Question PCI Compliance, remediate Linux 4.4 CVE-2018, etc

[Paul Larson]

Title:
CPE Based Vulnerabilities for Linux 4.4

Impact:
One or more vulnerabilities have been found that affect this service. Please see the relevant CVEs for more details.

Resolution:
Apply the latest vendor patches to your operating system: Linux 4.4


CVE / Score
CVE-2018-10938 / 7.1
CVE-2016-2143 /6.9
CVE-2016-2854 /4.6
CVE-2017-7273 /4.6
CVE-2016-2853 /4.4

Image from PCI report: Screen Shot 2020-09-02 at 12.41.48 PM.png

 

[IgorG]

Could you please clarify how it is related to Plesk?

 

[Paul Larson]

Sorry, I was wondering if any sort of PCI compliance resolver or Plesk updates (open ssh perhaps) might address those CVEs.

(Having trouble with the Plesk forum lately, or my browser forgetting cookies. I think a prior version of my post didn't go through)