MiracleLinux 7 : kernel-3.10.0-957.1.3.el7 (AXSA:2019-3433:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3433:01 advisory. kernel: stack-based buffer overflow in chapservercomputemd5 in iscsi target CVE-2018-14633 kernel: NULL pointer dereference in...

MiracleLinux 7 : ghostscript-9.25-2.el7.3 (AXSA:2019-4385:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4385:04 advisory. ghostscript: -dSAFER escape in .charkeys 701841 CVE-2019-14869 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : libwpd-0.10.0-2.el7 (AXSA:2019-4113:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4113:01 advisory. libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp CVE-2018-19208 Tenable has extracted the preceding...

MiracleLinux 7 : SDL-1.2.15-15.el7 (AXSA:2019-4397:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4397:01 advisory. SDL: CVE-2019-13616 not fixed in Asianux Server 7 erratum RHSA-2019:3950 CVE-2019-14906 Tenable has extracted the preceding description block direct...

MiracleLinux 7 : ovmf-20180508-3.gitee3198e672e2.el7.1 (AXSA:2019-3846:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3846:01 advisory. Security Fix - ovmf IO CVE-2018-12180 CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted the preceding description block directly from the MiracleLinux securit...

MiracleLinux 7 : krb5-1.15.1-18.el7 (AXSA:2018-2754:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2754:01 advisory. krb5: Authentication bypass by improper validation of certificate EKU and SAN CVE-2017-7562 krb5: Invalid S4U2Self or S4U2Proxy request causes...

MiracleLinux 7 : rh-php56-php-5.6.5-7.el7 (AXSA:2016-130:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-130:01 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers...

MiracleLinux 7 : freerdp-1.0.2-15.el7.1 (AXSA:2019-3794:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3794:01 advisory. Security Fix - FreeRDP updatereadbitmapupdate CVE-2018-8786 - FreeRDP gdiBitmapDecompress CVE-2018-8787 - FreeRDP nscrledecode4 CVE-2018-8788...

MiracleLinux 7 : firefox-68.2.0-1.0.1.el7.AXS7 (AXSA:2019-4378:06)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-4378:06 advisory. Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 CVE-2019-11764 Mozilla: Use-after-free when creating index updates in IndexedDB...

MiracleLinux 7 : dhcp-4.2.5-77.0.1.el7.AXS7 (AXSA:2019-4293:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4293:01 advisory. dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS CVE-2019-6470 Tenable has extracted the preceding...

MiracleLinux 7 : firefox-38.7.0-1.0.1.el7.AXS7 (AXSA:2016-134:03)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-134:03 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...

MiracleLinux 7 : python-2.7.5-76.0.1.el7.AXS7 (AXSA:2019-3684:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3684:02 advisory. python: DOS via regular expression backtracking in difflib.ISLINEJUNK method in difflib CVE-2018-1061 python: DOS via regular expression catastrophi...

MiracleLinux 7 : gnutls-3.3.29-8.el7 (AXSA:2019-3543:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3543:01 advisory. gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls CVE-2018-10844 gnutls: HMAC-SHA-384 vulnerable to...

MiracleLinux 7 : zziplib-0.13.62-9.el7 (AXSA:2018-3426:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3426:01 advisory. zziplib: out of bound read in mmapped.c:zzipdiskfread causes crash CVE-2018-7725 zziplib: Bus error in zip.c:zzipparserootdirectory cause crash via...

MiracleLinux 7 : dhcp-4.2.5-68.1.0.1.el7.AXS7 (AXSA:2018-3100:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3100:04 advisory. A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Asianux Server. A malicious DHCP server, ...

MiracleLinux 7 : ovmf-20180508-3.gitee3198e672e2.el7 (AXSA:2018-3368:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-3368:02 advisory. openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service CVE-2018-0739 Tenable has extracted the...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.232.b09-0.el7 (AXSA:2019-4346:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4346:06 advisory. OpenJDK: Improper handling of Kerberos proxy credentials Kerberos, 8220302 CVE-2019-2949 OpenJDK: Unexpected exception thrown during regular...

MiracleLinux 7 : kernel-3.10.0-514.10.2.el7 (AXSA:2017-1343:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1343:03 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operatin...

MiracleLinux 7 : libvncserver-0.9.9-12.el7 (AXSA:2018-2817:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2817:02 advisory. libvncserver: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c CVE-2018-7225 Tenable has extracted the preceding description block...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.121-0.b13.el7 (AXSA:2017-1273:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1273:01 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-5546 RESERVED This candidate has been reserved by an organization...