The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0293-1 advisory.

  - A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free     which might lead to privilege escalations. (CVE-2020-25670)

  - A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-     free which might lead to privilege escalations. (CVE-2020-25671)

  - A memory leak vulnerability was found in Linux kernel in llcp_sock_connect (CVE-2020-25672)

  - A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak     and eventually hanging-up the system. (CVE-2020-25673)

  - u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to     improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for     a discrete set of traffic' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon     Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon     Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MSM8909W,     MSM8996AU, QCA9531, QCN5502, QCS405, SDX20, SM6150, SM7150 (CVE-2020-3702)

  - Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to     elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local     user with the CAP_NET_RAW capability. (CVE-2021-23134)

  - A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an     attacker with local access to setup a socket to listen on a high port allowing for a list element to be     used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to     crash the system or possibly escalate privileges on the system. (CVE-2021-4028)

  - A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's     cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting     the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.
    (CVE-2021-4154)

  - A heap-based buffer overflow flaw was found in the Linux kernel FireDTV media card driver, where the user     calls the CA_SEND_MSG ioctl. This flaw allows a local user of the host machine to crash the system or     escalate privileges on the system. The highest threat from this vulnerability is to confidentiality,     integrity, as well as system availability. (CVE-2021-42739)

  - A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem     Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in     case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local     user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to     legacy handling) could use this flaw to escalate their privileges on the system. (CVE-2022-0185)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0295-1 advisory.

    This update for the Linux Kernel 5.3.18-59_13 fixes several issues.

    The following security issues were fixed:

    - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local     privilege escalation (bsc#1194517).
    - CVE-2021-4154: Fixed option parsing with cgroups version 1 (bsc#1193842).
    - CVE-2021-4028: Fixed use-after-free in RDMA listen() that could lead to DoS or privilege escalation by a     local attacker (bsc#1193167).
    - CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and     cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent     possibility of information disclosure. (bsc#1191193)
    - CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-     avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking     (bsc#1184673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4896 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    Security Fix(es):

    * kernel: use-after-free in RDMA listen() (CVE-2021-4028)

    * kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083)

    * kernel: heap out of bounds write in nf_dup_netdev.c (CVE-2022-25636)

    * openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778)

    * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032)

    * gzip: arbitrary-file-write vulnerability (CVE-2022-1271)

    * rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fixes:

    * elfutils package has been update within RHV-H Channel to match the same version released in RHEL     (BZ#2038081)

    * Rebase package(s) to version 1.2.24     For highlights, important fixes, or notable enhancements: see bugs in Depend On. (BZ#2057338)

    * Rebase package(s) to version: 4.5.0

    Highlights, important fixes, or notable enhancements: (BZ#2057342)

    * Rebase package(s) to version anaconda-33.16.6.6-1.el8     For highlights and important bug fixes: include UI change for blocking installation if root password is     not set. (BZ#1899821)

    * Red hat Virtualization Host has been rebased on Red Hat Enterprise Linux 8.6 (BZ#1997074)

    * Previously, concurrent executions of LV refresh (lvchange) failed. This hindered simultaneous starts of     virtual machines that have thin-provisioned disks based on the same disk on a block storage domain.
    In this release, concurrent execution of LV refresh has been fixed in LVM2. (BZ#2020497)

    * Red Hat Virtualization Host has been rebased on latest Ceph 4.3 (BZ#2090138)

    * In previous releases systemtap package could have been installed on top of RHV-H from RHV-H channel.
    With 4.4 SP1 systemtap package installation is not supported anymore (BZ#2052963)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3142:06 advisory.

    * kernel: use-after-free in RDMA listen() (CVE-2021-4028)
      * kernel: fget: check that the fd still exists after getting a ref to it     (CVE-2021-4083)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
157345	SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2022:0293-1)	Nessus	SuSE Local Security Checks	2022/2/3	2024/8/21	high
157346	SUSE SLES15: kernel-livepatch-5_3_18-59_13-default / etc (SUSE-SU-2022:0295-1)	Nessus	SuSE Local Security Checks	2022/2/3	2026/6/26	high
161818	RHEL 8 : Red Hat Virtualization security, update [ovirt-4.5.0] (Important) (RHSA-2022:4896)	Nessus	Red Hat Local Security Checks	2022/6/3	2026/1/21	high
294480	MiracleLinux 7 : kernel-3.10.0-1160.62.1.el7 (AXSA:2022-3142:06)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high