Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-114)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-114 advisory. A use-after-free flaw was found in fs/ext4/namei.c:dxinsertblock in the Linux kernel's filesystem sub- component. This flaw allows a local attacker with a user privilege to cause a denial of...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5589-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5589-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A...

Security Updates for Microsoft Azure Site Recovery (April 2022)

The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Oracle Linux 8 : rsync (ELSA-2022-6180)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6180 advisory. 3.1.3-14.3 - Resolves: 2111174 - remote arbitrary files write inside the directories of connecting peers Tenable has extracted the preceding description block...

Cisco Secure Web Appliance < 14.5.0-537 Privilege Escalation (cisco-sa-wsa-prv-esc-8PdRU8t8)

According to its self-reported version, Cisco Web Security Appliance WSA is affected by a privilege escalation vulnerability. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An authenticated, remote attacker could exploit this vulnerability to...

SUSE SLED15: libjavascriptcoregtk-4_0-18 / libjavascriptcoregtk-4_0-18-32bit / etc (SUSE-SU-2022:2820-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2820-1 advisory. - Update to version 2.36.5 bsc1201980: - Add support for PAC proxy in the WebDriver...

Google Chrome < 104.0.5112.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 104.0.5112.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop16 advisory. - Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101...

GLSA-202208-22 : xterm: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-22 xterm: Multiple Vulnerabilities - xterm before Patch 366 allows remote attackers to execute arbitrary code or cause a denial of service segmentation fault via a crafted UTF-8 combining character sequence. CVE-2021-27135 ...

Security Updates for Microsoft Visual Studio Products (August 2022)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Fbx File parser Heap overflow Vulnerability. CVE-2022-35777, CVE-2022-35826 - Fbx File parser OOBW Vulnerability. CVE-2022-35825, CVE-2022-35827 Note that Nessus has not...

AlmaLinux 8 : go-toolset:rhel8 (5775) (ALSA-2022:5775)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5775 advisory. golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30631 golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705...

Amazon Linux AMI : vim (ALAS-2022-1628)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1628 advisory. Use after free in appendcommand in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote...

Debian dla-3068 : xdmx - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3068 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3068-1 [email protected]...

RHEL 8 : thunderbird (RHSA-2022:5771)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:5771 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.12.0. Security Fixes: Mozilla:...

SUSE SLES12 Security Update : pcre2 (SUSE-SU-2022:2565-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2565-1 advisory. - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the getrecursedatalength function of the pcre2jitcompile.c file...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2022:2265-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2265-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable, Inc...

Security Updates for Microsoft Office Products C2R (May 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-28455, CVE-2021-31175,...

PHP 7.4.x < 7.4.30 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 7.4.30. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 7.4.30 advisory. - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplyi...

Fedora 36 : thunderbird (2022-a5d22b5dd8)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a5d22b5dd8 advisory. Update to 91.10.0 See https://www.mozilla.org/en-US/security/advisories/mfsa2022-22/ Tenable has extracted the preceding description block directly from the...

SUSE SLES15 Security Update : postgresql12 (SUSE-SU-2022:1894-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1894-1 advisory. - A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another...

Mozilla Thunderbird < 91.10

The version of Thunderbird installed on the remote Windows host is prior to 91.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-22 advisory. - Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs...