41574 matches found
Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-6865-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6865-1 advisory. It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An...
SUSE SLES15 / openSUSE 15 Security Update : squid (SUSE-SU-2024:2269-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2269-1 advisory. - CVE-2024-37894: Fixed a denial of Service issue in ESI processing bsc1227086 Tenable has extracted the preceding description...
Ubuntu 20.04 LTS : Firefox vulnerabilities (USN-6862-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6862-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially explo...
SUSE SLES12 Security Update : squid (SUSE-SU-2024:2270-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2270-1 advisory. - CVE-2024-37894: Fixed a denial of Service issue in ESI processing bsc1227086 Tenable has extracted the preceding description block directl...
CBL Mariner 2.0 Security Update: cloud-hypervisor / edk2 / hvloader / openssl / rust (CVE-2023-0215)
The version of cloud-hypervisor / edk2 / hvloader / openssl / rust installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0215 advisory. - The public API function BIOnewNDEF is a helper function used for...
openSUSE 15 Security Update : libxml2 (SUSE-SU-2024:2267-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:2267-1 advisory. - CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c bsc1224282. Tenable has extracted the preceding description block directly...
Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6864-1)
The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6864-1 advisory. It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for...
SUSE SLED15: openssh / openssh-askpass-gnome / openssh-clients / openssh-common / etc (SUSE-SU-2024:2275-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2275-1 advisory. - CVE-2024-6387: Fixed race condition in a signal handler bsc1226642 Tenable has extracted the preceding description...
Ubuntu 24.04 LTS : Linux kernel vulnerability (USN-6863-1)
The remote Ubuntu 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6863-1 advisory. A security issue was discovered in the Linux kernel. An attacker could possibly use it to compromise the system. This update corrects flaws in the following...
SUSE SLES15 / openSUSE 15 Security Update : postgresql15 (SUSE-SU-2024:2261-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2261-1 advisory. - Upgrade to 15.7. bsc1224051 - CVE-2024-4317: Restrict visibility of pgstatsext and pgstatsextexprs entries to the table owne...
SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2024:2271-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:2271-1 advisory. - CVE-2024-4741: Fixed a use-after-free with SSLfreebuffers. bsc1225551 Tenable has extracted the preceding description block directly from the SUSE...
CVE-2023-4001 affecting package grub2 for versions less than 2.12-1
CVE-2023-4001 affecting package grub2 for versions less than 2.12-1. A patched version of the package is available...
CVE-2024-1874 affecting package php for versions less than 8.3.8-1
CVE-2024-1874 affecting package php for versions less than 8.3.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-28110 affecting package telegraf for versions less than 1.31.0-1
CVE-2024-28110 affecting package telegraf for versions less than 1.31.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-27289 affecting package telegraf for versions less than 1.31.0-1
CVE-2024-27289 affecting package telegraf for versions less than 1.31.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-5585 affecting package php for versions less than 8.3.8-1
CVE-2024-5585 affecting package php for versions less than 8.3.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-28180 affecting package telegraf for versions less than 1.31.0-1
CVE-2024-28180 affecting package telegraf for versions less than 1.31.0-1. An upgraded version of the package is available that resolves this issue...
AZL-43110 CVE-2023-24531 affecting package golang for versions less than 1.21.0-1
Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is...
AZL-43104 CVE-2023-24531 affecting package msft-golang for versions less than 1.21.0-1
Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is...
