CentOS 9 : flac-1.3.3-10.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the flac-1.3.3-10.el9 build changelog. - In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local...

CentOS 9 : expat-2.5.0-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the expat-2.5.0-1.el9 build changelog. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memo...

CentOS 9 : thunderbird-102.8.0-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the thunderbird-102.8.0-2.el9 build changelog. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested for this...

CentOS 9 : bind-9.16.23-13.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the bind-9.16.23-13.el9 build changelog. - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has...

CentOS 9 : transfig-3.2.7b-9.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the transfig-3.2.7b-9.el9 build changelog. - An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c...

CentOS 9 : varnish-6.6.2-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the varnish-6.6.2-3.el9 build changelog. - Request Forgery Vulnerability CVE-2022-45060 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 9 : xorg-x11-server-1.20.11-15.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the xorg-x11-server-1.20.11-15.el9 build changelog. - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the...

CentOS 9 : libfastjson-0.99.9-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libfastjson-0.99.9-4.el9 build changelog. - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-127...

CentOS 9 : vim-8.2.2637-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-16.el9 build changelog. - Use of Out-of-range Pointer Offset in vim prior CVE-2022-0554 - Heap-based Buffer Overflow occurs in vim CVE-2022-0943 Note that Nessus h...

CentOS 9 : httpd-2.4.53-11.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the httpd-2.4.53-11.el9 build changelog. - out-of-bounds read/write of zero byte CVE-2006-20001 - Possible request smuggling CVE-2022-36760 - HTTP response splitting CVE-2022-37436...

CentOS 9 : nodejs-16.16.0-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the nodejs-16.16.0-1.el9 build changelog. - Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs...

CentOS 9 : curl-7.76.1-26.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the curl-7.76.1-26.el9 build changelog. - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on...

CentOS 9 : dnsmasq-2.85-13.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the dnsmasq-2.85-13.el9 build changelog. - An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag...

CentOS 9 : cpio-2.13-16.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the cpio-2.13-16.el9 build changelog. - GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr integer overflow that...

CentOS 9 : xmlrpc-c-1.51.0-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the xmlrpc-c-1.51.0-16.el9 build changelog. - xmlparse.c in Expat aka libexpat before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs. CVE-2022-25236 Not...

CentOS 9 : libX11-1.7.0-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libX11-1.7.0-8.el9 build changelog. - rhbz2213763 CVE-2023-3138 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CentOS 9 : dpdk-21.11.2-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dpdk-21.11.2-1.el9 build changelog. - A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by...

CentOS 9 : libksba-1.5.1-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libksba-1.5.1-5.el9 build changelog. - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for...

CentOS 9 : tomcat-9.0.62-14.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the tomcat-9.0.62-14.el9 build changelog. - not including the secure attribute causes information CVE-2023-28708 - The fix for CVE-2023-24998 was incomplete for Apache Tomcat...

CentOS 9 : vim-8.2.2637-14.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the vim-8.2.2637-14.el9 build changelog. - Stack-based Buffer Overflow in vim prior to 8.2 CVE-2022-0629 Note that Nessus has not tested for this issue but has instead relied only on the...