CentOS 8 : virt:rhel (CESA-2020:1358)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1358 advisory. - QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server CVE-2020-1711 - QEMU: slirp: OOB buffer access while emulating tcp...

CentOS 8 : varnish:6 (CESA-2020:4756)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4756 advisory. - varnish: denial of service handling certain crafted HTTP/1 requests CVE-2019-15892 - varnish: not clearing pointer between two client requests leads ...

CentOS 8 : microcode_ctl (CESA-2020:5085)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5085 advisory. - hw: Information disclosure issue in Intel SGX via RAPL interface CVE-2020-8695 - hw: Vector Register Leakage-Active CVE-2020-8696 - hw: Fast forward...

CentOS 8 : firefox (CESA-2020:3557)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3557 advisory. - Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer CVE-2020-12422 - Mozilla: WebRTC permission prompt could have been bypassed by a...

CentOS 8 : spice and spice-gtk (CESA-2020:4186)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4186 advisory. - spice: multiple buffer overflow vulnerabilities in QUIC decoding code CVE-2020-14355 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : libtiff (CESA-2020:1688)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1688 advisory. - libtiff: integer overflow in TIFFCheckMalloc and TIFFCheckRealloc in tifaux.c CVE-2019-14973 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : thunderbird (CESA-2021:0089)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:0089 advisory. - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk CVE-2020-16044 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : libcroco (CESA-2020:3654)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3654 advisory. - libcroco: Stack overflow in function crparserparseanycore in cr-parser.c CVE-2020-12825 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : openssl (CESA-2020:5476)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5476 advisory. - openssl: EDIPARTYNAME NULL pointer de-reference CVE-2020-1971 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : kernel (CESA-2020:1372)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1372 advisory. - kernel: powerpc: local user can read vector registers of other users' processes via a Facility Unavailable exception CVE-2019-15030 - kernel: powerpc...

CentOS 8 : openssl (CESA-2020:4514)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4514 advisory. - openssl: Integer overflow in RSAZ modular exponentiation on x8664 CVE-2019-1551 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : memcached (CESA-2020:1576)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1576 advisory. - memcached: null-pointer dereference in lru mode and lru tempttl causing denial of service CVE-2019-11596 Note that Nessus has not tested for this issue but ha...

CentOS 8 : go-toolset:rhel8 (CESA-2020:5493)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5493 advisory. - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS CVE-2020-24553 - golang: math/big: panic during recursive...

CentOS 8 : irssi (CESA-2020:1616)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1616 advisory. - irssi: use after free when sending SASL login to server CVE-2019-13045 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : gnutls (CESA-2020:2637)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2637 advisory. - gnutls: session resumption works without master key allowing MITM CVE-2020-13777 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : pcre2 (CESA-2020:4539)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory. - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : libssh (CESA-2020:4545)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4545 advisory. - libssh: unsanitized location in scp could lead to unwanted command execution CVE-2019-14889 - libssh: denial of service when handling AES-CTR or DES...

CentOS 8 : thunderbird (CESA-2020:5398)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:5398 advisory. - Mozilla: Stack overflow due to incorrect parsing of SMTP server response codes CVE-2020-26970 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : python-pip (CESA-2020:1916)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1916 advisory. - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header CVE-2018-18074 - python-urllib3: Cross-host redirect does not remov...

CentOS 8 : zsh (CESA-2020:0903)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0903 advisory. - zsh: insecure dropping of privileges when unsetting PRIVILEGED option CVE-2019-20044 Note that Nessus has not tested for this issue but has instead relied onl...