Amazon Linux AMI : dnsmasq (ALAS-2023-1758)

The version of dnsmasq installed on the remote host is prior to 2.76-16.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1758 advisory. An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232...

Amazon Linux AMI : squid (ALAS-2023-1766)

The version of squid installed on the remote host is prior to 3.5.20-17.48. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1766 advisory. Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results in...

Amazon Linux AMI : squid (ALAS-2023-1757)

The version of squid installed on the remote host is prior to 3.5.20-17.46. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1757 advisory. An issue was discovered in Squid before 4.9. When handling a URN request, a corresponding HTTP request is made. This HTT...

Amazon Linux AMI : kernel (ALAS-2023-1750)

The version of kernel installed on the remote host is prior to 4.14.314-164.539. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1750 advisory. In the Linux kernel through 6.3.1, a use-after-free in Netfilter nftables when processing batch requests can be abused to...

Amazon Linux AMI : tar (ALAS-2023-1755)

The version of tar installed on the remote host is prior to 1.26-31.24. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1755 advisory. paxdecodeheader in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed...

Amazon Linux AMI : squid (ALAS-2023-1754)

The version of squid installed on the remote host is prior to 3.5.20-17.45. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1754 advisory. An issue was discovered in Squid before 4.12 and 5.x before 5.0.3. Due to use of a potentially dangerous function, Squid and the...

Amazon Linux AMI : perl (ALAS-2023-1751)

The version of perl installed on the remote host is prior to 5.16.3-294.44. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1751 advisory. HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration whe...

Amazon Linux AMI : libksba (ALAS-2023-1752)

The version of libksba installed on the remote host is prior to 1.3.5-1.11. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1752 advisory. Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 Tenable has...

Amazon Linux AMI : libssh2 (ALAS-2023-1756)

The version of libssh2 installed on the remote host is prior to 1.4.2-3.13. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1756 advisory. An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the libssh2packetrequire and libssh2packetrequirev...

Amazon Linux AMI : samba (ALAS-2023-1747)

The version of samba installed on the remote host is prior to 4.10.16-24.66. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1747 advisory. Netlogon RPC Elevation of Privilege Vulnerability. CVE-2022-38023 Tenable has extracted the preceding description block directly...

Amazon Linux AMI : tigervnc (ALAS-2023-1746)

The version of tigervnc installed on the remote host is prior to 1.8.0-21.35. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1746 advisory. A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited...

Amazon Linux AMI : ImageMagick (ALAS-2023-1745)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1.25. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1745 advisory. A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation...

Amazon Linux AMI : kernel (ALAS-2023-1735)

The version of kernel installed on the remote host is prior to 4.14.313-162.533. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1735 advisory. 2023-06-07: CVE-2023-1838 was added to this advisory. A use-after-free flaw was found in vhostnetsetbackend in...

Amazon Linux AMI : nss (ALAS-2023-1736)

The version of nss installed on the remote host is prior to 3.53.1-7.88. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1736 advisory. firefox-esr , thunderbird and nss only are affected by this package. CVE-2023-0767 Tenable has extracted the preceding description...

Amazon Linux AMI : libxml2 (ALAS-2023-1743)

The version of libxml2 installed on the remote host is prior to 2.9.1-6.6.42. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1743 advisory. parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the...

Amazon Linux AMI : tomcat7 (ALAS-2023-1738)

The version of tomcat7 installed on the remote host is prior to 7.0.109-1.42. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1738 advisory. 2023-05-11: CVE-2017-12616 was added to this advisory. When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0....

Amazon Linux AMI : privoxy (ALAS-2023-1739)

The version of privoxy installed on the remote host is prior to 3.0.23-2.17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1739 advisory. A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunkedbodyiscomplete leading to...

Amazon Linux AMI : libwebp (ALAS-2023-1740)

The version of libwebp installed on the remote host is prior to 0.3.0-10.8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1740 advisory. A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign...

Amazon Linux AMI : ghostscript (ALAS-2023-1734)

The version of ghostscript installed on the remote host is prior to 8.70-24.28. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1734 advisory. In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the...

Amazon Linux AMI : openldap (ALAS-2023-1741)

The version of openldap installed on the remote host is prior to 2.4.40-16.36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1741 advisory. An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and...