CentOS 8 : php:7.4 (CESA-2022:6542)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:6542 advisory. - ArchiveTar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked CVE-2020-28948 - ArchiveTar: improper filename...

CentOS 8 : nodejs:16 (CESA-2022:6449)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:6449 advisory. - nodejs-ansi-regex: Regular expression denial of service ReDoS matching ANSI escape codes CVE-2021-3807 - nodejs: DNS rebinding in --inspect via inval...

CentOS 8 : ruby:3.0 (CESA-2022:6450)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:6450 advisory. - ruby: Regular expression denial of service vulnerability of Date parsing methods CVE-2021-41817 - ruby: Cookie prefix spoofing in CGI::Cookie.parse...

CentOS 8 : ruby:2.7 (CESA-2022:6447)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:6447 advisory. - ruby: Regular expression denial of service vulnerability of Date parsing methods CVE-2021-41817 - ruby: Cookie prefix spoofing in CGI::Cookie.parse...

CentOS 8 : nodejs:14 (CESA-2022:6448)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:6448 advisory. - nodejs: DNS rebinding in --inspect via invalid IP addresses CVE-2022-32212 - nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encodin...

CentOS 8 : php:7.4 (CESA-2022:6158)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:6158 advisory. - php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:5821)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:5821 advisory. - QEMU: QXL: integer overflow in cursoralloc can lead to heap buffer overflow CVE-2021-4206 - QEMU: QXL: double fetch in qxlcursor can lead to heap...

CentOS 8 : go-toolset:rhel8 (CESA-2022:5775)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:5775 advisory. - golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 - golang: go/parser: stack exhaustion in all Parse functions...

CentOS 8 : squid:4 (CESA-2022:5526)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:5526 advisory. - squid: DoS when processing gopher server responses CVE-2021-46784 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : php:7.4 (CESA-2022:5467)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:5467 advisory. - php: password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : ruby:2.6 (CESA-2022:5338)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:5338 advisory. - Ruby: Buffer overrun in String-to-Float conversion CVE-2022-28739 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : postgresql:13 (CESA-2022:4855)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:4855 advisory. - postgresql: Autovacuum, REINDEX, and others omit security restricted operation sandbox CVE-2022-1552 Note that Nessus has not tested for this issue but has...

CentOS 8 : maven:3.6 (CESA-2022:4797)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:4797 advisory. - maven-shared-utils: Command injection via Commandline class CVE-2022-29599 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : subversion:1.10 (CESA-2022:2234)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2234 advisory. - subversion: Subversion's moddavsvn is vulnerable to memory corruption CVE-2022-24070 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : container-tools:3.0 (CESA-2022:2143)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2143 advisory. - psgo: Privilege escalation in 'podman top' CVE-2022-1227 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : container-tools:3.0 (CESA-2022:1793)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1793 advisory. - crun: Default inheritable capabilities for linux container should be empty CVE-2022-27650 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : compat-exiv2-026 (CESA-2022:1797)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1797 advisory. - exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS CVE-2020-18898 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : libtiff (CESA-2022:1810)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1810 advisory. - libtiff: a buffer overflow via the invertImage may lead to DoS CVE-2020-19131 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : rust-toolset:rhel8 (CESA-2022:1894)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1894 advisory. - rust: Race condition in removedirall leading to removal of files outside of the directory being removed CVE-2022-21658 Note that Nessus has not tested for thi...

CentOS 8 : zsh (CESA-2022:2120)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2120 advisory. - zsh: Prompt expansion vulnerability CVE-2021-45444 Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...