CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-29159)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29159 advisory. - HDF5 through 1.14.3 contains a buffer overflow in H5Zfilterscaleoffset, resulting in the corruption of the...

CBL Mariner 2.0 Security Update: javapackages-bootstrap (CVE-2023-37460)

The version of javapackages-bootstrap installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-37460 advisory. - Plexis Archiver is a collection of Plexus components to create archives or extract archives ...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32609)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32609 advisory. - HDF5 Library through 1.14.3 allows stack consumption in the function H5Eprintfstack in H5Eint.c. CVE-2024-3260...

CBL Mariner 2.0 Security Update: expat / python3 (CVE-2024-28757)

The version of expat / python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28757 advisory. - libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external...

CBL Mariner 2.0 Security Update: telegraf (CVE-2023-50658)

The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-50658 advisory. - The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption vi...

CBL Mariner 2.0 Security Update: grub2 (CVE-2022-28734)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28734 advisory. - Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code...

CBL Mariner 2.0 Security Update: grub2 (CVE-2021-3981)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3981 advisory. - A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2024-26581)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26581 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip en...

CBL Mariner 2.0 Security Update: libreswan (CVE-2023-38710)

The version of libreswan installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38710 advisory. - An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid...

CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns (CVE-2023-45288)

The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45288 advisory. - An attacker May cause an HTTP/...

CBL Mariner 2.0 Security Update: iperf3 (CVE-2023-7250)

The version of iperf3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-7250 advisory. - A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or...

CBL Mariner 2.0 Security Update: mcpp (CVE-2019-14274)

The version of mcpp installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-14274 advisory. - MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c. CVE-2019-14274 Note that Nessu...

CBL Mariner 2.0 Security Update: hvloader / openssl (CVE-2023-3446)

The version of hvloader / openssl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3446 advisory. - Issue summary: Checking excessively long DH keys or parameters May be very slow. Impact summary:...

CBL Mariner 2.0 Security Update: libdb (CVE-2017-3611)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-3611 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Pri...

CBL Mariner 2.0 Security Update: libdb (CVE-2017-3617)

The version of libdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-3617 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Pri...

CBL Mariner 2.0 Security Update: patch (CVE-2018-6952)

The version of patch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-6952 advisory. - A double free exists in the anotherhunk function in pch.c in GNU patch through 2.7.6. CVE-2018-6952 Note that...

CBL Mariner 2.0 Security Update: vte291 (CVE-2024-37535)

The version of vte291 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37535 advisory. - GNOME VTE before 0.76.3 allows an attacker to cause a denial of service memory consumption via a window resi...

CBL Mariner 2.0 Security Update: nodejs / nodejs18 (CVE-2024-30260)

The version of nodejs / nodejs18 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-30260 advisory. - Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and...

CBL Mariner 2.0 Security Update: coreutils (CVE-2016-2781)

The version of coreutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-2781 advisory. - chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via...

CBL Mariner 2.0 Security Update: unzip (CVE-2014-9636)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2014-9636 advisory. - unzip 6.0 allows remote attackers to cause a denial of service out-of-bounds read or write and crash via an...