CentOS 8 : httpd:2.4 (CESA-2023:1673)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:1673 advisory. - Some modproxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when...

CentOS 8 : postgresql:13 (CESA-2023:1576)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:1576 advisory. - A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure ...

CentOS 8 : httpd:2.4 (CESA-2023:0852)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0852 advisory. - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header valu...

CentOS 8 : php:8.0 (CESA-2023:0848)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0848 advisory. - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files, resulting in an infinite...

CentOS 8 : go-toolset:rhel8 (CESA-2023:0446)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:0446 advisory. - In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closin...

CentOS 8 : postgresql:10 (CESA-2023:0113)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:0113 advisory. - A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait f...

CentOS 8 : nodejs:14 (CESA-2023:0050)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:0050 advisory. - Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. CVE-2021-44906 - node-fetch is vulnerable to...

CentOS 8 : nodejs:16 (CESA-2022:9073)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:9073 advisory. - nodejs: Improper handling of URI Subject Alternative Names CVE-2021-44531 - nodejs: Certificate Verification Bypass via String Injection CVE-2021-445...

CentOS 8 : nodejs:18 (CESA-2022:8833)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:8833 advisory. - nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 - nodejs: DNS rebinding in inspect via invalid octal IP address CVE-2022-43548 Not...

CentOS 8 : varnish:6 (CESA-2022:8649)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:8649 advisory. - varnish: Request Forgery Vulnerability CVE-2022-45060 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : python39:3.9 (CESA-2022:8492)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:8492 advisory. - python: local privilege escalation via the multiprocessing forkserver start method CVE-2022-42919 Note that Nessus has not tested for this issue but has inste...

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2022:7592)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7592 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : container-tools:3.0 (CESA-2022:7529)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7529 advisory. - golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 - cri-o: memory exhaustion on the node when access to the kube api...

CentOS 8 : Image Builder (CESA-2022:7548)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7548 advisory. - golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service CVE-2022-32189...

CentOS 8 : container-tools:4.0 (CESA-2022:7469)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7469 advisory. - cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 - golang: crash in a golang.org/x/crypto/ssh server CVE-2022-27191 -...

CentOS 8 : freetype (CESA-2022:7745)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7745 advisory. - FreeType: Buffer overflow in sfntinitface CVE-2022-27404 - FreeType: Segmentation violation via FNTSizeRequest CVE-2022-27405 - Freetype: Segmentatio...

CentOS 8 : php:7.4 (CESA-2022:7628)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7628 advisory. - php: Special character breaks path in xml parsing CVE-2021-21707 - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 -...

CentOS 8 : mutt (CESA-2022:7640)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7640 advisory. - mutt: buffer overflow in uudecoder function CVE-2022-1328 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : dovecot (CESA-2022:7623)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7623 advisory. - dovecot: Privilege escalation when similar master and non-master passdbs are used CVE-2022-30550 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : xorg-x11-server and xorg-x11-server-Xwayland (CESA-2022:7583)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7583 advisory. - xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access CVE-2022-2319 - xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo...