Test ID:	1.3.6.1.4.1.25623.1.0.122281
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2011-0017)
Summary:	The remote host is missing an update for the 'kernel, ocfs2-2.6.18-238.el5, oracleasm-2.6.18-238.el5' package(s) announced via the ELSA-2011-0017 advisory.
Description:	Summary: The remote host is missing an update for the 'kernel, ocfs2-2.6.18-238.el5, oracleasm-2.6.18-238.el5' package(s) announced via the ELSA-2011-0017 advisory. Vulnerability Insight: [2.6.18-238.el5] - [net] bnx2: remove extra call to pci_map_page (John Feeney) [663509] - [fs] nfs: set lock_context field in nfs_readpage_sync (Jeff Layton) [663853] [2.6.18-237.el5] - [block] fully zeroize request struct in rq_init (Rob Evers) [662154] - [scsi] qla4xxx: update to 5.02.04.02.05.06-d0 (Chad Dupuis) [656999] - [scsi] qla4xxx: make get_sys_info function return void (Chad Dupuis) [656999] - [scsi] qla4xxx: don't default device to FAILED state (Chad Dupuis) [656999] - [scsi] qla4xxx: mask bits in F/W Options during init (Chad Dupuis) [656999] - [scsi] qla4xxx: update to 5.02.04.01.05.06-d0 (Chad Dupuis) [661768] - [scsi] qla4xxx: disable irq instead of req pci_slot_reset (Chad Dupuis) [661768] - [scsi] qla4xxx: no device add until scsi_add_host success (Chad Dupuis) [661768] - [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton) [660580] - [scsi] bfa: fix crash reading driver sysfs statistics (Rob Evers) [659880] {CVE-2010-4343} - [misc] cpufeature: avoid corrupting cpuid vendor id (Matthew Garrett) [568751] - [char] drm: don't set signal blocker on master process (Dave Airlie) [570604] - [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton) [656492] - [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton) [656492] - [fs] nfs: clean up nfs_create_request (Jeff Layton) [656492] - [net] forcedeth: fix race condition in latest backport (Ivan Vecera) [658434] - [net] cxgb3: fix read of uninitialized stack memory (Jay Fenlason) [633155] {CVE-2010-3296} - [net] tg3: increase jumbo flag threshold (John Feeney) [660506] - [net] s2io: fix netdev initialization failure (Bob Picco) [654948] - [net] igb: only use vlan_gro_receive if vlans registered (Stefan Assmann) [660190] {CVE-2010-4263} - [net] ipv6: try all routers with unknown reachable state (Thomas Graf) [661393] - [misc] kernel: fix address limit override in OOPS path (Dave Anderson) [659571] {CVE-2010-4258} [2.6.18-236.el5] - [powerpc] support DLPAR remove operations (Steve Best) [655089] - [net] igb: fix tx packet count (Stefan Assmann) [658801] - [usb] serial: new driver MosChip MCS7840 (Stefan Assmann) [574507] - [fs] exec: copy fixes into compat_do_execve paths (Oleg Nesterov) [625694] {CVE-2010-4243} - [fs] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [625694] {CVE-2010-4243} - [misc] binfmts: kill bprm->argv_len (Oleg Nesterov) [625694] {CVE-2010-4243} - [mm] backport upstream stack guard page /proc reporting (Larry Woodman) [643426] - [mm] add guard page for stacks that grow upwards (Johannes Weiner) [630563] - [net] tipc: fix information leak to userland (Jiri Pirko) [649892] {CVE-2010-3877} - [sound] ALSA: fix sysfs unload and OSS mixer mutex issues (Jaroslav Kysela) [652165] - [net] tg3: fix 5719 bugs (John Feeney) [657097] - [net] bnx2: update firmware to 6.0.x (John Feeney) [644438] - [redhat] configs: add ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'kernel, ocfs2-2.6.18-238.el5, oracleasm-2.6.18-238.el5' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 7.9 CVSS Vector: AV:A/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3296 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console http://www.securityfocus.com/archive/1/520102/100/0/threaded 41440 http://secunia.com/advisories/41440 42758 http://secunia.com/advisories/42758 42884 http://secunia.com/advisories/42884 43221 http://www.securityfocus.com/bid/43221 46397 http://secunia.com/advisories/46397 ADV-2011-0070 http://www.vupen.com/english/advisories/2011/0070 ADV-2011-0298 http://www.vupen.com/english/advisories/2011/0298 DSA-2126 http://www.debian.org/security/2010/dsa-2126 RHSA-2011:0017 http://www.redhat.com/support/errata/RHSA-2011-0017.html SUSE-SA:2010:050 http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html SUSE-SA:2010:054 http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00000.html