MiracleLinux 8 : GStreamer, and libmad, gstreamer1-1.16.1-2.el8, libmad-0.15.1b-25.el8, orc-0.4.28-3.el8 (AXSA:2021-1743:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1743:01 advisory. libmad: Double-free in the maddecoderrun function CVE-2018-7263 CVEs: CVE-2018-7263 The maddecoderrun function in decoder.c in Underbit libmad through 0.15.1...

MiracleLinux 8 : squid:4 (AXSA:2025-11003:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11003:01 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the...

MiracleLinux 8 : varnish:6 (AXSA:2022-3053:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3053:01 advisory. varnish: HTTP/1 request smuggling vulnerability CVE-2022-23959 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : libreswan-4.12-2.el8_9.2.ML.1 (AXSA:2024-7724:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-7724:02 advisory. libreswan: Missing PreSharedKey for connection can cause crash CVE-2024-2357 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : babel-2.5.1-7.el8 (AXSA:2021-2647:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2647:01 advisory. python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code CVE-2021-20095, CVE-2021-42771 Tenab...

MiracleLinux 8 : spice-gtk-0.37-1.el8.2, spice-0.14.2-1.el8.1 (AXSA:2020-681:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-681:04 advisory. spice: multiple buffer overflow vulnerabilities in QUIC decoding code CVE-2020-14355 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : firefox-115.5.0-1.el8_9.ML.1 (AXSA:2024-7349:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7349:01 advisory. Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer CVE-2023-6204 Mozilla: Use-after-free in MessagePort::Entangled CVE-2023-6205 Mozilla:...

MiracleLinux 8 : xorg-x11-server-1.20.11-25.el8_10, xorg-x11-server-Xwayland-21.1.3-17.el8_10 (AXSA:2024-8964:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8964:01 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 Tenable has extracted the preceding description block...

MiracleLinux 8 : polkit-0.115-13.el8.2 (AXSA:2022-3159:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3159:03 advisory. polkit: file descriptor leak allows an unprivileged user to cause a crash CVE-2021-4115 Tenable has extracted the preceding description block directly from t...

MiracleLinux 8 : xz-5.2.4-4.el8 (AXSA:2022-3662:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3662:02 advisory. gzip: arbitrary-file-write vulnerability CVE-2022-1271 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory...

MiracleLinux 8 : mutt-2.0.7-2.el8 (AXSA:2022-4219:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-4219:01 advisory. mutt: buffer overflow in uudecoder function CVE-2022-1328 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : libxml2-2.9.7-16.el8.1 (AXSA:2023-6331:05)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6331:05 advisory. libxml2: NULL dereference in xmlSchemaFixupComplexType CVE-2023-28484 libxml2: Hashing of empty dict strings isn't deterministic CVE-2023-29469...

MiracleLinux 8 : sysstat-11.7.3-5.el8 (AXSA:2021-1135:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-1135:01 advisory. sysstat: memory corruption due to an integer overflow in remapstruct in sacommon.c CVE-2019-16167 Tenable has extracted the preceding description block...

MiracleLinux 8 : gstreamer1-plugins-bad-free-1.16.1-4.el8 (AXSA:2024-8316:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8316:04 advisory. gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video CVE-2023-40474 gstreamer-plugins-bad:...

MiracleLinux 8 : container-tools:3.0 (AXSA:2021-2818:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2818:01 advisory. buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 Tenable has extracted the preceding description block...

MiracleLinux 8 : cyrus-sasl-2.1.27-5.el8 (AXSA:2021-1130:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1130:01 advisory. cyrus-sasl: denial of service in sasladdstring function CVE-2019-19906 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 8 : python-pip-9.0.3-18.el8 (AXSA:2020-1044:05)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-1044:05 advisory. python-pip: directory traversal in downloadhttpurl function in src/pip/internal/download.py CVE-2019-20916 Tenable has extracted the preceding description...

MiracleLinux 8 : nginx:1.18 (AXSA:2021-2309:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2309:01 advisory. nginx: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name CVE-2021-23017 Tenable has extracted the preceding descripti...

MiracleLinux 8 : nginx:1.16 (AXSA:2021-2307:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2307:01 advisory. nginx: Off-by-one in ngxresolvercopy when labels are followed by a pointer to a root domain name CVE-2021-23017 Tenable has extracted the preceding descripti...

MiracleLinux 8 : avahi-0.7-21.el8_9.1 (AXSA:2024-7355:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7355:01 advisory. avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket CVE-2021-3468 avahi: Reachable assertion in...