RHEL 7 : velocity (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - velocity: arbitrary code execution when attacker is able to modify templates CVE-2020-13936 Note that Nessus has no...

RHEL 7 : lynx (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - lynx: Invalid URL parsing of pages containing '?' CVE-2016-9179 - lynx: Use after free in...

RHEL 7 : libjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libjpeg: null pointer dereference in cjpeg CVE-2016-3616 Note that Nessus has not tested for this issue but has...

RHEL 7 : rhnsd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - rhnsd: World-writable PID files CVE-2017-7560 Note that Nessus has not tested for this issue but has instead relied...

RHEL 7 : polkit (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl CVE-2016-2568 No...

RHEL 7 : libxslt (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxslt: Heap overread due to an empty decimal-separator CVE-2016-4738 - libxslt, as used in Apple iOS...

RHEL 7 : rabbitmq (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - rabbitmq: MQTT connection authentication succeeds with empty password CVE-2016-9877 Note that Nessus has not tested...

RHEL 7 : php,_gd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - php, gd: Stack overflow in gdImageFillToBorder on truecolor images CVE-2016-9933 Note that Nessus has not tested fo...

RHEL 7 : libxfixes (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libXfixes: Insufficient validation of server responses results in Integer overflow CVE-2016-7944 Note that Nessus h...

RHEL 7 : jdom (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jdom: XXE allows attackers to cause a DoS via a crafted HTTP request CVE-2021-33813 Note that Nessus has not tested...

RHEL 7 : pycryptodome (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex CVE-2023-52323 Note that...

RHEL 7 : packagekitd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - PackageKitd: Use-After-Free in Idle Function Callback CVE-2024-0217 Note that Nessus has not tested for this issue...

RHEL 7 : e2fsprogs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - e2fsprogs: out-of-bounds read/write via crafted filesystem CVE-2022-1304 Note that Nessus has not tested for this...

RHEL 7 : perl-cpan (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-CPAN: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16156 Note that Nessus has not tested f...

RHEL 7 : udisks2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - udisks2: insecure defaults in user-accessible mount helpers allow for a DoS CVE-2021-3802 Note that Nessus has not...

RHEL 7 : jose-go (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jose-go: improper handling of highly compressed data CVE-2024-28180 Note that Nessus has not tested for this issue...

RHEL 7 : perl-file-path (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-File-Path: rmtree/removetree race condition CVE-2017-6512 Note that Nessus has not tested for this issue but h...

RHEL 7 : protobuf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference CVE-2021-22570 Note that...

RHEL 7 : xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xen: rogue backends can cause DoS of guests via high frequency events CVE-2021-28713 - Rogue backends can...

RHEL 7 : fribidi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - fribidi: Stack based buffer overflow CVE-2022-25308 - A heap-based buffer overflow flaw was found in the...