SUSE-SA:2011:007 http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html USN-1041-1 http://www.ubuntu.com/usn/USN-1041-1 [linux-kernel] 20100911 [PATCH] drivers/net/cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory http://lkml.org/lkml/2010/9/11/170 [oss-security] 20100914 CVE request: kernel: numerous infoleaks http://www.openwall.com/lists/oss-security/2010/09/14/2 [oss-security] 20100914 Re: CVE request: kernel: numerous infoleaks http://www.openwall.com/lists/oss-security/2010/09/14/7 http://git.kernel.org/?p=linux/kernel/git/davem/net-2.6.git%3Ba=commit%3Bh=49c37c0334a9b85d30ab3d6b5d1acb05ef2ef6de http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.36-rc5 http://www.vmware.com/security/advisories/VMSA-2011-0012.html https://bugzilla.redhat.com/show_bug.cgi?id=633149 Common Vulnerability Exposure (CVE) ID: CVE-2010-3877 44630 http://www.securityfocus.com/bid/44630 MDVSA-2011:029 http://www.mandriva.com/security/advisories?name=MDVSA-2011:029 [netdev] 20101031 [PATCH 3/3] net: tipc: fix information leak to userland http://marc.info/?l=linux-netdev&m=128854507420917&w=2 [oss-security] 20101102 CVE request: kernel stack infoleaks http://openwall.com/lists/oss-security/2010/11/02/7 [oss-security] 20101104 Re: CVE request: kernel stack infoleaks http://openwall.com/lists/oss-security/2010/11/04/5 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88f8a5e3e7defccd3925cabb1ee4d3994e5cdb52 http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.37-rc2 https://bugzilla.redhat.com/show_bug.cgi?id=649717 kernel-getname-info-disc(64578) https://exchange.xforce.ibmcloud.com/vulnerabilities/64578 Common Vulnerability Exposure (CVE) ID: CVE-2010-4072 BugTraq ID: 45054 http://www.securityfocus.com/bid/45054 Bugtraq: 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console (Google Search) Debian Security Information: DSA-2126 (Google Search) http://www.mandriva.com/security/advisories?name=MDVSA-2011:051 http://lkml.org/lkml/2010/10/6/454 http://www.openwall.com/lists/oss-security/2010/10/07/1 http://www.openwall.com/lists/oss-security/2010/10/25/3 http://www.redhat.com/support/errata/RHSA-2010-0958.html http://www.redhat.com/support/errata/RHSA-2011-0007.html http://www.redhat.com/support/errata/RHSA-2011-0162.html http://secunia.com/advisories/42778 http://secunia.com/advisories/42890 http://secunia.com/advisories/42932 http://secunia.com/advisories/42963 http://secunia.com/advisories/43161 http://secunia.com/advisories/43291 SuSE Security Announcement: SUSE-SA:2010:060 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html SuSE Security Announcement: SUSE-SA:2011:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html SuSE Security Announcement: SUSE-SA:2011:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00004.html SuSE Security Announcement: SUSE-SA:2011:007 (Google Search) SuSE Security Announcement: SUSE-SA:2011:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html http://www.ubuntu.com/usn/USN-1057-1 http://www.vupen.com/english/advisories/2011/0012 http://www.vupen.com/english/advisories/2011/0124 http://www.vupen.com/english/advisories/2011/0168 http://www.vupen.com/english/advisories/2011/0280 http://www.vupen.com/english/advisories/2011/0375 Common Vulnerability Exposure (CVE) ID: CVE-2010-4073 BugTraq ID: 45073 http://www.securityfocus.com/bid/45073 http://lkml.org/lkml/2010/10/6/492 http://securityreason.com/securityalert/8366 Common Vulnerability Exposure (CVE) ID: CVE-2010-4075 BugTraq ID: 43806 http://www.securityfocus.com/bid/43806 http://lkml.indiana.edu/hypermail//linux/kernel/1009.1/03388.html http://www.openwall.com/lists/oss-security/2010/09/25/2 http://www.openwall.com/lists/oss-security/2010/10/06/6 Common Vulnerability Exposure (CVE) ID: CVE-2010-4080 BugTraq ID: 45058 http://www.securityfocus.com/bid/45058 BugTraq ID: 45063 http://www.securityfocus.com/bid/45063 http://lkml.org/lkml/2010/9/25/41 http://secunia.com/advisories/42801 SuSE Security Announcement: SUSE-SA:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2010-4081 Common Vulnerability Exposure (CVE) ID: CVE-2010-4158 20101109 Kernel 0-day http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077321.html http://www.securityfocus.com/archive/1/514705 20101118 Re: Kernel 0-day http://www.securityfocus.com/archive/1/514845 42745 http://secunia.com/advisories/42745 42778 42801 42890 42932 42963 43291 44758 http://www.securityfocus.com/bid/44758 ADV-2010-3321 http://www.vupen.com/english/advisories/2010/3321 ADV-2011-0012 ADV-2011-0124 ADV-2011-0168 ADV-2011-0375 FEDORA-2010-18983 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html RHSA-2010:0958 RHSA-2011:0007 RHSA-2011:0162 SUSE-SA:2010:060 SUSE-SA:2011:001 SUSE-SA:2011:002 SUSE-SA:2011:004 SUSE-SA:2011:008 [netdev] 20101109 [PATCH] Prevent reading uninitialized memory with socket filters http://www.spinics.net/lists/netdev/msg146361.