CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41900)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41900 advisory. - TensorFlow is an open source platform for machine learning. The security vulnerability results in...

CBL Mariner 2.0 Security Update: clamav (CVE-2023-20052)

The version of clamav installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-20052 advisory. - On February 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3111)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3111 advisory. - An issue was discovered in the Linux kernel through 5.16-rc6. freechargerirq in...

CBL Mariner 2.0 Security Update: libtiff (CVE-2022-2058)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2058 advisory. - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafte...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-34918)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-34918 advisory. - An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nftseteleminit leading t...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2343)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2343 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. CVE-2022-2343 Note that Nessus has no...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-0266)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0266 advisory. - A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel...

CBL Mariner 2.0 Security Update: nodejs (CVE-2022-43548)

The version of nodejs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-43548 advisory. - A OS Command Injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, 19.0.1 due to an...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41894)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41894 advisory. - TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPOSE...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41890)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41890 advisory. - TensorFlow is an open source platform for machine learning. If BCast::ToShape is given input larger than...

CBL Mariner 2.0 Security Update: kernel (CVE-2021-43976)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-43976 advisory. - In the Linux kernel through 5.15.2, mwifiexusbrecv in drivers/net/wireless/marvell/mwifiex/usb.c allows an...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0803)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0803 advisory. - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a...

CBL Mariner 2.0 Security Update: tpm2-tools (CVE-2021-3565)

The version of tpm2-tools installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3565 advisory. - A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3110)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3110 advisory. - An issue was discovered in the Linux kernel through 5.16-rc6. rtwinitxmitpriv in...

CBL Mariner 2.0 Security Update: golang (CVE-2021-41771)

The version of golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-41771 advisory. - ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a...

EulerOS 2.0 SP10 : libXpm (EulerOS-SA-2023-1556)

According to the versions of the libXpm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly and c...

EulerOS 2.0 SP10 : libtar (EulerOS-SA-2023-1554)

According to the versions of the libtar package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer ...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2023-1547)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP...

EulerOS 2.0 SP10 : byacc (EulerOS-SA-2023-1520)

According to the versions of the byacc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory use...

EulerOS 2.0 SP10 : ppp (EulerOS-SA-2023-1560)

According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component...