The openSUSE 12.3 kernel was updated to fix security issues :

This will be the final kernel update for openSUSE 13.2 during its lifetime, which ends January 4th 2015.

CVE-2014-9322: A local privilege escalation in the x86_64 32bit compatibility signal handling was fixed, which could be used by local attackers to crash the machine or execute code.

CVE-2014-9090: The do_double_fault function in arch/x86/kernel/traps.c in the Linux kernel did not properly handle faults associated with the Stack Segment (SS) segment register, which allowed local users to cause a denial of service (panic) via a modify_ldt system call, as demonstrated by sigreturn_32 in the linux-clock-tests test suite.

CVE-2014-8133: Insufficient validation of TLS register usage could leak information from the kernel stack to userspace.

CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allowed local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.

CVE-2014-8884: Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel allowed local users to cause a denial of service (system crash) or possibly gain privileges via a large message length in an ioctl call.

CVE-2014-3186: Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel, as used in Android on Nexus 7 devices, allowed physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that sends a large report.

CVE-2014-7841: The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel, when ASCONF is used, allowed remote attackers to cause a denial of service (NULL pointer dereference and system crash) via a malformed INIT chunk.

CVE-2014-4608: Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel allowed context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run.

CVE-2014-8709: The ieee80211_fragment function in net/mac80211/tx.c in the Linux kernel did not properly maintain a certain tail pointer, which allowed remote attackers to obtain sensitive cleartext information by reading packets.

CVE-2014-3185: Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel allowed physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with a bulk response.

CVE-2014-3184: The report_fixup functions in the HID subsystem in the Linux kernel might have allowed physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor, related to (1) drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3) drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6) drivers/hid/hid-sunplus.c.

CVE-2014-3182: Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel allowed physically proximate attackers to execute arbitrary code or cause a denial of service (invalid kfree) via a crafted device that provides a malformed REPORT_TYPE_NOTIF_DEVICE_UNPAIRED value.

CVE-2014-3181: Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel allowed physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted device that provides a large amount of (1) EHCI or (2) XHCI data associated with an event.

CVE-2014-7826: kernel/trace/trace_syscalls.c in the Linux kernel did not properly handle private syscall numbers during use of the ftrace subsystem, which allowed local users to gain privileges or cause a denial of service (invalid pointer dereference) via a crafted application.

CVE-2013-7263: The Linux kernel updated certain length values before ensuring that associated data structures have been initialized, which allowed local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c. This update fixes the leak of the port number when using ipv6 sockets. (bsc#853040).

CVE-2014-6410: The __udf_read_inode function in fs/udf/inode.c in the Linux kernel did not restrict the amount of ICB indirection, which allowed physically proximate attackers to cause a denial of service (infinite loop or stack consumption) via a UDF filesystem with a crafted inode.

CVE-2014-5471: Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel allowed local users to cause a denial of service (uncontrolled recursion, and system crash or reboot) via a crafted iso9660 image with a CL entry referring to a directory entry that has a CL entry.

CVE-2014-5472: The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel allowed local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-referential CL entry.

CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allowed local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.

CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel allowed local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel, when SCTP authentication is enabled, allowed remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by starting to establish an association between two endpoints immediately after an exchange of INIT and INIT ACK chunks to establish an earlier association between these endpoints in the opposite direction.

CVE-2014-4171: mm/shmem.c in the Linux kernel did not properly implement the interaction between range notification and hole punching, which allowed local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call.

CVE-2013-2888, CVE-2013-2889, CVE-2013-2890, CVE-2013-2891, CVE-2013-2892, CVE-2013-2893, CVE-2013-2894, CVE-2013-2895, CVE-2013-2896, CVE-2013-2897, CVE-2013-2898, CVE-2013-2899: Multiple issues in the Human Interface Device (HID) subsystem in the Linux kernel allowed physically proximate attackers to cause a denial of service or system crash via (heap-based out-of-bounds write) via a crafted device. (Not separately listed.)

Other bugfixes :

  - xfs: mark all internal workqueues as freezable     (bnc#899785).

