CentOS 9 : python3.11-3.11.4-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python3.11-3.11.4-3.el9 build changelog. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts...

CentOS 9 : openssh-8.7p1-28.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the openssh-8.7p1-28.el9 build changelog. - rhbz2008886 CVE-2021-41617 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CentOS 9 : qt5-qtbase-5.15.9-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the qt5-qtbase-5.15.9-7.el9 build changelog. - An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive...

CentOS 9 : dpdk-21.11.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the dpdk-21.11.1-1.el9 build changelog. - A flaw was found in the vhost library in DPDK. Function vhostusersetinflightfd does not validate msg-payload.inflight.numqueues, possibly causing...

CentOS 9 : texlive-20200406-26.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the texlive-20200406-26.el9 build changelog. - LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs...

CentOS 9 : libX11-1.7.0-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libX11-1.7.0-9.el9 build changelog. - out-of-bounds memory access in XkbReadKeySyms CVE-2023-43785 - stack exhaustion from infinite recursion in PutSubImage CVE-2023-43786 -...

CentOS 9 : ncurses-6.2-8.20210508.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ncurses-6.2-8.20210508.el9 build changelog. - There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before...

CentOS 9 : python3.11-3.11.4-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python3.11-3.11.4-1.el9 build changelog. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts...

CentOS 9 : opensc-0.23.0-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the opensc-0.23.0-2.el9 build changelog. - buffer overrun in pkcs15init for cardos CVE-2023-2977 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 9 : cups-2.3.3op2-19.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the cups-2.3.3op2-19.el9 build changelog. - heap buffer overflow may lead to DoS CVE-2023-32324 - use-after-free in cupsdAcceptClient in scheduler/client.c CVE-2023-34241 Note that...

CentOS 9 : wireshark-3.4.10-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the wireshark-3.4.10-4.el9 build changelog. - f5ethtrailer Infinite loop in legacy style dissector CVE-2022-3190 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 9 : python-lxml-4.6.5-3.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the python- lxml-4.6.5-3.el9 build changelog. - NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together wit...

CentOS 9 : mod_auth_openidc-2.4.9.1-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the modauthopenidc-2.4.9.1-1.el9 build changelog. - open redirect in oidcvalidateredirecturl rhel-9.0 CVE-2021-32786 - hardcoded static IV and AAD with a reused key in AES GCM...

CentOS 9 : python-mako-1.1.4-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python- mako-1.1.4-6.el9 build changelog. - Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects...

CentOS 9 : curl-7.76.1-28.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the curl-7.76.1-28.el9 build changelog. - This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy...

CentOS 9 : nodejs-nodemon-2.0.20-3.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the nodejs- nodemon-2.0.20-3.el9 build changelog. - The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular...

CentOS 9 : subversion-1.14.1-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the subversion-1.14.1-5.el9 build changelog. - Subversion's moddavsvn is vulnerable to memory corruption. While looking up path-based authorization rules, moddavsvn servers may attempt to u...

CentOS 9 : libreswan-4.12-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the libreswan-4.12-1.el9 build changelog. - An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 ...

CentOS 9 : booth-1.0-251.4.bfb2f92.git.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the booth-1.0-251.4.bfb2f92.git.el9 build changelog. - The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a...

CentOS 9 : libxml2-2.9.12-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libxml2-2.9.12-4.el9 build changelog. - xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. CVE-2019-20388 - GNOME project libxml2...