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=57fe93b374a6b8711995c2d466c502af9f3a08bb http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36.2 https://bugzilla.redhat.com/show_bug.cgi?id=651698 Common Vulnerability Exposure (CVE) ID: CVE-2010-4238 45795 http://www.securityfocus.com/bid/45795 http://bugs.centos.org/bug_view_advanced_page.php?bug_id=4517 https://bugzilla.redhat.com/show_bug.cgi?id=655623 xen-vdbcreate-dos(64698) https://exchange.xforce.ibmcloud.com/vulnerabilities/64698 Common Vulnerability Exposure (CVE) ID: CVE-2010-4243 15619 http://www.exploit-db.com/exploits/15619 45004 http://www.securityfocus.com/bid/45004 [linux-kernel] 20100827 [PATCH] exec argument expansion can inappropriately trigger OOM-killer http://lkml.org/lkml/2010/8/27/429 [linux-kernel] 20100830 Re: [PATCH] exec argument expansion can inappropriately trigger OOM-killer http://lkml.org/lkml/2010/8/29/206 http://lkml.org/lkml/2010/8/30/138 http://lkml.org/lkml/2010/8/30/378 [linux-kernel] 20101130 [PATCH 1/2] exec: make argv/envp memory visible to oom-killer http://linux.derkeiler.com/Mailing-Lists/Kernel/2010-11/msg13278.html [oss-security] 20101122 CVE request: kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads http://openwall.com/lists/oss-security/2010/11/22/6 [oss-security] 20101122 Re: CVE request: kernel: mm: mem allocated invisible to oom_kill() when not attached to any threads http://openwall.com/lists/oss-security/2010/11/22/15 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=3c77f845722158206a7209c45ccddc264d19319c http://grsecurity.net/~spender/64bit_dos.c http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 https://bugzilla.redhat.com/show_bug.cgi?id=625688 linux-kernel-execve-dos(64700) https://exchange.xforce.ibmcloud.com/vulnerabilities/64700 Common Vulnerability Exposure (CVE) ID: CVE-2010-4255 [oss-security] 20101130 CVE request: xen: x86-64: don't crash Xen upon direct pv guest access http://openwall.com/lists/oss-security/2010/11/30/5 [oss-security] 20101130 Re: CVE request: xen: x86-64: don't crash Xen upon direct pv guest access http://openwall.com/lists/oss-security/2010/11/30/8 [xen-devel] 20101129 [PATCH] x86-64: don't crash Xen upon direct pv guest access http://lists.xensource.com/archives/html/xen-devel/2010-11/msg01650.html https://bugzilla.redhat.com/show_bug.cgi?id=658155 Common Vulnerability Exposure (CVE) ID: CVE-2010-4263 45208 http://www.securityfocus.com/bid/45208 [oss-security] 20101206 CVE request: kernel: igb panics when receiving tag vlan packet http://openwall.com/lists/oss-security/2010/12/06/3 [oss-security] 20101206 Re: CVE request: kernel: igb panics when receiving tag vlan packet http://openwall.com/lists/oss-security/2010/12/06/9 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=31b24b955c3ebbb6f3008a6374e61cf7c05a193c http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34 https://bugzilla.kernel.org/show_bug.cgi?id=15582 https://bugzilla.redhat.com/show_bug.cgi?id=660188 Common Vulnerability Exposure (CVE) ID: CVE-2010-4343 45262 http://www.securityfocus.com/bid/45262 [linux-scsi] 20100521 [PATCH 1/2] bfa: fix system crash when reading sysfs fc_host statistics http://www.spinics.net/lists/linux-scsi/msg43772.html [oss-security] 20101208 CVE request: kernel: bfa driver sysfs crash http://www.openwall.com/lists/oss-security/2010/12/08/3 [oss-security] 20101209 Re: CVE request: kernel: bfa driver sysfs crash http://www.openwall.com/lists/oss-security/2010/12/09/15 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7873ca4e4401f0ecd8868bf1543113467e6bae61 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.35 https://bugzilla.redhat.com/show_bug.cgi?id=661182
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.