CentOS 8 : icedtea-web (CESA-2019:2004)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2004 advisory. - icedtea-web: unsigned code injection in a signed JAR file CVE-2019-10181 - icedtea-web: path traversal while processing elements of JNLP files result...

CentOS 8 : virt-manager (CESA-2019:3464)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3464 advisory. - virt-install: unattended option leaks password via command line argument CVE-2019-10183 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : freeradius:3.0 (CESA-2019:1142)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1142 advisory. - freeradius: eap-pwd: fake authentication using reflection CVE-2019-11234 - freeradius: eap-pwd: authentication bypass via an invalid curve attack...

CentOS 8 : libvorbis (CESA-2019:3703)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3703 advisory. - libvorbis: heap buffer overflow in mapping0forward function CVE-2018-10392 - libvorbis: stack buffer overflow in barknoisehybridmp function...

CentOS 8 : python3 (CESA-2019:3520)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3520 advisory. - python: NULL pointer dereference using a specially crafted X509 certificate CVE-2019-5010 - python: CRLF injection via the query part of the url pass...

CentOS 8 : pango (CESA-2019:2582)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2582 advisory. - pango: pangolog2visgetembeddinglevels heap-based buffer overflow CVE-2019-1010238 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 8 : 389-ds:1.4 (CESA-2019:3401)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3401 advisory. - 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default CVE-2018-10871 - 389-ds-base: using dscreate in verbose...

CentOS 8 : dbus (CESA-2019:3707)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3707 advisory. - dbus: DBusServer DBUSCOOKIESHA1 authentication bypass CVE-2019-12749 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : gdb (CESA-2019:3352)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3352 advisory. - libiberty: Memory leak in demangletemplate function resulting in a denial of service CVE-2018-20657 Note that Nessus has not tested for this issue but has...

CentOS 8 : pki-deps:10.6 (CESA-2019:2720)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2720 advisory. - jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution CVE-2019-12384 Note that Nessus ha...

CentOS 8 : thunderbird (CESA-2019:1308)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1308 advisory. - mozilla: Cross-origin theft of images with ImageBitmapRenderingContext CVE-2018-18511 - Mozilla: Use-after-free in XMLHttpRequest CVE-2019-11691 -...

CentOS 8 : dovecot (CESA-2019:2822)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2822 advisory. - dovecot: improper NULL byte handling in IMAP and ManageSieve protocol parsers leads to out of bounds writes CVE-2019-11500 Note that Nessus has not tested for...

CentOS 8 : libtiff (CESA-2019:3419)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3419 advisory. - libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution CVE-2018-12900 Note...

CentOS 8 : http-parser (CESA-2019:3497)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2019:3497 advisory. - nodejs: Denial of Service with large HTTP headers CVE-2018-12121 Note that Nessus has not tested for this issue but has instead relied only on the application...

CentOS 8 : thunderbird (CESA-2019:1623)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1623 advisory. - libical: Heap buffer over read in icalparser.c parsergetnextchar CVE-2019-11703 - libical: Heap buffer overflow in icalmemorystrdupanddequote functio...

CentOS 8 : ghostscript (CESA-2019:3890)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3890 advisory. - ghostscript: -dSAFER escape in .charkeys 701841 CVE-2019-14869 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : yum (CESA-2019:3583)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3583 advisory. - libsolv: illegal address access in poolwhatprovides in src/pool.h CVE-2018-20534 - libcomps: use after free when merging two objmrtrees CVE-2019-3817...

CentOS 8 : mod_auth_mellon (CESA-2019:0985)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2019:0985 advisory. - modauthmellon: authentication bypass in ECP flow CVE-2019-3878 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : firefox (CESA-2019:1269)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1269 advisory. - mozilla: Cross-origin theft of images with ImageBitmapRenderingContext CVE-2018-18511 - Mozilla: Use-after-free in XMLHttpRequest CVE-2019-11691 -...

CentOS 8 : httpd:2.4 (CESA-2019:2893)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2893 advisory. - HTTP/2: request for large response leads to denial of service CVE-2019-9517 Note that Nessus has not tested for this issue but has instead relied only on the...