CentOS 7 : perl (RHSA-2021:0343)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0343 advisory. - Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...

CentOS 7 : linux-firmware (RHSA-2021:0339)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0339 advisory. - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable escalati...

CentOS 8 : freeradius:3.0 (CESA-2020:4799)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4799 advisory. - freeradius: eap-pwd: DoS issues due to multithreaded BNCTX access CVE-2019-17185 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : java-11-openjdk (CESA-2020:1514)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1514 advisory. - OpenJDK: Misplaced regular expression syntax error check in RegExpScanner Scripting, 8223898 CVE-2020-2754 - OpenJDK: Incorrect handling of empty...

CentOS 8 : grafana (CESA-2020:2641)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2641 advisory. - grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL CVE-2020-13379 Note that Nessu...

CentOS 8 : exiv2 (CESA-2020:1577)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1577 advisory. - exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service CVE-2019-9143 - exiv2: null pointer...

CentOS 8 : file-roller (CESA-2020:4820)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4820 advisory. - file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive CVE-2019-16680 - file-roller: directory...

CentOS 8 : kernel (CESA-2020:2427)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2427 advisory. - kernel: use-after-free in block/bfq-iosched.c related to bfqidleslicetimerbody CVE-2020-12657 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : libarchive (CESA-2020:0271)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0271 advisory. - libarchive: use-after-free in archivereadformatrarreaddata when there is an error in the decompression of an archive entry CVE-2019-18408 Note that Nessus has...

CentOS 8 : firefox (CESA-2020:0512)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0512 advisory. - Mozilla: Missing bounds check on shared memory read in the parent process CVE-2020-6796 - Mozilla: Incorrect parsing of template tag could result in...

CentOS 8 : nginx:1.16 (CESA-2020:5495)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5495 advisory. - nginx: HTTP request smuggling in configurations with URL redirect used as errorpage CVE-2019-20372 Note that Nessus has not tested for this issue but has...

CentOS 8 : binutils (CESA-2020:1797)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1797 advisory. - binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcppfile.h leads to denial of...

CentOS 8 : pcs (CESA-2020:2462)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2462 advisory. - rubygem-json: Unsafe Object Creation Vulnerability in JSON CVE-2020-10663 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : virt:rhel (CESA-2020:2774)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2774 advisory. - QEMU: vnc: memory leakage upon disconnect CVE-2019-20382 - QEMU: Slirp: potential OOB access due to unsafe snprintf usages CVE-2020-8608 Note that...

CentOS 8 : NetworkManager (CESA-2020:3011)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3011 advisory. - NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults CVE-2020-10754 Note that Nessus has not tested fo...

CentOS 8 : thunderbird (CESA-2020:2614)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2614 advisory. - Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage CVE-2020-12398 - Mozilla: Use-after-free in SharedWorkerService...

CentOS 8 : systemd (CESA-2020:1794)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1794 advisory. - systemd: services with DynamicUser can create SUID/SGID binaries CVE-2019-3843 - systemd: services with DynamicUser can get new privileges and create...

CentOS 8 : evolution (CESA-2020:1600)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1600 advisory. - evolution: specially crafted email leading to OpenPGP signatures being spoofed for arbitrary messages CVE-2018-15587 Note that Nessus has not tested for this...

CentOS 8 : glibc (CESA-2020:4444)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4444 advisory. - glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions CVE-2020-10029 - glibc: array overflow in backtrace functions f...

CentOS 8 : dovecot (CESA-2020:3713)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3713 advisory. - dovecot: Resource exhaustion via deeply nested MIME parts CVE-2020-12100 - dovecot: Out of bound reads in dovecot NTLM implementation CVE-2020-12673 ...