CBL Mariner 2.0 Security Update: moby-containerd (CVE-2022-23471)

The version of moby-containerd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-23471 advisory. - containerd is an open source container runtime. A bug was found in containerd's CRI implementation...

CBL Mariner 2.0 Security Update: helm (CVE-2022-23526)

The version of helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-23526 advisory. - Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject ...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-42329)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42329 advisory. - Guests can trigger deadlock in Linux netback driver This CNA information record relates to multiple CVEs; th...

CBL Mariner 2.0 Security Update: kernel (CVE-2021-33200)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-33200 advisory. - kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-0500)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0500 advisory. - A flaw was found in unrestricted eBPF usage by the BPFBTFLOAD, leading to a possible out-of-bounds memory wri...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1882)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1882 advisory. - A use-after-free flaw was found in the Linux kernel's pipes functionality in how a user performs manipulation...

CBL Mariner 2.0 Security Update: lua (CVE-2022-28805)

The version of lua installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28805 advisory. - singlevar in lparser.c in Lua from including 5.4.0 up to excluding 5.4.4 lacks a certain luaKexp2anyregup call,...

CBL Mariner 2.0 Security Update: mariadb / mysql (CVE-2022-21427)

The version of mariadb / mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-21427 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported version...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0801)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0801 advisory. - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tifunix.c:368, invoked by...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3112)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3112 advisory. - An issue was discovered in the Linux kernel through 5.16-rc6. amvdecsetcanvases in...

CBL Mariner 2.0 Security Update: curl (CVE-2022-42916)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42916 advisory. - In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3115)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3115 advisory. - An issue was discovered in the Linux kernel through 5.16-rc6. malidpcrtcreset in...

CBL Mariner 2.0 Security Update: kernel (CVE-2021-4202)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-4202 advisory. - A use-after-free flaw was found in ncirequest in net/nfc/nci/core.c in NFC Controller Interface NCI in the...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3107)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3107 advisory. - An issue was discovered in the Linux kernel through 5.16-rc6. netvscgetethtoolstats in...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-47942)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47942 advisory. - An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap- based...

CBL Mariner 2.0 Security Update: kernel (CVE-2021-43389)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-43389 advisory. - An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in th...

CBL Mariner 2.0 Security Update: mysql (CVE-2022-21444)

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-21444 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42380)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42380 advisory. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when...

CBL Mariner 2.0 Security Update: systemd (CVE-2022-45873)

The version of systemd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-45873 advisory. - systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that ha...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2022-46392)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-46392 advisory. - An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to...