CentOS 8 : cryptsetup (CESA-2020:4542)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4542 advisory. - cryptsetup: Out-of-bounds write when validating segments CVE-2020-14382 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : openjpeg2 (CESA-2020:0570)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0570 advisory. - openjpeg: heap-based buffer overflow in pjt1clbldecodeprocessor in openjp2/t1.c CVE-2020-8112 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : resource-agents (CESA-2020:4605)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4605 advisory. - python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function CVE-2020-11078 Note that Nessus has not...

CentOS 8 : firefox (CESA-2020:2828)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2828 advisory. - Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64 CVE-2020-12417 - Mozilla: Information disclosure due to manipulated U...

CentOS 8 : librsvg2 (CESA-2020:4709)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4709 advisory. - librsvg: Resource exhaustion via crafted SVG file with nested patterns CVE-2019-20446 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : libsolv (CESA-2020:4508)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4508 advisory. - libsolv: out-of-bounds read in repodataschema2id in repodata.c CVE-2019-20387 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : thunderbird (CESA-2020:4913)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4913 advisory. - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 Note...

CentOS 8 : nodejs:12 (CESA-2020:2852)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2852 advisory. - nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 - nodejs-minimist: prototype pollution allows adding or modifying properties of...

CentOS 8 : unzip (CESA-2020:1787)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1787 advisory. - unzip: overlapping of files in ZIP container leads to denial of service CVE-2019-13232 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : python-pillow (CESA-2020:3185)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3185 advisory. - python-pillow: out-of-bounds reads/writes in the parsing of SGI image files in expandrow/expandrow2 CVE-2020-11538 - python-pillow: out-of-bounds rea...

CentOS 8 : php:7.2 (CESA-2020:1624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1624 advisory. - php: Buffer over-read in PHAR reading functions CVE-2018-20783 - php: Heap buffer overflow in function exifprocessIFDTAG CVE-2019-11034 - php: Heap...

CentOS 8 : cups (CESA-2020:4469)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4469 advisory. - cups: heap based buffer overflow in libcups's ppdFindOption in ppd-mark.c CVE-2020-3898 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : java-1.8.0-openjdk (CESA-2020:1515)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1515 advisory. - OpenJDK: Misplaced regular expression syntax error check in RegExpScanner Scripting, 8223898 CVE-2020-2754 - OpenJDK: Incorrect handling of empty...

CentOS 8 : haproxy (CESA-2020:1288)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1288 advisory. - haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes CVE-2020-11100 Note that Nessus has not tested for this issue but has instead relied only ...

CentOS 8 : patch (CESA-2020:1852)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1852 advisory. - patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files CVE-2019-13636 Note that Nessus has not tested for this iss...

CentOS 8 : dovecot (CESA-2020:2901)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2901 advisory. - dovecot: malformed NOOP commands leads to DoS CVE-2020-10957 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : nss and nspr (CESA-2020:3280)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3280 advisory. - nss: Use-after-free in sftkFreeSession due to improper refcounting CVE-2019-11756 - nss: Check length of inputs for cryptographic primitives...

CentOS 8 : libreswan (CESA-2020:2070)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:2070 advisory. - libreswan: DoS attack via malicious IKEv1 informational exchange message CVE-2020-1763 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : thunderbird (CESA-2020:0577)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0577 advisory. - Mozilla: Message ID calculation was based on uninitialized data CVE-2020-6792 - Mozilla: Out-of-bounds read when processing certain email messages...

CentOS 8 : gnutls (CESA-2020:1998)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1998 advisory. - gnutls: DTLS client hello contains a random value of all zeroes CVE-2020-11501 Note that Nessus has not tested for this issue but has instead relied only on t...