CentOS 8 : xorg-x11-server and xorg-x11-server-Xwayland (CESA-2022:7583)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7583 advisory. - xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access CVE-2022-2319 - xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo...

CentOS 8 : gstreamer1-plugins-good (CESA-2022:7618)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7618 advisory. - gstreamer-plugins-good: Use-after-free in matroska demuxing CVE-2021-3497 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : mutt (CESA-2022:7640)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7640 advisory. - mutt: buffer overflow in uudecoder function CVE-2022-1328 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : redis:6 (CESA-2022:7541)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7541 advisory. - redis: Code injection via Lua script execution environment CVE-2022-24735 - redis: Malformed Lua script can crash Redis CVE-2022-24736 Note that Ness...

CentOS 8 : dovecot (CESA-2022:7623)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7623 advisory. - dovecot: Privilege escalation when similar master and non-master passdbs are used CVE-2022-30550 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : php:8.0 (CESA-2022:7624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7624 advisory. - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 - php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625...

CentOS 8 : libxml2 (CESA-2022:7715)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7715 advisory. - libxml2: Incorrect server side include parsing can lead to XSS CVE-2016-3709 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : httpd:2.4 (CESA-2022:7647)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7647 advisory. - httpd: modlua: Use of uninitialized value of in r:parsebody CVE-2022-22719 - httpd: core: Possible buffer overflow with very large or unlimited...

CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2022:7581)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7581 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : openblas (CESA-2022:7639)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7639 advisory. - lapack: Out-of-bounds read in larrv CVE-2021-4048 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

CentOS 8 : python27:2.7 (CESA-2022:7593)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7593 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : pcs (CESA-2022:7447)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7447 advisory. - pcs: improper authentication via PAM CVE-2022-1049 Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

CentOS 8 : protobuf (CESA-2022:7464)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7464 advisory. - protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference CVE-2021-22570 Note that Nessus has not tested for this issue but has...

CentOS 8 : libreoffice (CESA-2022:7461)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7461 advisory. - libreoffice: Incorrect trust validation of signature with ambiguous KeyInfo children CVE-2021-25636 Note that Nessus has not tested for this issue but has...

CentOS 8 : container-tools:rhel8 (CESA-2022:7457)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7457 advisory. - golang: net/http/httputil: panic due to racy read of persistConn after handler panic CVE-2021-36221 - opencontainers: OCI manifest and index parsing...

CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2022:7470)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7470 advisory. - pki-core: access to external entities when parsing XML can lead to XXE CVE-2022-2414 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:7472)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7472 advisory. - QEMU: fdc: heap buffer overflow in DMA read data transfers CVE-2021-3507 - libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to deni...

CentOS 8 : container-tools:rhel8 (CESA-2022:7822)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7822 advisory. - podman: possible information disclosure and modification CVE-2022-2989 - buildah: possible information disclosure and modification CVE-2022-2990 Note...

CentOS 8 : grafana-pcp (CESA-2022:7648)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7648 advisory. - golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 - golang: io/fs: stack exhaustion in Glob CVE-2022-30630 - golang:...

CentOS 8 : webkit2gtk3 (CESA-2022:7704)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7704 advisory. - webkitgtk: Use-after-free leading to arbitrary code execution CVE-2022-22624, CVE-2022-22628, CVE-2022-26709, CVE-2022-26710, CVE-2022-26717 -...