CentOS 8 : dovecot (CESA-2020:3713)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3713 advisory. - dovecot: Resource exhaustion via deeply nested MIME parts CVE-2020-12100 - dovecot: Out of bound reads in dovecot NTLM implementation CVE-2020-12673 ...

CentOS 8 : grub2 (CESA-2020:3216)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3216 advisory. - grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 - grub2: grubmalloc does not validate allocation...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2020:4676)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4676 advisory. - QEMU: Slirp: use-after-free during packet reassembly CVE-2019-15890 - libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent...

CentOS 8 : edk2 (CESA-2020:4805)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4805 advisory. - edk2: memory leak in ArpOnFrameRcvdDpc CVE-2019-14559 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : postgresql-jdbc (CESA-2020:3176)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3176 advisory. - postgresql-jdbc: XML external entity XXE vulnerability in PgSQLXML CVE-2020-13692 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 8 : thunderbird (CESA-2021:0298)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:0298 advisory. - Mozilla: IMAP Response Injection when using STARTTLS CVE-2020-15685 - Mozilla: HTTPS pages could have been intercepted by a registered service worker...

CentOS 8 : libtiff (CESA-2020:4634)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4634 advisory. - libtiff: integer overflow leading to heap-based buffer overflow in tifgetimage.c CVE-2019-17546 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : curl (CESA-2020:1792)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1792 advisory. - curl: TFTP receive heap buffer overflow in tftpreceivepacket function CVE-2019-5436 - curl: double free due to subsequent call of realloc CVE-2019-54...

CentOS 8 : GNOME (CESA-2020:4451)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4451 advisory. - webkitgtk: Incorrect state management leading to universal cross-site scripting CVE-2019-8625, CVE-2019-8813, CVE-2020-3867 - webkitgtk: Multiple...

CentOS 8 : kernel (CESA-2020:4286)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4286 advisory. - kernel: net: bluetooth: type confusion while processing AMP packets CVE-2020-12351 - kernel: net: bluetooth: information leak when processing certain...

CentOS 8 : targetcli (CESA-2020:4697)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4697 advisory. - targetcli: weak permissions for /etc/target and backup files CVE-2020-13867 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : nodejs:10 (CESA-2020:0579)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0579 advisory. - nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string CVE-2019-15604 - nodejs: HTTP request smuggling using...

CentOS 8 : container-tools:rhel8 (CESA-2020:4694)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4694 advisory. - containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters CVE-2020-10749 - QEMU: slirp: networking out-of-bound...

CentOS 8 : haproxy (CESA-2020:1725)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:1725 advisory. - haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked value CVE-2019-18277 - haproxy: HTTP/2...

CentOS 8 : postgresql:12 (CESA-2020:5620)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5620 advisory. - postgresql: Uncontrolled search path element in logical replication CVE-2020-14349 - postgresql: Uncontrolled search path element in CREATE EXTENSION...

CentOS 8 : kernel (CESA-2020:2102)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2102 advisory. - Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic CVE-2020-10711 - Kernel: s390: page...

CentOS 8 : SDL (CESA-2020:4627)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4627 advisory. - SDL: buffer over-read in IMAADPCMnibble in audio/SDLwave.c CVE-2019-7572 - SDL: heap-based buffer over-read in InitMSADPCM in audio/SDLwave.c...

CentOS 8 : gnutls (CESA-2020:2637)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2637 advisory. - gnutls: session resumption works without master key allowing MITM CVE-2020-13777 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : thunderbird (CESA-2020:2046)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2046 advisory. - Mozilla: Use-after-free during worker shutdown CVE-2020-12387 - Mozilla: Arbitrary local file access with 'Copy as cURL' CVE-2020-12392 - Mozilla:...

CentOS 8 : thunderbird (CESA-2020:5398)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:5398 advisory. - Mozilla: Stack overflow due to incorrect parsing of SMTP server response codes CVE-2020-26970 Note that Nessus has not tested for this issue but has instead...