130 matches found
Amazon Linux 2 : golang (ALAS-2022-1887)
The version of golang installed on the remote host is prior to 1.18.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1887 advisory. Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to...
Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2022-1887)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 8 : dovecot (ALSA-2021:1887)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1887 advisory. - An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled...
CVE-2021-1887
Summary: CVE-2021-1887 relates to a reachable assertion in the WLAN subsystem when using the Wi‑Fi Fine Timing Measurement (FTM) protocol in Snapdragon Wired Infrastructure and Networking devices. Affected component: Qualcomm/Snapdragon WLAN subsystem implementing IEEE 802.11 Wi‑Fi FTM. Root caus...
SUSE: Security Advisory (SUSE-SU-2021:1887-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 8 : dovecot (ELSA-2021-1887)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1887 advisory. - fix CVE-2020-24386 IMAP hibernation function allows mail access 1913534 - fix CVE-2020-25275 denial of service via mail MIME parsing 1914019 Tenable...
RHEL 8 : dovecot (RHSA-2021:1887)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1887 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...
Huawei EulerOS: Security Advisory for python-pygments (EulerOS-SA-2021-1887)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : dovecot (CESA-2021:1887)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1887 advisory. - dovecot: IMAP hibernation function allows mail access CVE-2020-24386 - dovecot: Denial of service via mail MIME parsing CVE-2020-25275 Note that Ness...
SUSE: Security Advisory (SUSE-SU-2020:1887-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2020-1887)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1887
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust...
CVE-2020-1887
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust...
CVE-2020-1887
CVE-2020-1887 affects osquery versions post-2.9.0 and before 4.2.0, where TLS SNI hostname validation is incorrect. This could allow an attacker to perform a MITM on osquery traffic if no root trust chain is configured. Remediation: upgrade to 4.2.0 or later (or apply vendor guidance). The connec...
Debian DLA-1887-1 : freetype security update
A buffer over-read in the t1-parser of freetype, a font engine, has been found and fixed by checking limits more sensible. For Debian 8 'Jessie', this problem has been fixed in version 2.5.2-3+deb8u3. We recommend that you upgrade your freetype packages. NOTE: Tenable Network Security has extract...
CVE-2019-1887
CVE-2019-1887 affects Cisco Unified Communications Manager (CUCM): the DoS stems from insufficient validation of input SIP traffic in the SIP protocol implementation. An unauthenticated, remote attacker can send malformed SIP packets to trigger a new registration process on all connected phones, ...
CVE-2018-1887
CVE-2018-1887 affects IBM Security Access Manager Appliance versions 9.0.1.0–9.0.5.0, where the product contains hard-coded credentials used for inbound authentication, outbound communication, or encryption of internal data. The issue, as described in the CVE entry, implies potential unauthorized...
pfSense < 2.3.1 Multiple Vulnerabilities (SA-16_03 / SA-16-04)
According to its self-reported version number, the remote pfSense install is prior to 2.3.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106500; scriptversion"1.12";...
