CBL Mariner 2.0 Security Update: cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt (CVE-2023-48795)

The version of cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-48795 advisory. - The SSH transport protocol with certain...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-29165)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29165 advisory. - HDF5 through 1.14.3 contains a buffer overflow in H5Zfilterfletcher32, resulting in the corruption of the...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-6915)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6915 advisory. - A Null pointer dereference problem was found in idafree in lib/idr.c in the Linux Kernel. This issue may allo...

CBL Mariner 2.0 Security Update: openslp (CVE-2019-5544)

The version of openslp installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-5544 advisory. - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-52429)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52429 advisory. - dmtablecreate in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to in...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-29041)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29041 advisory. - Express.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alp...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32609)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32609 advisory. - HDF5 Library through 1.14.3 allows stack consumption in the function H5Eprintfstack in H5Eint.c. CVE-2024-3260...

CBL Mariner 2.0 Security Update: clamav (CVE-2022-48579)

The version of clamav installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48579 advisory. - UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains...

CBL Mariner 2.0 Security Update: procmail (CVE-2014-3618)

The version of procmail installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2014-3618 advisory. - Heap-based buffer overflow in formisc.c in formail in procmail 3.22 allows remote attackers to cause a deni...

CBL Mariner 2.0 Security Update: gnutls (CVE-2024-0567)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0567 advisory. - A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with...

CBL Mariner 2.0 Security Update: unzip (CVE-2016-9844)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9844 advisory. - Buffer overflow in the zishort function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a...

CBL Mariner 2.0 Security Update: rust / tensorflow / cmake / mysql (CVE-2023-27537)

The version of rust / tensorflow / cmake / mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-27537 advisory. - A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data betwee...

CBL Mariner 2.0 Security Update: postgresql (CVE-2024-0985)

The version of postgresql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0985 advisory. - Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to...

CBL Mariner 2.0 Security Update: expat / python3 (CVE-2024-28757)

The version of expat / python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-28757 advisory. - libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external...

CBL Mariner 2.0 Security Update: telegraf (CVE-2023-50658)

The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-50658 advisory. - The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service CPU consumption vi...

CBL Mariner 2.0 Security Update: grub2 (CVE-2022-28736)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28736 advisory. - There's a use-after-free vulnerability in grubcmdchainloader function; The chainloader command is used to boo...

CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-24557)

The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24557 advisory. - Moby is an open-source project created by Docker to enable software containerization. The classic build...

CBL Mariner 2.0 Security Update: telegraf (CVE-2023-2816)

The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2816 advisory. - Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32614)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32614 advisory. - HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c. CVE-2024-32614 Note that Nessus has not test...

CBL Mariner 2.0 Security Update: unzip (CVE-2015-7697)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2015-7697 advisory. - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service infinite loop via empty bzip2 data in ...