CentOS 8 : redis:6 (CESA-2022:7541)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7541 advisory. - redis: Code injection via Lua script execution environment CVE-2022-24735 - redis: Malformed Lua script can crash Redis CVE-2022-24736 Note that Ness...

KB5019964: Windows 10 Version 1607 and Windows Server 2016 Security Update (November 2022)

The remote Windows host is missing security update 5019964. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 - Windows Kerberos...

RHEL 8 : wavpack (RHSA-2022:7558)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7558 advisory. WavPack is a completely open audio compression format providing lossless, high-quality lossy and a unique hybrid compression mode. Security Fixes:...

KB5019081: Windows Server 2022 / Azure Stack HCI 21H2 / 22H2 Security Update (November 2022)

The remote Windows host is missing security update 5019081. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 - Windows Kerberos...

KB5019970: Windows 10 LTS 1507 Security Update (November 2022)

The remote Windows host is missing security update 5019970. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Group Policy Elevation of Privilege Vulnerability CVE-2022-37992, CVE-2022-41086 - Windo...

KLA20042 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof us...

RHEL 8 : redis:6 (RHSA-2022:7541)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7541 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets...

KB5020010: Windows 8.1 and Windows Server 2012 R2 Security Update (November 2022)

The remote Windows host is missing security update 5020010. It is, therefore, affected by multiple vulnerabilities - AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions CVE-2022-23824 - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVE-2022-37966 - Windows Kerberos...

Debian DSA-5271-1 : libxml2 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5271 advisory. - Please review the referenced CVE identifiers for details. CVE-2022-40303, CVE-2022-40304 Note that Nessus has not tested for these issues but has instead relied...

CVE-2022-43563 Risky command safeguards bypass via rex search command field names in Splunk Enterprise

In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phis...

RHEL 9 : lua (RHSA-2022:7329)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7329 advisory. The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently us...

CISA Releases Three Industrial Control Systems Advisories

CISA has released three 3 Industrial Control Systems ICS advisories on November 3, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories f...

The Bug Report October 2022 Edition

The Bug Report — October 2022 Edition By Trellix · November 2, 2022 This story was written by Richard Johnson. Do ROP exploits count as jmp scares? Why am I here? Welcome back to the Bug Report: Spooky Edition, and we’ve got bugs crawling out of the walls! Of all the months we do this, we’ve foun...

CVE-2022-42313

Xenstore: guests can let run xenstored out of memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on November 1, 2022. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisory for technical...

Microsoft Edge (Chromium) < 107.0.1418.26 Vulnerability

The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.26. It is, therefore, affected by a vulnerability as referenced in the October 31, 2022 advisory. - Type Confusion in V8. CVE-2022-3723 Note that Nessus has not tested for this issue but has instead relied...

Security Updates for Windows Defender (October 2022)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.19700.3. It is, therefore, affected by a privilege escalation vulnerability. An authenticated attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 80900 C...

GLSA-202210-15 : GDAL: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202210-15 GDAL: Heap Buffer Overflow - GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and...

Debian DSA-5263-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5263 advisory. - Type Confusion in V8. CVE-2022-3723 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CISA Releases Four Industrial Control Systems Advisories

CISA has released four 4 Industrial Control Systems ICS advisories on October 27, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisory for...