CentOS 8 : thunderbird (CESA-2020:1495)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:1495 advisory. - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 ...

CentOS 8 : .NET Core 3.1 (CESA-2020:2954)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2954 advisory. - dotnet: XML source markup processing remote code execution CVE-2020-1147 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : python3 (CESA-2020:1764)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1764 advisory. - python: Cookie domain check returns incorrect results CVE-2018-20852 - python: email.utils.parseaddr wrongly parses email addresses CVE-2019-16056 No...

CentOS 8 : postgresql:10 (CESA-2020:3669)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3669 advisory. - postgresql: Selectivity estimators bypass row security policies CVE-2019-10130 - postgresql: Stack-based buffer overflow via setting a password...

CentOS 8 : oddjob (CESA-2020:4687)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4687 advisory. - oddjob: race condition in oddjobselinuxmkdir function in mkhomedir.c can lead to symlink attack CVE-2020-10737 Note that Nessus has not tested for this issue...

CentOS 8 : wavpack (CESA-2020:1581)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1581 advisory. - wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 - wawpack: Out-of-bounds read in WavpackVerifySingleBlock function lead...

CentOS 8 : nodejs:10 (CESA-2020:0579)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0579 advisory. - nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string CVE-2019-15604 - nodejs: HTTP request smuggling using...

CentOS 8 : squid:4 (CESA-2020:3623)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3623 advisory. - squid: HTTP Request Smuggling could result in cache poisoning CVE-2020-15810 - squid: HTTP Request Splitting could result in cache poisoning...

CentOS 8 : thunderbird (CESA-2021:0298)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:0298 advisory. - Mozilla: IMAP Response Injection when using STARTTLS CVE-2020-15685 - Mozilla: HTTPS pages could have been intercepted by a registered service worker...

CentOS 8 : postgresql-jdbc (CESA-2020:3176)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3176 advisory. - postgresql-jdbc: XML external entity XXE vulnerability in PgSQLXML CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 8 : targetcli (CESA-2020:1933)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1933 advisory. - targetcli: world writable /var/run/targetclid.sock allows unprivileged user to execute commands CVE-2020-10699 Note that Nessus has not tested for this issue...

CentOS 8 : libvncserver (CESA-2020:0920)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0920 advisory. - libvncserver: HandleCursorShape integer overflow resulting in heap-based buffer overflow CVE-2019-15690 - libvncserver: integer overflow and heap-bas...

CentOS 8 : container-tools:2.0 (CESA-2020:1931)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1931 advisory. - buildah: Crafted input tar file may lead to local file overwrite during image build process CVE-2020-10696 Note that Nessus has not tested for this issue but...

CentOS 8 : firefox (CESA-2020:2379)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2379 advisory. - Mozilla: Use-after-free in SharedWorkerService CVE-2020-12405 - Mozilla: JavaScript Type confusion with NativeTypes CVE-2020-12406 - Mozilla: Memory...

CentOS 8 : GNOME (CESA-2020:4451)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4451 advisory. - webkitgtk: Incorrect state management leading to universal cross-site scripting CVE-2019-8625, CVE-2019-8813, CVE-2020-3867 - webkitgtk: Multiple...

CentOS 8 : kernel (CESA-2020:4286)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4286 advisory. - kernel: net: bluetooth: type confusion while processing AMP packets CVE-2020-12351 - kernel: net: bluetooth: information leak when processing certain...

CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2020:4847)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4847 advisory. - jquery: Cross-site scripting via cross-domain ajax requests CVE-2015-9251 - bootstrap: XSS in the data-target attribute CVE-2016-10735 - bootstrap:...

CentOS 8 : container-tools:1.0 (CESA-2020:1926)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1926 advisory. - buildah: Crafted input tar file may lead to local file overwrite during image build process CVE-2020-10696 Note that Nessus has not tested for this issue but...

CentOS 8 : libarchive (CESA-2020:0271)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0271 advisory. - libarchive: use-after-free in archivereadformatrarreaddata when there is an error in the decompression of an archive entry CVE-2019-18408 Note that Nessus has...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2020:4676)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4676 advisory. - QEMU: Slirp: use-after-free during packet reassembly CVE-2019-15890 - libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent...