CentOS 8 : ibus and glib2 (CESA-2020:1880)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1880 advisory. - ibus: missing authorization allows local attacker to access the input bus of another user CVE-2019-14822 Note that Nessus has not tested for this issue but ha...

CentOS 8 : sane-backends (CESA-2020:2902)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2902 advisory. - sane-backends: Heap buffer overflow in epsondsnetread in epsonds-net.c CVE-2020-12861 - sane-backends: Heap buffer overflow in esci2img CVE-2020-1286...

CentOS 8 : linux-firmware (CESA-2020:5479)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5479 advisory. - hardware: buffer overflow in bluetooth firmware CVE-2020-12321 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : squid:4 (CESA-2020:4743)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4743 advisory. - squid: Improper input validation in request allows for proxy manipulation CVE-2019-12520 - squid: Off-by-one error in addStackElement allows for heap...

CentOS 8 : firefox (CESA-2021:0052)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:0052 advisory. - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk CVE-2020-16044 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : net-snmp (CESA-2020:5480)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5480 advisory. - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution CVE-2020-15862 Note that Nessus has not tested for this issue...

CentOS 8 : nodejs:10 (CESA-2020:1317)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1317 advisory. - ICU: Integer overflow in UnicodeString::doAppend CVE-2020-10531 Note that Nessus has not tested for this issue but has instead relied only on the application'...

CentOS 8 : cups (CESA-2020:1765)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1765 advisory. - cups: stack-buffer-overflow in libcups's asn1gettype function CVE-2019-8675 - cups: stack-buffer-overflow in libcups's asn1getpacked function...

CentOS 8 : sysstat (CESA-2020:4638)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4638 advisory. - sysstat: memory corruption due to an integer overflow in remapstruct in sacommon.c CVE-2019-16167 Note that Nessus has not tested for this issue but has inste...

CentOS 8 : thunderbird (CESA-2020:0919)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0919 advisory. - usrsctp: Out of bounds reads in sctploadaddressesfrominit CVE-2019-20503 - Mozilla: Use-after-free when removing data about origins CVE-2020-6805 -...

CentOS 8 : java-11-openjdk (CESA-2020:2970)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2970 advisory. - OpenJDK: Incorrect handling of access control context in ForkJoinPool Libraries, 8237117 CVE-2020-14556 - OpenJDK: Excessive memory usage in ImageIO...

CentOS 8 : dotnet3.1 (CESA-2021:0095)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0095 advisory. - dotnet: ASP.NET Core Callbacks outside of locks cause Krestel deadlock when using HTTP2 CVE-2021-1723 Note that Nessus has not tested for this issue but has...

CentOS 8 : libexif (CESA-2020:5393)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5393 advisory. - libexif: out of bounds write due to an integer overflow in exif-entry.c CVE-2020-0452 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : postgresql:9.6 (CESA-2020:5619)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5619 advisory. - postgresql: Selectivity estimators bypass row security policies CVE-2019-10130 - postgresql: TYPE in pgtemp executes arbitrary SQL during SECURITY...

CentOS 8 : libvpx (CESA-2020:4629)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4629 advisory. - libvpx: Double free in ParseContentEncodingEntry in mkvparser.cc CVE-2019-2126 - libvpx: Out of bounds read in vp8norm table CVE-2019-9232 - libvpx:...

CentOS 8 : pcre2 (CESA-2020:4539)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory. - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : gnutls (CESA-2020:2637)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2637 advisory. - gnutls: session resumption works without master key allowing MITM CVE-2020-13777 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : go-toolset:rhel8 (CESA-2020:5493)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5493 advisory. - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS CVE-2020-24553 - golang: math/big: panic during recursive...

CentOS 8 : openssl (CESA-2020:4514)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4514 advisory. - openssl: Integer overflow in RSAZ modular exponentiation on x8664 CVE-2019-1551 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : libcroco (CESA-2020:3654)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3654 advisory. - libcroco: Stack overflow in function crparserparseanycore in cr-parser.c CVE-2020-12825 Note that Nessus has not tested for this issue but has instead relied...