CentOS 9 : nginx-1.20.1-10.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the nginx-1.20.1-10.el9 build changelog. - Application Layer Protocol Confusion CVE-2021-3618 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 9 : polkit-0.117-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the polkit-0.117-9.el9 build changelog. - There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest...

CentOS 9 : yajl-2.1.0-21.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the yajl-2.1.0-21.el9 build changelog. - yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow whic...

CentOS 9 : libtiff-4.4.0-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtiff-4.4.0-8.el9 build changelog. - processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow e.g., WRITE of size 307203 via a...

CentOS 9 : fence-agents-4.10.0-56.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the fence- agents-4.10.0-56.el9 build changelog. - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

CentOS 9 : polkit-0.117-10.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the polkit-0.117-10.el9 build changelog. - There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest...

CentOS 9 : virt-v2v-2.2.0-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the virt-v2v-2.2.0-5.el9 build changelog. - A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the getkeys functio...

CentOS 9 : ncurses-6.2-10.20210508.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ncurses-6.2-10.20210508.el9 build changelog. - ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security- relevant memory corruption via...

CentOS 9 : openssh-8.7p1-34.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the openssh-8.7p1-34.el9 build changelog. - The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an age...

CentOS 9 : nodejs-nodemon-2.0.20-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the nodejs- nodemon-2.0.20-2.el9 build changelog. - Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. CVE-2021-44906 Note that Nessus has...

CentOS 9 : python-dateutil-2.8.1-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python- dateutil-2.8.1-7.el9 build changelog. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...

CentOS 9 : pixman-0.40.0-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the pixman-0.40.0-6.el9 build changelog. - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in rasterizeedges8 due to an integer overflow...

CentOS 9 : gdk-pixbuf2-2.42.6-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gdk-pixbuf2-2.42.6-3.el9 build changelog. - GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data ...

CentOS 9 : libxml2-2.9.13-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libxml2-2.9.13-3.el9 build changelog. - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled...

CentOS 9 : pesign-115-6.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the pesign-115-6.el9 build changelog. - A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACL...

CentOS 9 : flatpak-1.12.8-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the flatpak-1.12.8-1.el9 build changelog. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8,...

CentOS 9 : libmicrohttpd-0.9.72-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libmicrohttpd-0.9.72-5.el9 build changelog. - GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a multipart/form-data boundary in the...

CentOS 9 : libnbd-1.12.6-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libnbd-1.12.6-1.el9 build changelog. - A flaw was found in the copying tool nbdcopy of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly...

CentOS 9 : libjpeg-turbo-2.0.90-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libjpeg- turbo-2.0.90-6.el9 build changelog. - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

CentOS 9 : bind-9.16.23-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the bind-9.16.23-9.el9 build changelog. - Sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This, in turn, may cause named to exit due to ...