CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2021:4160)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4160 advisory. - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS CVE-2021-28957 - python-ipaddress: Improper input validation ...

CentOS 8 : cups (CESA-2021:4393)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4393 advisory. - cups: access to uninitialized buffer in ipp.c CVE-2020-10001 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : compat-exiv2-026 (CESA-2021:4319)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4319 advisory. - exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS CVE-2021-31292 - exiv2: Out-of-bounds read in...

CentOS 8 : container-tools:rhel8 (CESA-2021:4154)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4154 advisory. - containers/storage: DoS via malicious image CVE-2021-20291 - buildah: Host environment variables leaked in build container when using chroot isolatio...

CentOS 8 : python-pillow (CESA-2021:4149)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4149 advisory. - python-pillow: Buffer over-read in PCX image reader CVE-2020-35653 - python-pillow: Buffer over-read in SGI RLE image reader CVE-2020-35655 -...

CentOS 8 : rpm (CESA-2021:4489)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4489 advisory. - rpm: missing length checks in hdrblobInit CVE-2021-20266 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : lua (CESA-2021:4510)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4510 advisory. - lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2021:4191)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4191 advisory. - QEMU: net: e1000e: use-after-free while sending packets CVE-2020-15859 - QEMU: slirp: invalid pointer initialization may lead to information disclosu...

CentOS 8 : python-pip (CESA-2021:4455)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4455 advisory. - python-pip: Incorrect handling of unicode separators in git references CVE-2021-3572 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : kexec-tools (CESA-2021:4404)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4404 advisory. - kexec-tools: incorrect permissions on kdump dmesg file CVE-2021-20269 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : autotrace (CESA-2021:4519)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4519 advisory. - autotrace: integer overflow in input-bmp.c CVE-2019-19004 - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact...

CentOS 8 : qt5 (CESA-2021:4172)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4172 advisory. - qt: Out of bounds read in function QRadialFetchSimd from crafted svg file CVE-2021-3481 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : container-tools:3.0 (CESA-2021:4222)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4222 advisory. - buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 Note that Nessus has not tested for this issue but has...

CentOS 8 : lasso (CESA-2021:4325)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4325 advisory. - lasso: XML signature wrapping vulnerability when parsing SAML responses CVE-2021-28091 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : libtiff (CESA-2021:4241)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4241 advisory. - libtiff: Memory allocation failure in tiff2rgba CVE-2020-35521, CVE-2020-35522 - libtiff: Integer overflow in tifgetimage.c CVE-2020-35523 - libtiff:...

CentOS 8 : httpd:2.4 (CESA-2021:4257)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4257 advisory. - httpd: modsession: NULL pointer dereference when parsing Cookie header CVE-2021-26690 - httpd: Unexpected URL matching with 'MergeSlashes OFF'...

CentOS 8 : mingw-glib2 (CESA-2021:4526)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4526 advisory. - glib: integer overflow in gbytearraynewtake function when called with a buffer of 4GB or more on a 64-bit platform CVE-2021-27218 - glib: integer...

CentOS 8 : binutils (CESA-2021:4364)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4364 advisory. - binutils: Race window allows users to own arbitrary files CVE-2021-20197 - binutils: Heap-based buffer overflow in bfdgetlsigned32 in libbfd.c becaus...

CentOS 8 : openssl (CESA-2021:4424)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4424 advisory. - openssl: integer overflow in CipherUpdate CVE-2021-23840 - openssl: NULL pointer dereference in X509issuerandserialhash CVE-2021-23841 Note that Ness...

CentOS 8 : vim (CESA-2021:4517)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4517 advisory. - vim: heap-based buffer overflow in utfptr2char in mbyte.c CVE-2021-3778 - vim: use-after-free in nvreplace in normal.c CVE-2021-3796 Note that Nessus...