RHEL 8 : thunderbird (RHSA-2024:8790)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:8790 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: History interface could have been used ...

AlmaLinux 8 : krb5 (ALSA-2024:8860)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:8860 advisory. freeradius: forgery attack CVE-2024-3596 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that Nessus has...

RHEL 8 : go-toolset:rhel8 (RHSA-2024:8876)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8876 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: net/netip: Unexpect...

AlmaLinux 8 : kernel-rt (ALSA-2024:8870)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:8870 advisory. kernel: net/bluetooth: race condition in conninfomin,maxageset CVE-2024-24857 kernel: dmaengine: fix NULL pointer in channel unregistration function...

Oracle Linux 8 : xmlrpc-c (ELSA-2024-8859)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8859 advisory. 1.51.0-10 - Prevent integer overflow or wraparound, CVE-2024-4549 RHEL-57519 Tenable has extracted the preceding description block directly from the Oracle Linu...

RHEL 8 : krb5 (RHSA-2024:8789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8789 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords...

RHEL 8 : kernel (RHSA-2024:8856)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8856 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/bluetooth: race condition ...

Oracle Linux 8 : python3.11 (ELSA-2024-8838)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8838 advisory. 3.11.10-1.0.1 - Update rpm-macros description Orabug: 36024572 3.11.10-1 - Update to 3.11.10 Resolves: RHEL-57400 Tenable has extracted the preceding descriptio...

AlmaLinux 8 : python3.12-urllib3 (ALSA-2024:8842)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:8842 advisory. urllib3: proxy-authorization request header is not stripped during cross-origin redirects CVE-2024-37891 Tenable has extracted the preceding description block...

AlmaLinux 8 : container-tools:rhel8 (ALSA-2024:8846)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:8846 advisory. Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library CVE-2024-9341 Buildah: Podman: Improper Input Validati...

AlmaLinux 8 : grafana-pcp (ALSA-2024:8847)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:8847 advisory. golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...

Oracle Linux 8 : libtiff (ELSA-2024-8833)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8833 advisory. 4.0.9-33 - fix CVE-2024-7006 a null pointer dereference in tifdirinfo RHEL-52927 Tenable has extracted the preceding description block directly from the Oracle...

RHEL 8 : python39:3.9 (RHSA-2024:8797)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8797 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

RHEL 8 : container-tools:rhel8 (RHSA-2024:8703)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8703 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: buildah: Buildah...

AlmaLinux 8 : haproxy (ALSA-2024:8849)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:8849 advisory. haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers CVE-2023-45539 Tenable has extracted the preceding description block...

Oracle Linux 8 : krb5 (ELSA-2024-8860)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8860 advisory. - libkrad: implement support for Message-Authenticator CVE-2024-3596 Resolves: RHEL-50253 Tenable has extracted the preceding description block directly from th...

AlmaLinux 8 : xmlrpc-c (ALSA-2024:8859)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:8859 advisory. libexpat: Integer Overflow or Wraparound CVE-2024-45491 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note...

RHEL 8 : xorg-x11-server and xorg-x11-server-Xwayland (RHSA-2024:8798)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8798 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user...

RHEL 8 : container-tools:rhel8 (RHSA-2024:8846)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8846 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: Podman:...

AlmaLinux 8 : bzip2 (ALSA-2024:8922)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:8922 advisory. bzip2: out-of-bounds write in function BZ2decompress CVE-2019-12900 Tenable has extracted the preceding description block directly from the AlmaLinux security...