vulnerability. This vulnerability allows an attacker to create    a denial of service by overwriting arbitrary files without    authentication. The attacker would need to be on the same network    as the system where vCOps is installed.

   The Common Vulnerabilities and Exposures project (cve.mitre.org) has    assigned the name CVE-2012-0393 to this issue.

   Note: Apache struts 2.3.4 addresses the following issues as well :
   CVE-2011-5057, CVE-2012-0391, CVE-2012-0392, CVE-2012-0394. It    was found that these do not affect vCOps.

   VMware would like to thank Alexander Minozhenko from ERPScan for    reporting this issue to us.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0107 advisory.

    - [misc] Move exit_robust_list to mm_release, null lists on cleanup (Laszlo Ersek) [771774 750283]     {CVE-2012-0028}
    - [scsi] fix 32-on-64 block device ioctls (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
    - [dm] do not forward ioctls from logical volumes to the underlying device (Paolo Bonzini) [752385 752386]     {CVE-2011-4127}
    - [block] fail SCSI passthrough ioctls on partition devices (Paolo Bonzini) [752385 752386]     {CVE-2011-4127}
    - [block] add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [752385 752386] {CVE-2011-4127}
    - [fs] ext4: fix BUG_ON() in ext4_ext_insert_extent() (Lukas Czerner) [747943 747946] {CVE-2011-3638}
    - [fs] jbd2: clear BH_Delay & BH_Unwritten in journal_unmap_buffer (Eric Sandeen) [783477 783284]     {CVE-2011-4086}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote VMware ESX / ESXi host is missing a security-related patch.
It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party libraries :

  - Apache Struts
  - glibc
  - GnuTLS
  - JRE
  - kernel
  - libxml2
  - OpenSSL
  - Perl
  - popt and rpm

A flaw was discovered in the TOMOYO LSM's handling of mount system calls. An unprivileged user could oops the system causing a denial of service. (CVE-2011-2518)

A bug was discovered in the Linux kernel's calculation of OOM (Out of memory) scores, that would result in the wrong process being killed. A user could use this to kill the process with the highest OOM score, even if that process belongs to another user or the system.
(CVE-2011-4097)

A flaw was found in the linux kernels IPv4 IGMP query processing. A remote attacker could exploit this to cause a denial of service.
(CVE-2012-0207).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0350 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux     operating system.

    This update fixes the following security issues:

    * A buffer overflow flaw was found in the way the Linux kernel's XFS file     system implementation handled links with overly long path names. A local,     unprivileged user could use this flaw to cause a denial of service or     escalate their privileges by mounting a specially-crafted disk.
    (CVE-2011-4077, Moderate)

    * Flaws in ghash_update() and ghash_final() could allow a local,     unprivileged user to cause a denial of service. (CVE-2011-4081, Moderate)

    * A flaw was found in the Linux kernel's Journaling Block Device (JBD). A     local, unprivileged user could use this flaw to crash the system by     mounting a specially-crafted ext3 or ext4 disk. (CVE-2011-4132, Moderate)

    * It was found that the kvm_vm_ioctl_assign_device() function in the KVM     (Kernel-based Virtual Machine) subsystem of a Linux kernel did not check if     the user requesting device assignment was privileged or not. A local,     unprivileged user on the host could assign unused PCI devices, or even     devices that were in use and whose resources were not properly claimed by     the respective drivers, which could result in the host crashing.
    (CVE-2011-4347, Moderate)

    * Two flaws were found in the way the Linux kernel's __sys_sendmsg()     function, when invoked via the sendmmsg() system call, accessed user-space     memory. A local, unprivileged user could use these flaws to cause a denial     of service. (CVE-2011-4594, Moderate)

    * The RHSA-2011:1530 kernel update introduced an integer overflow flaw in     the Linux kernel. On PowerPC systems, a local, unprivileged user could use     this flaw to cause a denial of service. (CVE-2011-4611, Moderate)

    * A flaw was found in the way the KVM subsystem of a Linux kernel handled     PIT (Programmable Interval Timer) IRQs (interrupt requests) when there was     no virtual interrupt controller set up. A local, unprivileged user on the     host could force this situation to occur, resulting in the host crashing.
    (CVE-2011-4622, Moderate)

    * A flaw was found in the way the Linux kernel's XFS file system     implementation handled on-disk Access Control Lists (ACLs). A local,     unprivileged user could use this flaw to cause a denial of service or     escalate their privileges by mounting a specially-crafted disk.
    (CVE-2012-0038, Moderate)

    * A flaw was found in the way the Linux kernel's KVM hypervisor     implementation emulated the syscall instruction for 32-bit guests. An     unprivileged guest user could trigger this flaw to crash the guest.
    (CVE-2012-0045, Moderate)

    * A divide-by-zero flaw was found in the Linux kernel's igmp_heard_query()     function. An attacker able to send certain IGMP (Internet Group Management     Protocol) packets to a target system could use this flaw to cause a denial     of service. (CVE-2012-0207, Moderate)

    Red Hat would like to thank Nick Bowler for reporting CVE-2011-4081; Sasha     Levin for reporting CVE-2011-4347; Tetsuo Handa for reporting     CVE-2011-4594; Maynard Johnson for reporting CVE-2011-4611; Wang Xi for     reporting CVE-2012-0038; Stephan Brwolf for reporting CVE-2012-0045; and     Simon McVittie for reporting CVE-2012-0207. Upstream acknowledges Mathieu     Desnoyers as the original reporter of CVE-2011-4594.

