SUSE SLED12: ImageMagick / ImageMagick-config-6-SUSE / etc (SUSE-SU-2023:4049-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4049-1 advisory. - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. bsc1215939 Tenable has extracted the preceding descriptio...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-2992)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : opensc (SUSE-SU-2023:4065-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4065-1 advisory. - CVE-2021-42782: Fixed several stack buffer overflows bsc1191957. - CVE-2023-40661: Fixed several memory safety issues that could...

Debian: Security Advisory (DSA-5527-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6430-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3638 affecting package nginx for versions less than 1.22.1-11

CVE-2022-3638 affecting package nginx for versions less than 1.22.1-11. An upgraded version of the package is available that resolves this issue...

CVE-2023-5388

It was discovered that the numerical library used in NSS for RSA cryptography leaks information whether high order bits of the RSA decryption result are zero. This information can be used to mount a Bleichenbacher or Manger like attack against all RSA decryption operations. As the leak happens...

AZL-31490 CVE-2023-43789 affecting package libXpm for versions less than 3.5.17-1

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system...

USN-6369-1: libwebp vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue ...

Ubuntu: Security Advisory (USN-6429-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5523-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:4049-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : curl (ALAS-2023-2287)

The version of curl installed on the remote host is prior to 8.3.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2287 advisory. An issue was found in curl that can cause a buffer overflow in its SOCKS5 proxy communications code. When curl is using a...

AZL-34892 CVE-2023-39325 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-34818 CVE-2023-39325 affecting package jx for versions less than 3.10.182-1

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

CVE-2022-41861 affecting package freeradius for versions less than 3.2.3-1

CVE-2022-41861 affecting package freeradius for versions less than 3.2.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-10393 affecting package libvorbis for versions less than 1.3.7-1

CVE-2018-10393 affecting package libvorbis for versions less than 1.3.7-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-2911 affecting package bind for versions less than 9.16.44-1

CVE-2023-2911 affecting package bind for versions less than 9.16.44-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-2163 affecting package kernel for versions less than 5.15.133.1-1

CVE-2023-2163 affecting package kernel for versions less than 5.15.133.1-1. A patched version of the package is available...

CVE-2023-38039 affecting package curl for versions less than 8.3.0-1

CVE-2023-38039 affecting package curl for versions less than 8.3.0-1. An upgraded version of the package is available that resolves this issue...