CentOS 8 : .NET Core 2.1 (CESA-2021:3145)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:3145 advisory. - dotnet: Dump file created world-readable CVE-2021-34485 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : thunderbird (CESA-2021:3155)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:3155 advisory. - Mozilla: Uninitialized memory in a canvas object could have led to memory corruption CVE-2021-29980 - Mozilla: Incorrect instruction reordering durin...

CentOS 8 : firefox (CESA-2021:3157)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:3157 advisory. - Mozilla: Uninitialized memory in a canvas object could have led to memory corruption CVE-2021-29980 - Mozilla: Incorrect instruction reordering durin...

CentOS 8 : go-toolset:rhel8 (CESA-2021:3076)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:3076 advisory. - golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader CVE-2021-27918 - golang: net/http: panic in ReadRequest...

CentOS 8 : nodejs:12 (CESA-2021:3073)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3073 advisory. - libuv: out-of-bounds read in uvidnatoascii can lead to information disclosures or crashes CVE-2021-22918 - nodejs-hosted-git-info: Regular Expression...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2021:3061)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3061 advisory. - QEMU: msix: OOB access during mmio operations may lead to DoS CVE-2020-13754 - QEMU: net: an assert failure via ethgetgsotype CVE-2020-27617 - qemu:...

CentOS 8 : ruby:2.7 (CESA-2021:3020)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3020 advisory. - rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source CVE-2020-36327 - rubygem-rdoc: Command injection...

CentOS 8 : microcode_ctl (CESA-2021:3027)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:3027 advisory. - hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 - hw: Vector Register Data Sampling CVE-2020-0548 - hw: L1D Cache Eviction Sampling...

CentOS 8 : varnish:6 (CESA-2021:2988)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2988 advisory. - varnish: HTTP/2 request smuggling attack via a large Content-Length header for a POST request CVE-2021-36740 Note that Nessus has not tested for this issue bu...

CentOS 8 : thunderbird (CESA-2021:2883)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2883 advisory. - Mozilla: IMAP server responses sent by a MITM prior to STARTTLS could be processed CVE-2021-29969 - Mozilla: Use-after-free in accessibility features...

CentOS 8 : java-1.8.0-openjdk (CESA-2021:2776)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2776 advisory. - OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host Networking, 8258432 CVE-2021-2341 - OpenJDK: Incorrect verificati...

CentOS 8 : java-11-openjdk (CESA-2021:2781)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2781 advisory. - OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host Networking, 8258432 CVE-2021-2341 - OpenJDK: Incorrect verificati...

CentOS 8 : systemd (CESA-2021:2717)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2717 advisory. - systemd: uncontrolled allocation on the stack in function unitnamepathescape leads to crash CVE-2021-33910 Note that Nessus has not tested for this issue but...

CentOS 8 : firefox (CESA-2021:2743)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2743 advisory. - Mozilla: Use-after-free in accessibility features of a document CVE-2021-29970 - Mozilla: Memory safety bugs fixed in Firefox 90 and Firefox ESR 78.1...

CentOS 8 : 389-ds:1.4 (CESA-2021:2595)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2595 advisory. - 389-ds-base: syncrepl NULL pointer dereference in synccreatestatecontrol CVE-2021-3514 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : edk2 (CESA-2021:2591)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2591 advisory. - edk2: possible heap corruption with LzmaUefiDecompressGetInfo CVE-2021-28211 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : lz4 (CESA-2021:2575)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2575 advisory. - lz4: memory corruption due to an integer overflow bug caused by memmove argument CVE-2021-3520 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : libxml2 (CESA-2021:2569)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:2569 advisory. - libxml2: Use-after-free in xmlEncodeEntitiesInternal in entities.c CVE-2021-3516 - libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal i...

CentOS 8 : fwupd (CESA-2021:2566)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2566 advisory. - grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 - grub2: Use-after-free in rmmod...

CentOS 8 : rpm (CESA-2021:2574)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2574 advisory. - rpm: Signature checks bypass via corrupted rpm package CVE-2021-20271 Note that Nessus has not tested for this issue but has instead relied only on the...