CVE-2023-52577 dccp: fix dccp_v4_err()/dccp_v6_err() again

In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccpv4err/dccpv6err again dh-dccphx is the 9th byte offset 8 in "struct dccphdr", not in the "byte 7" as Jann claimed. We need to make sure the ICMP messages are big enough, using more standard ways no more assumptions...

Checkmk < 2.1.0p40, 2.2.x < 2.2.0p23 Privilege Escalation Vulnerability

Checkmk is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...

Fedora 39 : chromium (2024-ef56ea86fc)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ef56ea86fc advisory. Updated to 122.0.6261.69 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

RHEL 8 : gimp:2.8 (RHSA-2024:0862)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0862 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

Oracle Linux 8 : dotnet6.0 (ELSA-2024-0808)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0808 advisory. 6.0.127-1.0.1 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 Tenable has extracted the preceding description block directly from the Oracle Linux...

AlmaLinux 8 : dotnet7.0 (ALSA-2024:0806)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0806 advisory. - .NET Denial of Service Vulnerability CVE-2024-21386, CVE-2024-21404 Note that Nessus has not tested for these issues but has instead relied only on the...

ISC BIND DoS Vulnerability (CVE-2023-6516) - Windows

ISC BIND is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; if...

Google Chrome < 121.0.6167.184 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 121.0.6167.184. It is, therefore, affected by a vulnerability as referenced in the 202402stable-channel-update-for-desktop13 advisory. Note that Nessus has not tested for this issue but has instead relied only on the...

QNAP QTS / QuTS hero Multiple Vulnerabilities in QTS, QuTS hero and QuTScloud (QSA-23-53)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-53 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

AlmaLinux 9 : gimp (ALSA-2024:0675)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0675 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

QNAP QTS / QuTS hero Vulnerability in QTS, QuTS hero, and QuTScloud (QSA-24-04)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-24-04 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

PostgreSQL 12.x < 12.18, 13.x < 13.14, 14.x < 14.11, 15.x < 15.6, 16.x < 16.1 Privilege Escalation Vulnerability - Windows

PostgreSQL is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Django < 3.2.24, 4.x < 4.2.10, 5.x < 5.0.2 DoS Vulnerability - Linux

Django is prone to a denial of service DoS vulnerability in the intcomma template filter. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Django < 3.2.24, 4.x < 4.2.10, 5.x < 5.0.2 DoS Vulnerability - Windows

Django is prone to a denial of service DoS vulnerability in the intcomma template filter. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Discourse < 3.1.4, 3.2.x < 3.2.0.beta4 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review

November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review. Hello everyone! It has been 3 months since the last episode. I spent most of this time improving my Vulristics project. So in this episode, let’s take a loo...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2024:0270-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0270-1 advisory. - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts XSA-449 bsc1218851 Tenable has extracted the preceding description...

Amazon Corretto Java 8.x < 8.402.08.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.402.08.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2024-Jan-19 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Eclipse Jetty XXE Vulnerability (GHSA-58qw-p7qm-5rvh) - Windows

Eclipse Jetty is prone to a XML external entity XXE vulnerability in the XMLParser. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2023-2684)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Tenable Network Security has extracted the preceding description...