MiracleLinux 9 : e2fsprogs-1.46.5-3.el9 (AXSA:2023-4587:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-4587:01 advisory. e2fsprogs: out-of-bounds read/write via crafted filesystem CVE-2022-1304 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 9 : qt5 (AXSA:2023-4961:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-4961:01 advisory. qt: QProcess could execute a binary from the current working directory when not found in the PATH CVE-2022-25255 Tenable has extracted the preceding...

MiracleLinux 9 : postgresql-13.16-1.el9_4 (AXSA:2024-8734:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8734:04 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 Tenable has extracted the preceding description block directly...

MiracleLinux 9 : fence-agents-4.10.0-62.el9_4.4.ML.1 (AXSA:2024-8555:09)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8555:09 advisory. urllib3: proxy-authorization request header is not stripped during cross-origin redirects CVE-2024-37891 Tenable has extracted the preceding description bloc...

MiracleLinux 9 : edk2-20231122-6.el9_4.4 (AXSA:2024-8977:11)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8977:11 advisory. openssl: Possible denial of service in X.509 name checks CVE-2024-6119 Tenable has extracted the preceding description block directly from the MiracleLinux...

RockyLinux 9 : gnupg2 (RLSA-2026:0719)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0719 advisory. GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write CVE-2025-68973 Tenable has extracted the preceding description...

MiracleLinux 9 : thunderbird-91.11.0-2.el9.ML.1 (AXSA:2022-4028:19)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4028:19 advisory. Mozilla: CSP sandbox header without allow-scripts can be bypassed via retargeted javascript: URI CVE-2022-34468 Mozilla: Use-after-free in nsSHistor...

MiracleLinux 9 : libjpeg-turbo-2.0.90-6.el9 (AXSA:2023-5197:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5197:01 advisory. libjpeg-turbo: heap buffer overflow in getwordrgbrow in rdppm.c CVE-2021-46822 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : dovecot-2.3.16-7.el9 (AXSA:2023-4711:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-4711:01 advisory. dovecot: Privilege escalation when similar master and non-master passdbs are used CVE-2022-30550 Tenable has extracted the preceding description block direct...

MiracleLinux 9 : openssh-8.7p1-38.el9.ML.2 (AXSA:2024-8500:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8500:05 advisory. - Possible remote code execution due to a race condition in signal handling CVE-2024-6387, regreSSHion CVEs: CVE-2024-6387 Tenable has extracted the precedin...

MiracleLinux 9 : librsvg2-2.50.7-1.el9.1 (AXSA:2023-6396:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6396:01 advisory. librsvg: Arbitrary file read when xinclude href has special characters CVE-2023-38633 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : dotnet7.0-7.0.117-1.el9_3.ML.1 (AXSA:2024-7616:07)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7616:07 advisory. dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support CVE-2024-21392 Tenable has extracted the preceding description block directly from the MiracleLinu...

MiracleLinux 9 : python-requests-2.25.1-7.el9 (AXSA:2023-6284:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6284:01 advisory. python-requests: Unintended leak of Proxy-Authorization header CVE-2023-32681 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : openexr-3.1.1-2.el9_4.1 (AXSA:2024-8955:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8955:01 advisory. OpenEXR: Heap Overflow in Scanline Deep Data Parsing CVE-2023-5841 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 9 : webkit2gtk3-2.38.5-1.el9.1 (AXSA:2023-6005:12)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6005:12 advisory. WebKitGTK: Regression of CVE-2023-28205 fixes in the Red Hat Enterprise Linux CVE-2023-2203 Tenable has extracted the preceding description block directly fr...

MiracleLinux 9 : libreswan-4.9-2.el9 (AXSA:2023-5981:06)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5981:06 advisory. libreswan: remote DoS via crafted TS payload with an incorrect selector length CVE-2023-23009 Tenable has extracted the preceding description block directly...

MiracleLinux 9 : libuv-1.42.0-2.el9_4 (AXSA:2024-8597:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8597:02 advisory. libuv: Improper Domain Lookup that potentially leads to SSRF attacks CVE-2024-24806 Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : fontforge-20201107-6.el9 (AXSA:2024-9309:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-9309:02 advisory. fontforge: command injection via crafted archives or compressed files CVE-2024-25082 fontforge: command injection via crafted filenames CVE-2024-250...

MiracleLinux 9 : cups-2.3.3op2-31.el9 (AXSA:2024-9124:11)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9124:11 advisory. cups: libppd: remote command injection via attacker controlled data in PPD file Tenable has extracted the preceding description block directly from the...

MiracleLinux 9 : mingw-glib2-2.78.6-1.el9 (AXSA:2024-9231:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9231:02 advisory. glib2: Signal subscription vulnerabilities CVE-2024-34397 Tenable has extracted the preceding description block directly from the MiracleLinux security...