  - target/rd: Refactor rd_build_device_space +     rd_release_device_space (bnc#882639)

  - Enable CONFIG_ATH9K_HTC for armv7hl/omap2plus config     (bnc#890624)

  - swiotlb: don't assume PA 0 is invalid (bnc#865882).

  - drm/i915: Apply alignment restrictions on scanout     surfaces for VT-d (bnc#818561).

  - tg3: Change nvram command timeout value to 50ms     (bnc#768714).

  - tg3: Override clock, link aware and link idle mode     during NVRAM dump (bnc#768714).

  - tg3: Set the MAC clock to the fastest speed during boot     code load (bnc#768714).

Dan Carpenter discovered an information leak in the HP Smart Aray and Compaq SMART2 disk-array driver in the Linux kernel. A local user could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2013-2147)

Kees Cook discovered flaw in the Human Interface Device (HID) subsystem when CONFIG_HID_ZEROPLUS is enabled. A physically proximate attacker could leverage this flaw to cause a denial of service via a specially crafted device. (CVE-2013-2889)

Kees Cook discovered another flaw in the Human Interface Device (HID) subsystem of the Linux kernel when any of CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF are enabled. A physcially proximate attacker can leverage this flaw to cause a denial of service vias a specially crafted device. (CVE-2013-2893)

Kees Cook discovered yet another flaw in the Human Interface Device (HID) subsystem of the Linux kernel when CONFIG_HID_MULTITOUCH is enabled. A physically proximate attacker could leverage this flaw to cause a denial of service (OOPS) via a specially crafted device.
(CVE-2013-2897)

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. (CVE-2013-4299).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2013:1527 advisory.

    The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization     Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor     is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes     everything necessary to run and manage virtual machines: a subset of the     Red Hat Enterprise Linux operating environment and the Red Hat Enterprise     Virtualization Agent.

    Note: Red Hat Enterprise Virtualization Hypervisor is only available for     the Intel 64 and AMD64 architectures with virtualization extensions.

    Upgrade Note: If you upgrade the Red Hat Enterprise Virtualization     Hypervisor through the 3.2 Manager administration portal, the Host may     appear with the status of Install Failed. If this happens, place the host     into maintenance mode, then activate it again to get the host back to an     Up state.

    A buffer overflow flaw was found in the way QEMU processed the SCSI REPORT     LUNS command when more than 256 LUNs were specified for a single SCSI     target. A privileged guest user could use this flaw to corrupt QEMU process     memory on the host, which could potentially result in arbitrary code     execution on the host with the privileges of the QEMU process.
    (CVE-2013-4344)

    Multiple flaws were found in the way Linux kernel handled HID (Human     Interface Device) reports. An attacker with physical access to the system     could use this flaw to crash the system or, potentially, escalate their     privileges on the system. (CVE-2013-2888, CVE-2013-2889, CVE-2013-2892)

    A flaw was found in the way the Python SSL module handled X.509 certificate     fields that contain a NULL byte. An attacker could potentially exploit this     flaw to conduct man-in-the-middle attacks to spoof SSL servers. Note that     to exploit this issue, an attacker would need to obtain a carefully crafted     certificate signed by an authority that the client trusts. (CVE-2013-4238)

    The default OpenSSH configuration made it easy for remote attackers to     exhaust unauthorized connection slots and prevent other users from being     able to log in to a system. This flaw has been addressed by enabling random     early connection drops by setting MaxStartups to 10:30:100 by default.
    For more information, refer to the sshd_config(5) man page. (CVE-2010-5107)

    The CVE-2013-4344 issue was discovered by Asias He of Red Hat.

