MiracleLinux 7 : libvirt-3.2.0-14.el7.7 (AXSA:2018-2502:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-2502:01 advisory. An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used...

MiracleLinux 4 : microcode_ctl-1.17-25.4.AXS4 (AXSA:2018-2518:02)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2518:02 advisory. This update supersedes microcode provided by Asianux with the CVE-2017-5715 Spectre CPU branch injection vulnerability mitigation. Historically, Asianux has...

MiracleLinux 4 : ghostscript-8.70-24.AXS4.2 (AXSA:2018-3430:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-3430:01 advisory. It was discovered that the ghostscript /invalidaccess checks fail under certain conditions. An attacker could possibly exploit this to bypass the -dSAFER...

MiracleLinux 7 : krb5-1.15.1-34.el7 (AXSA:2018-3419:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3419:03 advisory. krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data CVE-2018-5729 krb5: DN container check bypass by...

MiracleLinux 7 : php-5.4.16-43.el7.1 (AXSA:2018-2623:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-2623:01 advisory. php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function CVE-2017-7890 Tenable has extracted the preceding description block directly...

MiracleLinux 7 : bind-9.11.4-9.P2.0.1.el7.AXS7 (AXSA:2019-4292:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4292:05 advisory. bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies CVE-2018-5741 Tenable has extracted the preceding description block directly...

MiracleLinux 7 : xorg-x11-server-1.20.1-5.1.el7 (AXSA:2019-3538:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3538:01 advisory. xorg-x11-server: Incorrect permission check in Xorg X server allows for privilege escalation CVE-2018-14665 Tenable has extracted the preceding description...

MiracleLinux 4 : firefox-52.7.2-1.0.1.AXS4 (AXSA:2018-2628:03)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2628:03 advisory. Mozilla: Vorbis audio processing out of bounds write MFSA 2018-08 CVE-2018-5146 Tenable has extracted the preceding description block directly from the...

MiracleLinux 4 : python-paramiko-1.7.5-4.AXS4 (AXSA:2018-2793:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2793:01 advisory. python-paramiko: Authentication bypass in transport.py CVE-2018-7750 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 7 : libvncserver-0.9.9-12.el7 (AXSA:2018-2817:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2817:02 advisory. libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c CVE-2018-7225 Tenable has extracted the preceding description block...

MiracleLinux 4 : java-1.8.0-openjdk-1.8.0.181-3.b13.AXS4 (AXSA:2018-3264:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3264:03 advisory. OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 Tenable has extracted the preceding descriptio...

MiracleLinux 7 : libgovirt-0.3.4-3.el7, spice-gtk-0.35-4.el7, spice-vdagent-0.14.0-18.el7, virt-viewer-5.0-15.el7 (AXSA:2019-4267:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4267:01 advisory. spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows CVE-2018-10893 Tenable has extracted the preceding description...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.191.b12-0.el7 (AXSA:2018-3359:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3359:06 advisory. OpenJDK: Improper field access checks Hotspot, 8199226 CVE-2018-3169 OpenJDK: Unrestricted access to scripting engine Scripting, 8202936 CVE-2018-31...

MiracleLinux 7 : kernel-3.10.0-957.1.3.el7 (AXSA:2019-3433:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3433:01 advisory. kernel: stack-based buffer overflow in chapservercomputemd5 in iscsi target CVE-2018-14633 kernel: NULL pointer dereference in...

MiracleLinux 7 : python-paramiko-2.1.1-9.el7 (AXSA:2019-3528:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3528:01 advisory. python-paramiko: Authentication bypass in authhandler.py CVE-2018-1000805 Tenable has extracted the preceding description block directly from the MiracleLinu...

MiracleLinux 7 : postgresql-9.2.24-1.el7 (AXSA:2018-3306:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3306:02 advisory. postgresql: Certain host connection parameters defeat client-side security defenses CVE-2018-10915 Tenable has extracted the preceding description block...

MiracleLinux 4 : java-1.7.0-openjdk-1.7.0.191-2.6.15.4.AXS4 (AXSA:2018-3267:05)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3267:05 advisory. OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 Tenable has extracted the preceding descriptio...

MiracleLinux 4 : glusterfs-3.12.2-18.AXS4 (AXSA:2018-3346:04)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3346:04 advisory. glusterfs: Improper deserialization in dict.c:dictunserialize can allow attackers to read arbitrary memory CVE-2018-10911 Tenable has extracted the preceding...

MiracleLinux 7 : pacemaker-1.1.19-8.el7.5 (AXSA:2019-3935:04)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3935:04 advisory. pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc CVE-2018-16877 pacemaker: Insufficient...

MiracleLinux 7 : sssd-1.16.2-13.el7 (AXSA:2019-3678:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3678:01 advisory. sssd: information leak from the sssd-sudo responder CVE-2018-10852 Tenable has extracted the preceding description block directly from the MiracleLinux...