The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1699 advisory.

  - libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API (CVE-2019-10161)

  - libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients (CVE-2019-10166)

  - libvirt: arbitrary command execution via virConnectGetDomainCapabilities API (CVE-2019-10167)

  - libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and     virConnectCompareHypervisorCPU APIs (CVE-2019-10168)

  - Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service     (CVE-2019-11477)

  - Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service     (CVE-2019-11478)

  - kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of     service (CVE-2019-11479)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : redhat-virtualization-host (RHSA-2019:1699)

high Nessus Plugin ID 126559

Version 1.9

Version 1.8

Version 1.9 Apr 28, 2024, 3:17 AM CVSSv3 score source (set to "CVE-2019-10168") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404280317
Version 1.8 Dec 6, 2022, 6:51 PM Reference Plugin Feed: 202212061851