    This updated package provides updated components that include fixes for     various security issues. These issues have no security impact on Red Hat     Enterprise Virtualization Hypervisor itself, however. The security fixes     included in this update address the following CVE numbers:

    CVE-2012-0786 and CVE-2012-0787 (augeas issues)

    CVE-2013-1813 (busybox issue)

    CVE-2013-0221, CVE-2013-0222, and CVE-2013-0223 (coreutils issues)

    CVE-2012-4453 (dracut issue)

    CVE-2013-4332, CVE-2013-0242, and CVE-2013-1914 (glibc issues)

    CVE-2013-4387, CVE-2013-0343, CVE-2013-4345, CVE-2013-4591, CVE-2013-4592,     CVE-2012-6542, CVE-2013-3231, CVE-2013-1929, CVE-2012-6545, CVE-2013-1928,     CVE-2013-2164, CVE-2013-2234, and CVE-2013-2851 (kernel issues)

    CVE-2013-4242 (libgcrypt issue)

    CVE-2013-4419 (libguestfs issue)

    CVE-2013-1775, CVE-2013-2776, and CVE-2013-2777 (sudo issues)

    This update also fixes the following bug:

    * A previous version of the rhev-hypervisor6 package did not contain the     latest vhostmd package, which provides a metrics communication channel     between a host and its hosted virtual machines, allowing limited     introspection of host resource usage from within virtual machines. This has     been fixed, and rhev-hypervisor6 now includes the latest vhostmd package.
    (BZ#1026703)

    This update also contains the fixes from the following errata:

    * ovirt-node: https://rhn.redhat.com/errata/RHBA-2013-1528.html

    Users of the Red Hat Enterprise Virtualization Hypervisor are advised to     upgrade to this updated package, which corrects these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-258:01 advisory.

