Oracle Linux 8 : mod_auth_openidc:2.3 (ELSA-2022-1823)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1823 advisory. - Resolves: rhbz1987222 - CVE-2021-32792 XSS when using OIDCPreservePost On - Resolves: rhbz1987216 - CVE-2021-32791 hardcoded static IV and AAD with a...

Oracle Linux 8 : gfbgraph (ELSA-2022-1801)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-1801 advisory. 0.2.4-1 - Update to 0.2.4 Resolves: 1997941 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : python27:2.7 (ELSA-2022-1821)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1821 advisory. - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs Resolves: rhbz2047376 - Security fix for...

Oracle Linux 8 : cockpit (ELSA-2022-2008)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-2008 advisory. - Certificate login validation rhbz1992620, CVE-2021-3698 - Restrict frame embedding to same origin rhbz1984902, CVE-2021-3660 Tenable has extracted th...

Rocky Linux 8 : kernel-rt (RLSA-2022:1975)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1975 advisory. - An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls...

Oracle Linux 8 : compat-exiv2-026 (ELSA-2022-1797)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-1797 advisory. 0.26-7 - Fix stack exhaustion issue in the printIFDStructure function Resolves: bz2003669 Tenable has extracted the preceding description block directly from th...

Rocky Linux 8 : .NET 6.0 (RLSA-2022:2199)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:2199 advisory. - .NET and Visual Studio Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-23267, CVE-2022-29145. CVE-2022-29117 Note that Nessus has not test...

Oracle Linux 8 : squid:4 (ELSA-2022-1939)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1939 advisory. - Resolves: 1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP protocol data may lead to information disclosure Tenable has extracted the...

Oracle Linux 8 : qt5-qtsvg (ELSA-2022-1920)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1920 advisory. 5.15.2-4 - Fix out-of-bound write that may lead to DoS Resolves: bz2038487 Tenable has extracted the preceding description block directly from the Oracle Linux...

Rocky Linux 8 : cockpit (RLSA-2022:2008)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:2008 advisory. - A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon SSSD...

Rocky Linux 8 : .NET 5.0 (RLSA-2022:2200)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:2200 advisory. - .NET and Visual Studio Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-23267, CVE-2022-29145. CVE-2022-29117 Note that Nessus has not test...

Oracle Linux 8 : dovecot (ELSA-2022-1950)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1950 advisory. 1:2.3.16-2 - do not disable xz/lzma for now despite being deprecated 1:2.3.16-1 - dovecot updated to 2.3.16, pigeonhole to 0.5.16 - fix CVE-2021-33515 plaintext...

Oracle Linux 8 : libsndfile (ELSA-2022-1968)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1968 advisory. 1.0.28-12 - fix heap buffer overflow in flac 2030507 1.0.28-11 - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code...

Rocky Linux 8 : webkit2gtk3 (RLSA-2022:1777)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1777 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15...

Oracle Linux 8 : httpd:2.4 (ELSA-2022-1915)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1915 advisory. - Resolves: 2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference or SSRF in forward proxy configurations Tenable has extracted the...

Oracle Linux 8 : libpq (ELSA-2022-1891)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1891 advisory. 13.5-1 - Rebase to 13.5 Resolves: 2023294 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 8 : bind (ELSA-2022-2092)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-2092 advisory. 32:9.11.36-2 - Reduce memory used per-view on machine with few processors 2030239 32:9.11.36-2 - Rebuilt on a new side-tag 2013993 32:9.11.36-1 - Update to...

Oracle Linux 8 : rust-toolset:ol8 (ELSA-2022-1894)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1894 advisory. - Update to 1.52.1. Includes security fixes for CVE-2020-36323, CVE-2021-28876, CVE-2021-28878, CVE-2021-28879, and CVE-2021-31162. - Update to 1.51.0. Update t...

Oracle Linux 8 : python3 (ELSA-2022-1986)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1986 advisory. - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response Resolves: rhbz2036020 Tenable has extracted the preceding...

Oracle Linux 8 : libtiff (ELSA-2022-1810)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-1810 advisory. 4.0.9-21 - Fix CVE-2020-19131 2006535 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...