EulerOS 2.0 SP10 : libXpm (EulerOS-SA-2023-1531)

According to the versions of the libXpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and c...

Fedora: Security Advisory for httpd (FEDORA-2023-7d14cdec4a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 36 : pypy3.7 (2023-930077c742)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-930077c742 advisory. CVE-2022-37454: Fix buffer overflows in sha3 module Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Fedora 36 : containernetworking-plugins (2023-e8c27ba884)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e8c27ba884 advisory. Resolves: 2161274,2163068 - Rebuild for CVE-2022-41717 Tenable has extracted the preceding description block directly from the Fedora security...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2023-075-01)

The version of mozilla-thunderbird installed on the remote host is prior to 102.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-075-01 advisory. - Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be...

Slackware Linux 15.0 / current openssh Vulnerability (SSA:2023-075-02)

The version of openssh installed on the remote host is prior to 9.3p1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-075-02 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Debian DSA-5375-1 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5375 advisory. - Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially...

Fedora 36 : mingw-binutils (2023-d044484038)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d044484038 advisory. Backport patch for CVE-2023-25587. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 37 : mingw-binutils (2023-a86258ed64)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a86258ed64 advisory. Backport patch for CVE-2023-25587. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

AlmaLinux 8 : nss (ALSA-2023:1252)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:1252 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled...

Fedora 37 : mingw-python-werkzeug (2023-af75e27098)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-af75e27098 advisory. Update to python-werkzeug-2.2.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Debian dla-3363 : libpcre2-16-0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3363 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3363-1 [email protected]...

Oracle Linux 8 : nss (ELSA-2023-1252)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1252 advisory. 3.79.0-11 - Fix CVE-2023-0767 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Fedora 37 : libmemcached-awesome (2023-c9bbaadcbf)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c9bbaadcbf advisory. Version 1.1.4 - released 2022-03-06 Fix gh 107: macOS: deprecated sasl API improve detection of libsasl2. Fix gh 131: Consider renaming tools add CLIENTPREFI...

Debian dla-3358 : libmpv-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3358 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3358-1 [email protected] https://www.debian.org/lts/security/...

Rocky Linux 9 : libjpeg-turbo (RLSA-2023:1068)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:1068 advisory. - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit...

Debian: Security Advisory (DLA-263-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-186-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-342-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2136-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...