MiracleLinux 8 : libtiff-4.0.9-31.el8 (AXSA:2024-8169:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8169:02 advisory. libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c CVE-2022-4645 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 8 : nginx:1.16 (AXSA:2021-2307:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2307:01 advisory. nginx: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name CVE-2021-23017 Tenable has extracted the preceding descripti...

MiracleLinux 8 : compat-exiv2-026-0.26-7.el8 (AXSA:2022-3455:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-3455:01 advisory. exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS CVE-2020-18898 Tenable has extracted the preceding description block directly...

MiracleLinux 8 : redis:6 (AXSA:2021-2227:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2227:01 advisory. redis: Integer overflow via STRALGO LCS command CVE-2021-29477 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : varnish:6 (AXSA:2022-3053:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3053:01 advisory. varnish: HTTP/1 request smuggling vulnerability CVE-2022-23959 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : avahi-0.7-21.el8_9.1 (AXSA:2024-7355:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7355:01 advisory. avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket CVE-2021-3468 avahi: Reachable assertion in...

MiracleLinux 8 : mailman:2.1 (AXSA:2022-2979:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2979:01 advisory. mailman: CSRF token bypass allows to perform CSRF attacks and admin takeover CVE-2021-44227 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : libreswan-4.12-2.el8_9.2.ML.1 (AXSA:2024-7724:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-7724:02 advisory. libreswan: Missing PreSharedKey for connection can cause crash CVE-2024-2357 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : bind-9.11.36-8.el8.2 (AXSA:2023-6475:09)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6475:09 advisory. bind: stack exhaustion in control channel code may lead to DoS CVE-2023-3341 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : openjpeg2-2.3.1-3.el8 (AXSA:2020-159:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-159:04 advisory. openjpeg: heap-based buffer overflow in pjt1clbldecodeprocessor in openjp2/t1.c CVE-2020-8112 Tenable has extracted the preceding description block directly...

MiracleLinux 8 : thunderbird-102.8.0-2.el8.ML.1 (AXSA:2023-5135:10)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-5135:10 advisory. Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes...

MiracleLinux 8 : libreswan-4.12-2.el8_10.4 (AXSA:2024-8551:06)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8551:06 advisory. libreswan: IKEv1 default AH/ESP responder can crash and restart CVE-2024-3652 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : cloud-init-19.4-11.el8 (AXSA:2021-1222:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1222:01 advisory. cloud-init: Use of random.choice when generating random password CVE-2020-8631 cloud-init: Too short random password length in ccsetpassword in...

MiracleLinux 8 : flac-1.3.2-9.el8.1 (AXSA:2023-6402:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6402:03 advisory. flac: Remote Code Execution RCE via the bitwritergrow function, by supplying crafted input to the encoder CVE-2020-22219 Tenable has extracted the preceding...

MiracleLinux 8 : php:8.0 (AXSA:2023-5146:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5146:01 advisory. XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie could be treated as a Host- or Secure- cook...

MiracleLinux 8 : bluez-5.52-1.el8 (AXSA:2021-1167:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1167:01 advisory. bluez: Improper access control in subsystem could result in privilege escalation and DoS CVE-2020-0556 Tenable has extracted the preceding description block...

MiracleLinux 8 : nss-3.67.0-7.el8.ML.1 (AXSA:2021-2840:09)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2840:09 advisory. nss: Memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS CVE-2021-43527 Tenable has extracted the preceding description block directl...

MiracleLinux 8 : thunderbird-102.13.0-2.el8.ML.1 (AXSA:2023-6238:20)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6238:20 advisory. Mozilla: Use-after-free in WebRTC certificate generation CVE-2023-37201 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey...

MiracleLinux 8 : dotnet5.0-5.0.208-1.el8.ML.1 (AXSA:2021-2473:12)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2473:12 advisory. dotnet: System.DirectoryServices.Protocols.LdapConnection sends credentials in plaintext if TLS handshake fails CVE-2021-41355 Tenable has extracted the...

MiracleLinux 8 : dpdk-23.11-2.el8_10 (AXSA:2025-9537:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9537:02 advisory. dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library CVE-2024-11614 Tenable has extracted the preceding description block...