CBL Mariner 2.0 Security Update: libvirt (CVE-2020-10701)

The version of libvirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-10701 advisory. - A missing authorization flaw was found in the libvirt API responsible for changing the QEMU agent response...

CBL Mariner 2.0 Security Update: curl (CVE-2022-32207)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-32207 advisory. - When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0802)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0802 advisory. - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a...

CBL Mariner 2.0 Security Update: httpd (CVE-2019-17567)

The version of httpd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-17567 advisory. - Apache HTTP Server versions 2.4.6 to 2.4.46 modproxywstunnel configured on an URL that is not necessarily...

CBL Mariner 2.0 Security Update: cmake / curl / mysql / rust / tensorflow (CVE-2022-43552)

The version of cmake / curl / mysql / rust / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-43552 advisory. - A use after free vulnerability exists in curl 7.87.0. Curl can be asked to...

CBL Mariner 2.0 Security Update: uclibc-ng (CVE-2021-43523)

The version of uclibc-ng installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-43523 advisory. - In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned ...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-41858)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41858 advisory. - A flaw was found in the Linux kernel. A NULL pointer dereference May occur while a slip driver is in progres...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1055)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1055 advisory. - A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privile...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-0998)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0998 advisory. - An integer overflow flaw was found in the Linux kernel's virtio device driver code in the way a user triggers...

CBL Mariner 2.0 Security Update: systemd (CVE-2022-4415)

The version of systemd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4415 advisory. - A vulnerability was found in systemd. This security flaw can cause a local information leak due to...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-45869)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-45869 advisory. - A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause...

CBL Mariner 2.0 Security Update: mysql (CVE-2022-21460)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-21460 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Logging. Supported versions that...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2022-47929)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47929 advisory. - In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0800)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0800 advisory. - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a...

CBL Mariner 2.0 Security Update: nss (CVE-2020-12403)

The version of nss installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-12403 advisory. - A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS in versions before 3.55. When using...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-0468)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0468 advisory. - A use-after-free flaw was found in iouring/poll.c in iopollcheckevents in the iouring subcomponent in the Lin...

CBL Mariner 2.0 Security Update: php (CVE-2023-0568)

The version of php installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0568 advisory. - In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate...

CBL Mariner 2.0 Security Update: golang (CVE-2021-41772)

The version of golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-41772 advisory. - Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42381)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42381 advisory. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0795)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0795 advisory. - LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a...