The best protection against vulnerable software is running less software. How do I find out which services are enabled at Boot under CentOS / RHEL / Fedora Linux? How do I disable software which is not needed?
Read answer to: "Linux Determine which Services are Enabled at Boot"