CentOS 8 : wpa_supplicant (CESA-2021:1686)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:1686 advisory. - wpasupplicant: P2P group information processing vulnerability CVE-2021-0326 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : python-cryptography (CESA-2021:1608)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1608 advisory. - python-cryptography: bleichenbacher timing oracle attack against RSA decryption CVE-2020-25659 - python-cryptography: certain sequences of update cal...

CentOS 8 : unbound (CESA-2021:1853)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1853 advisory. - unbound: integer overflow in the regional allocator via regionalalloc CVE-2019-25032 - unbound: integer overflow in sldnsstr2wirednamebuforigin can...

CentOS 8 : sane-backends (CESA-2021:1744)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1744 advisory. - sane-backends: NULL pointer dereference in saneiepsonnetread function CVE-2020-12867 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : mingw packages (CESA-2021:1968)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1968 advisory. - sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c CVE-2019-16168 - sqlite: integer overflow in sqlite3strvappendf function in printf.c...

CentOS 8 : idm:DL1 (CESA-2021:1983)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1983 advisory. - slapi-nis: NULL dereference DoS with specially crafted Binding DN CVE-2021-3480 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : userspace graphics, xorg-x11, and mesa (CESA-2021:1804)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1804 advisory. - libX11: Heap overflow in the X input method client CVE-2020-14344 - xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14345 -...

CentOS 8 : cpio (CESA-2021:1582)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:1582 advisory. - cpio: improper input validation when writing tar header fields leads to unexpected tar generation CVE-2019-14866 Note that Nessus has not tested for this issu...

CentOS 8 : python3 (CESA-2021:1633)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1633 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python: Unsafe use of eval on data retrieved via HTTP in the...

CentOS 8 : ghostscript (CESA-2021:1852)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1852 advisory. - ghostscript: use-after-free vulnerability in igcrelocstructptr could result in DoS CVE-2020-14373 - ghostscript: buffer overflow in lprnisblack in...

CentOS 8 : brotli (CESA-2021:1702)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1702 advisory. - brotli: buffer overflow when input chunk is larger than 2GiB CVE-2020-8927 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : trousers (CESA-2021:1627)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1627 advisory. - trousers: fails to drop the root gid privilege when no longer needed CVE-2020-24330 - trousers: tss user still has read and write access to the...

CentOS 8 : spice-vdagent (CESA-2021:1791)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1791 advisory. - spice-vdagent: memory DoS via arbitrary entries in activexfers hash table CVE-2020-25650 - spice-vdagent: possible file transfer DoS and information...

CentOS 8 : systemd (CESA-2021:1611)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1611 advisory. - systemd: Spoofing of XDGSEAT allows for actions to be checked against allowactive instead of allowany CVE-2019-3842 - systemd: Mishandles numerical...

CentOS 8 : p11-kit (CESA-2021:1609)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1609 advisory. - p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers CVE-2020-29361 - p11-kit: out-of-bounds read in...

CentOS 8 : libdb (CESA-2021:1675)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1675 advisory. - libdb: Denial of service in the Data Store component CVE-2019-2708 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : dovecot (CESA-2021:1887)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1887 advisory. - dovecot: IMAP hibernation function allows mail access CVE-2020-24386 - dovecot: Denial of service via mail MIME parsing CVE-2020-25275 Note that Ness...

CentOS 8 : GNOME (CESA-2021:1586)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1586 advisory. - glib2: insecure permissions for files and directories CVE-2019-13012 - webkitgtk: use-after-free may lead to arbitrary code execution CVE-2020-13543,...

CentOS 8 : squid:4 (CESA-2021:1979)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1979 advisory. - squid: improper input validation may allow a trusted client to perform HTTP request smuggling CVE-2020-25097 Note that Nessus has not tested for this issue bu...

CentOS 8 : bash (CESA-2021:1679)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1679 advisory. - bash: when effective UID is not equal to its real UID the saved UID is not dropped CVE-2019-18276 Note that Nessus has not tested for this issue but has inste...