Rocky Linux 8 : python3 (RLSA-2023:3591)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3591 advisory. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank...

Ubuntu 22.04 LTS / 23.04 : GlusterFS vulnerability (USN-6157-1)

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6157-1 advisory. Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of...

Fedora 37 : python3.11 (2023-63c69aa712)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-63c69aa712 advisory. Fix for CVE-2023-24329 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability...

EulerOS 2.0 SP10 : samba (EulerOS-SA-2023-1829)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Netlogon RPC Elevation of Privilege Vulnerability CVE-2022-38023 Note that Tenable Network Security has extracted the preceding description block...

Debian dla-3414 : avahi-autoipd - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3414 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3414-1 [email protected] https://www.debian.org/lts/security/...

Fedora 38 : skopeo (2023-ccaf5538dd)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ccaf5538dd advisory. Security fix for CVE-2022-41723 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CBL Mariner 2.0 Security Update: vim (CVE-2022-3153)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3153 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0404. CVE-2022-3153 Note that Nessus has not...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2288)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2288 advisory. - Out-of-bounds Write in GitHub repository vim/vim prior to 9.0. CVE-2022-2288 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: vim (CVE-2021-3968)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3968 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3968 Note that Nessus has not tested for this issue but...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2210)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2210 advisory. - Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. CVE-2022-2210 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: vim (CVE-2022-2287)

The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2287 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. CVE-2022-2287 Note that Nessus has not tested for...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27458)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27458 advisory. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a...

Fedora 38 : vim (2023-ccf283d7e1)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ccf283d7e1 advisory. The newest upstream patchlevel 1367 Security fix for CVE-2023-1127 Tenable has extracted the preceding description block directly from the Fedora...

Fortinet FortiOS - Path Traversal in Execute Command (FG-IR-22-369)

The version of FortiOS installed on the remote host is therefore, affected by a path traversal in execute command vulnerability. A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' in FortiOS may allow a privileged attacker to read and write arbitrary file...

Fedora 36 : dcmtk (2023-eda976b192)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-eda976b192 advisory. Security fix for CVE-2022-43272 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Scientific Linux Security Update : zlib on SL7.x i686/x86_64 (2023:1095)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2023:1095-1 advisory. - zlib: heap-based buffer over-read and overflow in inflate in inflate.c via a large gzip header extra field CVE-2022-37434 Note that Nessus has not teste...

RHEL 8 : samba (RHSA-2023:0638)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0638 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...

AlmaLinux 9 : bash (ALSA-2023:0340)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0340 advisory. - A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parametertransform. This issue may lead to memory problems. CVE-2022-3715...

AlmaLinux 9 : .NET 6.0 (ALSA-2023:0077)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0077 advisory. - .NET Denial of Service Vulnerability. CVE-2023-21538 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...