MiracleLinux 7 : firefox-60.1.0-5.0.1.el7 (AXSA:2018-3259:05)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3259:05 advisory. Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 CVE-2018-5188 Mozilla: Buffer overflow using computed size o...

MiracleLinux 7 : jasper-1.900.1-33.el7 (AXSA:2019-3676:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3676:01 advisory. jasper: reachable assertion in JPCNOMINALGAIN CVE-2016-9396 jasper: NULL pointer exception in jp2encode CVE-2017-1000050 Tenable has extracted the...

MiracleLinux 7 : java-1.7.0-openjdk-1.7.0.211-2.6.17.1.0.1.el7.AXS7 (AXSA:2019-3841:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-3841:02 advisory. Security Fix - Oracle Java SE Libraries Java SE CVE-2019-2422 CVEJVNhttp://jvndb.jvn.jp/ Tenable has extracted the preceding description block directly from...

MiracleLinux 7 : samba-4.6.2-12.el7 (AXSA:2017-2417:07)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2417:07 advisory. A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted SMB...

MiracleLinux 7 : glibc-2.17-292.el7 (AXSA:2019-4313:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4313:05 advisory. glibc: getaddrinfo should reject IP addresses with trailing characters CVE-2016-10739 Tenable has extracted the preceding description block directly from the...

MiracleLinux 7 : openssh-7.4p1-16.el7 (AXSA:2018-2845:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-2845:01 advisory. openssh: Improper write operations in readonly mode allow for zero-length file creation CVE-2017-15906 Tenable has extracted the preceding description block...

MiracleLinux 7 : kernel-3.10.0-1062.4.3.el7 (AXSA:2019-4398:06)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4398:06 advisory. hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write CVE-2019-0155 Tenable has extracted the preceding description block directly...

MiracleLinux 7 : qemu-kvm-1.5.3-126.el7.5 (AXSA:2017-1328:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1328:02 advisory. qemu-kvm is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu-kvm acts as a virtual machine monitor together...

MiracleLinux 7 : librelp-1.2.12-1.el7.1 (AXSA:2018-2994:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-2994:01 advisory. librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c CVE-2018-1000140 Tenable has extracted the preceding description block...

MiracleLinux 7 : libvirt-3.9.0-14.6.0.1.el7.AXS7 (AXSA:2018-3248:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3248:02 advisory. An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load Tenable has extracted the...

MiracleLinux 7 : perl-Archive-Tar-1.92-3.el7 (AXSA:2019-4250:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4250:01 advisory. perl: Directory traversal in Archive::Tar CVE-2018-12015 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : jss-4.4.6-3.el7_7 (AXSA:2019-4345:04)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-4345:04 advisory. JSS: OCSP policy Leaf and Chain implicitly trusts the root certificate CVE-2019-14823 Tenable has extracted the preceding description block directly from the...

MiracleLinux 7 : firefox-45.7.0-1.0.1.el7 (AXSA:2017-1290:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1290:01 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this...

MiracleLinux 7 : tomcat-7.0.69-10.el7 (AXSA:2016-1116:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-1116:02 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Ja...

MiracleLinux 7 : rh-mysql56-mysql-5.6.34-2.el7 (AXSA:2016-932:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-932:03 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...

MiracleLinux 7 : 389-ds-base-1.3.6.1-26.el7 (AXSA:2018-2535:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-2535:01 advisory. A stack buffer overflow flaw was found in the way 389-ds-base handled certain LDAP search filters. A remote, unauthenticated attacker could potentially use...

MiracleLinux 7 : ntp-4.2.6p5-25.0.1.el7.AXS7 (AXSA:2016-1181:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-1181:02 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which...

MiracleLinux 7 : pcs-0.9.162-5.el7.1 (AXSA:2018-2813:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-2813:01 advisory. pcs: Privilege escalation via authorized user malicious REST call CVE-2018-1079 pcs: Debug parameter removal bypass, allowing information disclosure...

MiracleLinux 7 : httpd-2.4.6-90.0.1.el7.AXS7 (AXSA:2019-4324:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4324:03 advisory. httpd: modauthdigest: access control bypass due to race condition CVE-2019-0217 httpd: URL normalization inconsistency CVE-2019-0220 Tenable has...

MiracleLinux 7 : php55-php-5.5.21-5.el7 (AXSA:2016-632:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-632:01 advisory. Security issues fixed with this release: CVE-2016-5385 PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore...