CentOS 9 : ansible-core-2.14.2-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ansible- core-2.14.2-4.el9 build changelog. - A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclos...

CentOS 9 : dpdk-21.11.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the dpdk-21.11.1-1.el9 build changelog. - A flaw was found in the vhost library in DPDK. Function vhostusersetinflightfd does not validate msg-payload.inflight.numqueues, possibly causing...

CentOS 9 : fence-agents-4.10.0-57.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the fence- agents-4.10.0-57.el9 build changelog. - urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cookie HTTP header special or provide any helpers for...

CentOS 9 : haproxy-2.4.7-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the haproxy-2.4.7-1.el9 build changelog. - An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that the scheme and pat...

CentOS 9 : tang-11-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the tang-11-1.el9 build changelog. - A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys. CVE-2021-4076 Note that Nessus has not...

CentOS 9 : haproxy-2.4.17-6.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the haproxy-2.4.17-6.el9 build changelog. - An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an...

CentOS 9 : curl-7.76.1-12.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the curl-7.76.1-12.el9 build changelog. - When sending data to an MQTT server, libcurl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using...

CentOS 9 : lynx-2.8.9-18.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the lynx-2.8.9-18.el9 build changelog. - Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may...

CentOS 9 : open-vm-tools-12.2.0-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the open-vm- tools-12.2.0-3.el9 build changelog. - authentication bypass vulnerability in the vgauth module rhel-br-9 CVE-2023-20867 Note that Nessus has not tested for this issue but has...

CentOS 9 : toolbox-0.0.99.3-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the toolbox-0.0.99.3-9.el9 build changelog. - An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP heade...

CentOS 9 : perl-CPAN-2.29-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the perl- CPAN-2.29-3.el9 build changelog. - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Nessus has not tested f...

CentOS 9 : qemu-kvm-7.1.0-2.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the qemu- kvm-7.1.0-2.el9 build changelog. - heap buffer overflow in DMA read data transfers rhel-9.0 CVE-2021-3507 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 9 : harfbuzz-2.7.4-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the harfbuzz-2.7.4-8.el9 build changelog. - integer overflow in the component hb-ot-shape-fallback.c CVE-2022-33068 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 9 : nodejs-16.20.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the nodejs-16.20.1-1.el9 build changelog. - The use of proto in process.mainModule.proto.require can bypass the policy mechanism and require modules outside of the policy.json...

CentOS 9 : curl-7.76.1-28.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the curl-7.76.1-28.el9 build changelog. - This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy...

CentOS 9 : python-mako-1.1.4-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python- mako-1.1.4-6.el9 build changelog. - Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects...

CentOS 9 : fapolicyd-1.1.3-102.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the fapolicyd-1.1.3-102.el9 build changelog. - fapolicyd wrongly prepares ld.so path CVE-2022-1117 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 9 : mod_auth_openidc-2.4.9.1-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the modauthopenidc-2.4.9.1-1.el9 build changelog. - open redirect in oidcvalidateredirecturl rhel-9.0 CVE-2021-32786 - hardcoded static IV and AAD with a reused key in AES GCM...

CentOS 9 : python-wheel-0.36.2-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python- wheel-0.36.2-8.el9 build changelog. - An issue discovered in Python Packaging Authority PyPA Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via...

CentOS 9 : libtiff-4.4.0-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtiff-4.4.0-8.el9 build changelog. - processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., WRITE of size 307203 via a...