    The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel     handles the basic functions of the operating system: memory allocation, process allocation, device input     and output, etc.
    Security issues fixed with this release:
     CVE-2012-6542     The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return     value in certain circumstances, which allows local users to obtain sensitive information from kernel stack     memory via a crafted application that leverages an uninitialized pointer argument.
     CVE-2012-6544     The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain     structures, which allows local users to obtain sensitive information from kernel stack memory via a     crafted application that targets the (1) L2CAP or (2) HCI implementation.
     CVE-2012-6545     The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain     structures, which allows local users to obtain sensitive information from kernel memory via a crafted     application.
     CVE-2013-0343     The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly     handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a     denial of service (excessive retries and address-generation outage), and consequently obtain sensitive     information, via ICMPv6 Router Advertisement (RA) messages.
     CVE-2013-1860     Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux     kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system crash) or     possibly execute arbitrary code via a crafted cdc-wdm USB device.
     CVE-2013-1928     The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified     architectures lacks a certain error check, which might allow local users to obtain sensitive information     from kernel stack memory via a crafted VIDEO_SET_SPU_PALETTE ioctl call on a /dev/dvb device.
     CVE-2013-1929     Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the     Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system     crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital     Product Data (VPD) data structure.
     CVE-2013-2141     The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain     data structure, which allows local users to obtain sensitive information from kernel memory via a crafted     application that makes a (1) tkill or (2) tgkill system call.
     CVE-2013-2146     arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events     Subsystem is enabled, specifies an incorrect bitmask, which allows local users to cause a denial of     service (general protection fault and system crash) by attempting to set a reserved bit.
     CVE-2013-2164     The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows     local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning     CD-ROM drive.
     CVE-2013-2206     The sctp_sf_do_5_2_4_dupcook function in net/sctp/sm_statefuns.c in the SCTP implementation in the Linux     kernel before 3.8.5 does not properly handle associations during the processing of a duplicate COOKIE ECHO     chunk, which allows remote attackers to cause a denial of service (NULL pointer dereference and system     crash) or possibly have unspecified other impact via crafted SCTP traffic.
     CVE-2013-2224     A certain patch for the Linux kernel 2.6.32 allows local users to cause a denial of service (invalid free     operation and system crash) or possibly gain privileges via a sendmsg system call with the IP_RETOPTS     option, as demonstrated by hemlock.c. NOTE: this vulnerability exists because of an incorrect fix for     CVE-2012-3552.
     CVE-2013-2232     The ip6_sk_dst_check function in net/ipv6/ip6_output.c in the Linux kernel before 3.10 allows local users     to cause a denial of service (system crash) by using an AF_INET6 socket for a connection to an IPv4     interface.
     CVE-2013-2234     The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux     kernel before 3.10 do not initialize certain structure members, which allows local users to obtain     sensitive information from kernel heap memory by reading a broadcast message from the notify interface of     an IPSec key_socket.
     CVE-2013-2237     The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not     initialize a certain structure member, which allows local users to obtain sensitive information from     kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket.
     CVE-2013-2851     Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through     3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers     to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name.
     CVE-2013-2888     Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the     Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial     of service (heap memory corruption) via a crafted device that provides an invalid Report ID.
     CVE-2013-2889     drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11,     when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service     (heap-based out-of-bounds write) via a crafted device.
     CVE-2013-2892     drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when     CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service     (heap-based out-of-bounds write) via a crafted device.
     CVE-2013-2929     The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users     to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a     crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h.
     CVE-2013-3231     The llc_ui_recvmsg function in net/llc/af_llc.c in the Linux kernel before 3.9-rc7 does not initialize a     certain length variable, which allows local users to obtain sensitive information from kernel stack memory     via a crafted recvmsg or recvfrom system call.
     CVE-2013-4162     The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel     through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a     denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a     setsockopt system call.
     CVE-2013-4299     Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows     remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a     snapshot block device.
     CVE-2013-4345     Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4     makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple     requests for small amounts of data, leading to improper management of the state of the consumed data.
     CVE-2013-4387     net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP     Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which     allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have     unspecified other impact via network traffic that triggers a large response packet.
     CVE-2013-4470     The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly     initialize certain data structures, which allows local users to cause a denial of service (memory     corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK     option in a setsockopt system call and sends both short and long packets, related to the     ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in     net/ipv6/ip6_output.c.
     CVE-2013-4591     Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before     3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly     have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a     pathname on an NFSv4 filesystem.
     CVE-2013-4592     Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9     allows local users to cause a denial of service (memory consumption) by leveraging certain device access     to trigger movement of memory slots.
     CVE-2013-6367     The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through     3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via     crafted modifications of the TMICT value.
     CVE-2013-6368     The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a     denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.
     CVE-2013-6381     Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel     through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact     via an SNMP ioctl call with a length value that is incompatible with the command-buffer size.
     CVE-2013-7263     The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data     structures have been initialized, which allows local users to obtain sensitive information from kernel     stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c,     net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.
     CVE-2013-7265     The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain     length value before ensuring that an associated data structure has been initialized, which allows local     users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3)     recvmsg system call.
     CVE-2014-0055     The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package     before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc     errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.
     CVE-2014-0069     The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly     handle uncached write operations that copy fewer than the requested number of bytes, which allows local     users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and     system crash), or possibly gain privileges via a writev system call with a crafted pointer.
     CVE-2014-0101     The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not     validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which     allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an     SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.
    Main fixed bugs:
     Fixed a performance problem in the bonding driver that affected bridges and loopback interfaces: the     bonding module does not drop TCP segmentation offloading features for NO_CSUM devices any longer.
     Fixed bonding issues over VLAN with Solarflare network cards.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An information leak was discovered in the handling of ICMPv6 Router Advertisement (RA) messages in the Linux kernel's IPv6 network stack.
A remote attacker could exploit this flaw to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information. (CVE-2013-0343)

Kees Cook discovered flaw in the Human Interface Device (HID) subsystem of the Linux kernel. A physically proximate attacker could exploit this flaw to execute arbitrary code or cause a denial of service (heap memory corruption) via a specially crafted device that provides an invalid Report ID. (CVE-2013-2888)

Kees Cook discovered flaw in the Human Interface Device (HID) subsystem when CONFIG_HID_ZEROPLUS is enabled. A physically proximate attacker could leverage this flaw to cause a denial of service via a specially crafted device. (CVE-2013-2889)

Kees Cook discovered a flaw in the Human Interface Device (HID) subsystem of the Linux kerenl when CONFIG_HID_PANTHERLORD is enabled.
A physically proximate attacker could cause a denial of service (heap out-of-bounds write) via a specially crafted device. (CVE-2013-2892)

Kees Cook discovered another flaw in the Human Interface Device (HID) subsystem of the Linux kernel when any of CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF are enabled. A physcially proximate attacker can leverage this flaw to cause a denial of service vias a specially crafted device. (CVE-2013-2893)

