MiracleLinux 8 : nghttp2-1.33.0-3.el8.1 (AXSA:2020-326:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-326:01 advisory. nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 7 : freetype-2.8-14.el7.1 (AXSA:2020-868:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-868:01 advisory. freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng CVE-2020-15999 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : sqlite-3.26.0-6.el8 (AXSA:2020-328:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-328:02 advisory. sqlite: heap out-of-bound read in function rtreenode CVE-2019-8457 sqlite: fts3: improve shadow table corruption detection CVE-2019-13752 sqlite: fts...

MiracleLinux 8 : vim-8.0.1763-15.el8 (AXSA:2020-998:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-998:02 advisory. vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode CVE-2019-20807 Tenable has extracted the preceding descripti...

MiracleLinux 7 : podman-1.6.4-16.el7 (AXSA:2020-058:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-058:01 advisory. podman: resolving symlink in host filesystem leads to unexpected results of copy operation CVE-2019-18466 containers/image: Container images read...

MiracleLinux 8 : net-snmp-5.8-18.el8.1 (AXSA:2021-1393:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1393:02 advisory. net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution CVE-2020-15862 Tenable has extracted the preceding descriptio...

MiracleLinux 9 : python3.9-3.9.10-3.el9 (AXSA:2022-4535:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4535:03 advisory. python: int type in PyLongFromString does not limit amount of digits converting text to int leading to DoS CVE-2020-10735 Tenable has extracted the preceding...

MiracleLinux 7 : kernel-3.10.0-1160.31.1.el7 (AXSA:2021-1963:11)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1963:11 advisory. kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 kernel: Use after free via PI futex state CVE-2021-3347 kernel: use-after-free in...

MiracleLinux 4 : tomcat6-6.0.24-115.AXS4 (AXSA:2020-136:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-136:02 advisory. tomcat: deserialization flaw in session persistence storage leading to RCE CVE-2020-9484 Tenable has extracted the preceding description block directly from t...

MiracleLinux 7 : tomcat-7.0.76-16.0.1.el7.AXS7 (AXSA:2024-8731:12)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8731:12 advisory. Fix file path bug introduced by the CVE-2021-25329 fix CVEs: CVE-2021-25329 The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to...

MiracleLinux 8 : python-cryptography-3.2.1-4.el8 (AXSA:2021-2026:02)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2026:02 advisory. python-cryptography: bleichenbacher timing oracle attack against RSA decryption CVE-2020-25659 python-cryptography: certain sequences of update call...

MiracleLinux 8 : binutils-2.30-75.el8 (AXSA:2020-361:08)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-361:08 advisory. binutils: integer overflow leading to a SEGV in bfddwarf2findnearestline in dwarf2.c CVE-2019-17451 binutils: Improper Input Validation,...

MiracleLinux 8 : virt:rhel (AXSA:2020-911:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-911:01 advisory. QEMU: usb: out-of-bounds r/w access issue while processing usb packets CVE-2020-14364 QEMU: slirp: networking out-of-bounds read information disclosu...

MiracleLinux 7 : samba-4.10.4-10.el7 (AXSA:2020-020:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-020:02 advisory. samba: Combination of parameters and permissions can allow user to escape from the share path definition CVE-2019-10197 samba: smb client vulnerable ...

MiracleLinux 4 : java-1.8.0-openjdk-1.8.0.242.b07-1.AXS4 (AXSA:2020-4437:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4437:02 advisory. OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS Security, 8229951 CVE-2020-2601 OpenJDK: Serialization filter changes via jdk.serialFilter...

MiracleLinux 7 : grub2-2.02-0.86.0.1.el7.AXS7 (AXSA:2020-257:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-257:02 advisory. grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 grub2: grubmalloc does not validate allocation...

MiracleLinux 7 : rh-python38-python-psutil-5.6.4-5.el7, rh-python38-python-urllib3-1.25.7-6.el7 (AXSA:2021-1435:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1435:01 advisory. python-psutil: double free because of refcount mishandling CVE-2019-18874 python-urllib3: CRLF injection via HTTP request method CVE-2020-26137...

MiracleLinux 8 : python38:3.8 (AXSA:2021-2388:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2388:01 advisory. PyYAML: incomplete fix for CVE-2020-1747 CVE-2020-14343 Modularity name: python38 Stream name: 3.8 Tenable has extracted the preceding description block...

MiracleLinux 7 : kernel-3.10.0-1160.118.1.el7 (AXSA:2024-7723:11)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7723:11 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: kernel: use after free in unixstreamsendpage...

MiracleLinux 7 : libreoffice-5.3.6.1-24.el7 (AXSA:2020-4715:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4715:01 advisory. libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands CVE-2019-9848 libreoffice: Insufficient URL validation...