    This update also fixes several bugs. Documentation for these changes will     be available shortly from the Technical Notes document linked to in the     References section.

    Users should upgrade to these updated packages, which contain backported     patches to correct these issues, and fix the bugs noted in the Technical     Notes. The system must be rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

This update fixes the following security issues :

  - A buffer overflow flaw was found in the way the Linux     kernel's XFS file system implementation handled links     with overly long path names. A local, unprivileged user     could use this flaw to cause a denial of service or     escalate their privileges by mounting a specially     crafted disk. (CVE-2011-4077, Moderate)

  - Flaws in ghash_update() and ghash_final() could allow a     local, unprivileged user to cause a denial of service.
    (CVE-2011-4081, Moderate)

  - A flaw was found in the Linux kernel's Journaling Block     Device (JBD). A local, unprivileged user could use this     flaw to crash the system by mounting a specially crafted     ext3 or ext4 disk. (CVE-2011-4132, Moderate)

  - It was found that the kvm_vm_ioctl_assign_device()     function in the KVM (Kernel-based Virtual Machine)     subsystem of a Linux kernel did not check if the user     requesting device assignment was privileged or not. A     local, unprivileged user on the host could assign unused     PCI devices, or even devices that were in use and whose     resources were not properly claimed by the respective     drivers, which could result in the host crashing.
    (CVE-2011-4347, Moderate)

  - Two flaws were found in the way the Linux kernel's
    __sys_sendmsg() function, when invoked via the     sendmmsg() system call, accessed user-space memory. A     local, unprivileged user could use these flaws to cause     a denial of service. (CVE-2011-4594, Moderate)

  - A flaw was found in the way the KVM subsystem of a Linux     kernel handled PIT (Programmable Interval Timer) IRQs     (interrupt requests) when there was no virtual interrupt     controller set up. A local, unprivileged user on the     host could force this situation to occur, resulting in     the host crashing. (CVE-2011-4622, Moderate)

  - A flaw was found in the way the Linux kernel's XFS file     system implementation handled on-disk Access Control     Lists (ACLs). A local, unprivileged user could use this     flaw to cause a denial of service or escalate their     privileges by mounting a specially crafted disk.
    (CVE-2012-0038, Moderate)

  - A flaw was found in the way the Linux kernel's KVM     hypervisor implementation emulated the syscall     instruction for 32-bit guests. An unprivileged guest     user could trigger this flaw to crash the guest.
    (CVE-2012-0045, Moderate)

  - A divide-by-zero flaw was found in the Linux kernel's     igmp_heard_query() function. An attacker able to send     certain IGMP (Internet Group Management Protocol)     packets to a target system could use this flaw to cause     a denial of service. (CVE-2012-0207, Moderate)

Users should upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory.

    - [fs] xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink() (Carlos Maiolino) [749161     694702] {CVE-2011-4077}
    - [fs] xfs: Fix memory corruption in xfs_readlink (Carlos Maiolino) [749161 694702] {CVE-2011-4077}
    - [net] igmp: Avoid zero delay when receiving odd mixture of IGMP queries (Jiri Pirko) [772870 772871]     {CVE-2012-0207}
    - [fs] xfs: validate acl count (Eric Sandeen) [773282 773283] {CVE-2012-0038}
    - [virt] kvm: x86: fix missing checks in syscall emulation (Marcelo Tosatti) [773390 773391]     {CVE-2012-0045}
    - [virt] kvm: x86: extend 'struct x86_emulate_ops' with 'get_cpuid' (Marcelo Tosatti) [773390 773391]     {CVE-2012-0045}
    - [kernel] crypto: ghash - Avoid null pointer dereference if no key is set (Jiri Benc) [749481 749482]     {CVE-2011-4081}
    - [fs] jbd2: validate sb->s_first in journal_get_superblock() (Eryu Guan) [753344 693981] {CVE-2011-4132}
    - [net] fix unsafe pointer access in sendmmsg (Jiri Benc) [761668 760798] {CVE-2011-4594}
    - [perf] powerpc: Handle events that raise an exception without overflowing (Steve Best) [767917 755737]     {CVE-2011-4611}
    - [virt] x86: Prevent starting PIT timers in the absence of irqchip support (Marcelo Tosatti) [769634     769550] {CVE-2011-4622}
    - [virt] KVM: Device assignment permission checks (Alex Williamson) [756092 756093] {CVE-2011-4347}
    - [virt] KVM: Remove ability to assign a device without iommu support (Alex Williamson) [756092 756093]     {CVE-2011-4347}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
58267	Ubuntu 10.04 LTS : linux-lts-backport-natty vulnerabilities (USN-1386-1)	Nessus	Ubuntu Local Security Checks	2012/3/7	2020/2/26	medium
61747	VMSA-2012-0013 : VMware vSphere and vCOps updates to third-party libraries	Nessus	VMware ESX Local Security Checks	2012/8/31	2021/1/6	critical
68454	Oracle Linux 5 : kernel (ELSA-2012-0107)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	high
89038	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2012-0013) (remote check)	Nessus	Misc.	2016/2/29	2021/1/6	high
58170	Ubuntu 11.04 : linux vulnerabilities (USN-1380-1)	Nessus	Ubuntu Local Security Checks	2012/2/29	2020/2/26	medium
58261	RHEL 6 : kernel (RHSA-2012:0350)	Nessus	Red Hat Local Security Checks	2012/3/7	2024/11/4	high
61277	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120306)	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
68491	Oracle Linux 6 : kernel (ELSA-2012-0350)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	high

检测

插件搜索

medium

critical

high

high

medium

high

high

high