Kees Cook discovered another flaw in the Human Interface Device (HID) subsystem of the Linux kernel when CONFIG_HID_LOGITECH_DJ is enabled.
A physically proximate attacker could cause a denial of service (OOPS) or obtain sensitive information from kernel memory via a specially crafted device. (CVE-2013-2895)

Kees Cook discovered a vulnerability in the Linux Kernel's Human Interface Device (HID) subsystem's support for N-Trig touch screens. A physically proximate attacker could exploit this flaw to cause a denial of service (OOPS) via a specially crafted device.
(CVE-2013-2896)

Kees Cook discovered yet another flaw in the Human Interface Device (HID) subsystem of the Linux kernel when CONFIG_HID_MULTITOUCH is enabled. A physically proximate attacker could leverage this flaw to cause a denial of service (OOPS) via a specially crafted device.
(CVE-2013-2897)

Kees Cook discovered a flaw in the Human Interface Device (HID) subsystem of the Linux kernel whe CONFIG_HID_PICOLCD is enabled. A physically proximate attacker could exploit this flaw to cause a denial of service (OOPS) via a specially crafted device.
(CVE-2013-2899)

Alan Chester reported a flaw in the IPv6 Stream Control Transmission Protocol (SCTP) of the Linux kernel. A remote attacker could exploit this flaw to obtain sensitive information by sniffing network traffic.
(CVE-2013-4350)

Dmitry Vyukov reported a flaw in the Linux kernel's handling of IPv6 UDP Fragmentation Offload (UFO) processing. A remote attacker could leverage this flaw to cause a denial of service (system crash).
(CVE-2013-4387).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2583 advisory.

    - HID: pantherlord: validate output report details (Kees Cook) [Orabug: 17841973] {CVE-2013-2892}
    - HID: zeroplus: validate output report details (Kees Cook) [Orabug: 17841968] {CVE-2013-2889}
    - HID: provide a helper for validating hid reports (Kees Cook) [Orabug: 17841968] {CVE-2013-2889}
    - KVM: Fix iommu map/unmap to handle memory slot moves (Alex Williamson) [Orabug: 17841960]     {CVE-2013-4592}
    - ansi_cprng: Fix off by one error in non-block size request (Jerry Snitselaar) [Orabug: 17837997]     {CVE-2013-4345}
    - HID: validate HID report id size (Kees Cook) [Orabug: 17841940] {CVE-2013-2888}
    - ipv6: remove max_addresses check from ipv6_create_tempaddr (Hannes Frederic Sowa) [Orabug: 17841911]     {CVE-2013-0343}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0057 for details.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
80150	openSUSE Security Update : the Linux Kernel (openSUSE-SU-2014:1669-1)	Nessus	SuSE Local Security Checks	2014/12/22	2021/1/19	high
70799	Ubuntu 10.04 LTS : linux vulnerabilities (USN-2015-1)	Nessus	Ubuntu Local Security Checks	2013/11/9	2019/9/19	medium
78979	RHEL 6 : rhev-hypervisor6 (RHSA-2013:1527)	Nessus	Red Hat Local Security Checks	2014/11/8	2025/4/15	high
289427	MiracleLinux 4 : kernel-2.6.32-431.11.2.el6 (AXSA:2014-258:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/19	medium
83611	SUSE SLES11 Security Update : kernel (SUSE-SU-2014:0287-1)	Nessus	SuSE Local Security Checks	2015/5/20	2021/1/19	high
70802	Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-2019-1)	Nessus	Ubuntu Local Security Checks	2013/11/9	2019/9/19	medium
71132	Oracle Linux 6 : Unbreakable Enterprise Kernel (ELSA-2013-2583)	Nessus	Oracle Linux Local Security Checks	2013/11/29	2026/2/9	medium
99163	OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0057) (Dirty COW)	Nessus	OracleVM Local Security Checks	2017/4/3	2025/12/26	critical

检测

插件搜索

high

medium

high

medium

high

medium

medium

critical