RHEL 7 : jasperrreports (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jasperrreports: XSS and CSRF vulnerabilities leading to information disclosure CVE-2017-5528 Note that Nessus has n...

RHEL 7 : libzapojit (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libzapojit: missing TLS certificate verification CVE-2021-39360 Note that Nessus has not tested for this issue but...

RHEL 7 : perl-http-daemon (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-HTTP-Daemon: HTTP::Daemon allows request smuggling CVE-2022-31081 Note that Nessus has not tested for this iss...

RHEL 7 : libsepol (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libsepol: heap-based buffer overflow in ebitmapmatchany CVE-2021-36087 - The CIL compiler in SELinux 3.2...

RHEL 7 : guava (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - guava: local information disclosure via temporary directory created with unsafe permissions CVE-2020-8908...

RHEL 7 : dbus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour CVE-2020-35512...

RHEL 7 : iniparser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - iniparser: NULL pointer cause crash in iniparsergetboolean CVE-2023-33461 Note that Nessus has not tested for this...

RHEL 7 : python-gevent (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-gevent: privilege escalation via a crafted script to the WSGIServer component CVE-2023-41419 Note that Nessu...

RHEL 7 : scipy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - scipy: use-after-free in PyFindObjects function CVE-2023-29824 - A refcounting issue which leads to...

RHEL 7 : dmidecode (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - dmidecode: dump-bin to overwrite a local file CVE-2023-30630 Note that Nessus has not tested for this issue but has...

RHEL 7 : harfbuzz (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - harfbuzz: allows attackers to trigger On^2 growth via consecutive marks CVE-2023-25193 Note that Nessus has not...

RHEL 7 : qt5-qtwebsockets (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages therefore attacker can...

RHEL 7 : haproxy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - haproxy: data leak via fcgi requests CVE-2023-0836 - An uncontrolled resource consumption vulnerability w...

RHEL 7 : pcre (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pcre: stack-based buffer overflow write in pcre32copysubstring CVE-2017-7246 - In PCRE 8.41, the OPKETRMA...

RHEL 7 : dev-java_snakeyaml (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - dev-java/snakeyaml: DoS via stack overflow CVE-2022-41854 Note that Nessus has not tested for this issue but has...

RHEL 7 : avahi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket CVE-2021-3468 -...

RHEL 7 : hesiod (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened CVE-2016-10152 - Th...

RHEL 7 : openjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openjpeg: Stack-buffer overflow in the pgxtoimage function CVE-2017-17479 - openjpeg: heap-based buffer...

RHEL 7 : tang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - tang: Race condition exists in the key generation and rotation functionality CVE-2023-1672 Note that Nessus has not...

RHEL 7 : golang.org_x_crypto (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - golang.org/x/crypto: empty plaintext packet causes panic CVE-2021-43565 Note that Nessus has not tested for this...