RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2024:4374)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4374 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packag...

RHEL 8 : less (RHSA-2024:4366)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4366 advisory. The less utility is a text file browser that resembles more, but allows users to move backwards in the file as well as forwards. Since less does not...

Oracle Linux 8 : python3 (ELSA-2024-4243)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4243 advisory. 3.12.3-2 - Enable importing of hash-based .pyc files under FIPS mode Resolves: RHEL-40776 3.12.3-1 - Update to 3.12.3 Related: RHEL-33685 3.12.2-3 - Move all te...

AlmaLinux 8 : libreoffice (ALSA-2024:4242)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4242 advisory. libreoffice: create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic CVE-2024-3044 Tenable has extracted the...

Oracle Linux 8 : kernel (ELSA-2024-4211)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4211 advisory. - udf: Fix NULL pointer dereference in udfsymlink function Pavel Reichl RHEL-37769 CVE-2021-47353 - net: ti: fix UAF in tlanremoveone Jose Ignacio Torn...

Oracle Linux 8 : openldap (ELSA-2024-4264)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4264 advisory. 2.4.46-19 - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in bermemallocx function Tenable has extracted the preceding...

AlmaLinux 8 : iperf3 (ALSA-2024:4241)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:4241 advisory. iperf3: possible denial of service CVE-2023-7250 iperf3: vulnerable to marvin attack if the authentication option is used CVE-2024-26306 Tenable has...

Oracle Linux 8 : libuv (ELSA-2024-4247)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4247 advisory. 1:1.41.1-2 - Backport fixes for CVE-2024-24806 Resolves: RHEL-24790 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 8 : python-idna (ELSA-2024-4260)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-4260 advisory. - Fix patch application for security fix for CVE-2024-3651 Resolves: RHEL-32703 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 8 : iperf3 (ELSA-2024-4241)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-4241 advisory. 3.5-10 - Resolves: RHEL-29578 - vulnerable to marvin attack if the authentication option is used 3.5-9 - Resolves: RHEL-17069 - possible denial of...

AlmaLinux 8 : python3 (ALSA-2024:4245)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:4245 advisory. python-pymysql: SQL injection if used with untrusted JSON input CVE-2024-36039 Tenable has extracted the preceding description block directly from the AlmaLinux...

Oracle Linux 8 : cups (ELSA-2024-4265)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4265 advisory. - 1:2.2.6-60 - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener...

CentOS SEoL (8.x)

According to its version, CentOS is 8.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc...

Oracle Linux 8 : c-ares (ELSA-2024-4249)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4249 advisory. 1.13.0-11 - Resolves: RHEL-26525 - c-ares: Out of bounds read in aresreadline rhel-8 Tenable has extracted the preceding description block directly from the...

AlmaLinux 8 : python3 (ALSA-2024:4243)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4243 advisory. python: The zipfile module is vulnerable to zip-bombs leading to denial of service CVE-2024-0450 Tenable has extracted the preceding description block directly fro...

Oracle Linux 8 : nghttp2 (ELSA-2024-4252)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4252 advisory. - fix CONTINUATION frames DoS CVE-2024-27316 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : 389-ds (ELSA-2024-4235)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4235 advisory. 1.4.3.39-7 - Bump version to 1.4.3.39-7 - Resolves: RHEL-16277 - LDAP connections are closed with code T2 before the IO block timeout is reached...

Oracle Linux 8 : python-pillow (ELSA-2024-4227)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4227 advisory. 5.1.1-21 - Security fix for CVE-2024-28219 Resolves: RHEL-31071 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : python3 (ELSA-2024-4245)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-4245 advisory. 1.1.0-3 - Security fix for CVE-2024-36039 Resolves: RHEL-38366 Tenable has extracted the preceding description block directly from the Oracle Linux security...

AlmaLinux 8 : xmlrpc-c (ALSA-2024:4259)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4259 advisory. expat: parsing large tokens can trigger a denial of service CVE-2023-52425 Tenable has extracted the preceding description block directly from the AlmaLinux securi...