CentOS 9 : xorg-x11-server-1.20.11-15.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the xorg-x11-server-1.20.11-15.el9 build changelog. - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the...

CentOS 9 : varnish-6.6.2-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the varnish-6.6.2-3.el9 build changelog. - Request Forgery Vulnerability CVE-2022-45060 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 9 : expat-2.5.0-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the expat-2.5.0-1.el9 build changelog. - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in out-of-memo...

CentOS 9 : xorg-x11-server-Xwayland-21.1.3-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the xorg-x11-server-Xwayland-21.1.3-8.el9 build changelog. - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly...

CentOS 9 : dhcp-4.4.2-17.b1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the dhcp-4.4.2-17.b1.el9 build changelog. - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1 Versions of...

CentOS 9 : bind-9.16.23-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the bind-9.16.23-7.el9 build changelog. - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S1 9.16.8-S1 - 9.16.26-S1...

CentOS 9 : curl-7.76.1-21.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the curl-7.76.1-21.el9 build changelog. - When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the...

CentOS 9 : python3.9-3.9.14-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the python3.9-3.9.14-1.el9 build changelog. - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap...

CentOS 9 : grafana-9.0.9-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the grafana-9.0.9-1.el9 build changelog. - XSS CVE-2021-23648 - Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users...

CentOS 9 : bind-9.16.23-13.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the bind-9.16.23-13.el9 build changelog. - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has...

CentOS 9 : glib2-2.68.4-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-8.el9 build changelog. - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for these issues but has instead...

CentOS 9 : swtpm-0.6.0-3.20210607gitea627b3.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the swtpm-0.6.0-3.20210607gitea627b3.el9 build changelog. - In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack...

CentOS 9 : glib2-2.68.4-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-9.el9 build changelog. - Rejected reason: Rejected by upstream. CVE-2023-24593, CVE-2023-25180 Note that Nessus has not tested for these issues but has instead...

CentOS 9 : booth-1.0-283.1.9d4029a.git.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the booth-1.0-283.1.9d4029a.git.el9 build changelog. - The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a...

CentOS 9 : booth-1.0-251.5.bfb2f92.git.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the booth-1.0-251.5.bfb2f92.git.el9 build changelog. - The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a...

CentOS 9 : libX11-1.7.0-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libX11-1.7.0-9.el9 build changelog. - out-of-bounds memory access in XkbReadKeySyms CVE-2023-43785 - stack exhaustion from infinite recursion in PutSubImage CVE-2023-43786 -...

CentOS 9 : lua-5.4.4-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the lua-5.4.4-3.el9 build changelog. - singlevar in lparser.c in Lua from including 5.4.0 up to excluding 5.4.4 lacks a certain luaKexp2anyregup call, leading to a heap-based buffer over-re...

CentOS 9 : python3.11-3.11.4-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python3.11-3.11.4-1.el9 build changelog. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts...

CentOS 9 : oddjob-0.34.7-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the oddjob-0.34.7-6.el9 build changelog. - A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wherein, during the home...

CentOS 9 : python3.11-3.11.4-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python3.11-3.11.4-3.el9 build changelog. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts...