MiracleLinux 7 : wget-1.14-18.el7.1 (AXSA:2019-3884:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3884:01 advisory. Security Fix - wget CVE-2019-5953 CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : bash-4.2.46-28.el7 (AXSA:2017-1762:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1762:01 advisory. The GNU Bourne Again shell Bash is a shell or command language interpreter that is compatible with the Bourne shell sh. Bash incorporates useful...

MiracleLinux 4 : qemu-kvm-0.12.1.2-2.506.AXS4.5 (AXSA:2019-4314:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4314:03 advisory. QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806 QEMU: slirp: heap buffer overflow in tcpemu CVE-2019-6778...

MiracleLinux 3 : OpenIPMI-2.0.16-16.0.1.AXS3 (AXSA:2013-38:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-38:01 advisory. The Open IPMI project aims to develop an open code base to allow access to platform information using Intelligent Platform Management Interface IPMI. This...

MiracleLinux 4 : thunderbird-45.3.0-1.AXS4 (AXSA:2016-652:06)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2016-652:06 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security issues fixed with this release: CVE-2016-2836 Multiple unspecified vulnerabilities in...

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.38-1.13.10.0.AXS4 (AXSA:2016-044:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-044:01 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-0402 Unspecified vulnerability in the Java SE and Java SE Embedded...

MiracleLinux 4 : firefox-17.0.3-1.0.1.AXS4, xulrunner-17.0.3-1.0.1.AXS4, libproxy-0.3.0-4.AXS4, yelp-2.28.1-17.AXS4 (AXSA:2013-196:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-196:02 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...

MiracleLinux 4 : [security - medium] python27 (AXSA:2017-1647:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1647:01 advisory. python27-modwsgi The modwsgi adapter is an Apache module that provides a WSGI compliant interface for hosting Python based web applications within Apache. Th...

MiracleLinux 7 : fltk-1.3.4-1.el7, tigervnc-1.8.0-1.el7 (AXSA:2017-2026:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2026:01 advisory. fltk FLTK pronounced fulltick is a cross-platform C GUI toolkit. It provides modern GUI functionality without the bloat, and supports 3D graphics vi...

MiracleLinux 7 : linux-firmware-20190429-72.gitddde598.el7 (AXSA:2019-4272:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4272:02 advisory. kernel: Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie- Hellman key exchange CVE-2018-5383 Tenable has...

MiracleLinux 7 : qemu-kvm-1.5.3-105.el7.3 (AXSA:2016-049:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-049:01 advisory. qemu-kvm is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu-kvm acts as a virtual machine monitor together with the K...

MiracleLinux 4 : dnsmasq-2.48-18.AXS4 (AXSA:2017-2307:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-2307:01 advisory. A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which wou...

MiracleLinux 4 : firefox-60.7.2-1.0.1.AXS4 (AXSA:2019-3914:03)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3914:03 advisory. Security Fix - CVE-2019-11707, CVE-2019-11708 CVE CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted the preceding description block directly from the...

MiracleLinux 4 : freetype-2.3.11-19.AXS4 (AXSA:2019-4408:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4408:01 advisory. freetype: a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c leading to information disclosure CVE-2015-9381 freetype: mishandling...

MiracleLinux 7 : postgresql-9.2.14-1.el7 (AXSA:2015-668:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-668:02 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll nee...

MiracleLinux 4 : httpd24-httpd-2.4.34-8.AXS4.1, httpd24-nghttp2-1.7.1-7.AXS4.1 (AXSA:2019-4336:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4336:01 advisory. HTTP/2: large amount of data requests leads to denial of service CVE-2019-9511 HTTP/2: flood using PRIORITY frames resulting in excessive resource...

MiracleLinux 4 : java-1.8.0-openjdk-1.8.0.101-3.b13.AXS4 (AXSA:2016-570:06)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-570:06 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-3458 RESERVED This candidate has been reserved by an organization ...

MiracleLinux 7 : rh-php70-php-7.0.27-1.el7 (AXSA:2018-3021:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-3021:01 advisory. php: Heap overflow in mysqlnd when not receiving UNSIGNEDFLAG in BIT field CVE-2016-7412 php: Use after free in wddxdeserialize CVE-2016-7413 php: O...

MiracleLinux 4 : pki-core-9.0.3-30.AXS4 (AXSA:2013-181:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-181:01 advisory. Certificate System CS is an enterprise software system designed to manage enterprise Public Key Infrastructure PKI deployments. PKI Core contains fundamental...

MiracleLinux 7 : libtiff-4.0.3-32.el7 (AXSA:2019-4125:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4125:01 advisory. libtiff: buffer overflow in gif2tiff CVE-2016-3186 libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denia...