Fedora 31 : gnuchess (2020-dbccd7e9be)

6.2.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. The...

Fedora 31 : liblas (2020-b0695fcdf7)

This update fixes the following security vulnerabilities: CVE-2018-20536, CVE-2018-20537, CVE-2018-20539, CVE-2018-20540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 30 : ansible (2020-1b6ce91e37)

Update to upstream bugfix and security update 2.9.7. See https://github.com/ansible/ansible/blob/stable-2.9/changelogs/CHANGELO G-v2.9.rst for a detailed list of changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system websit...

Fedora 31 : qt5-qtbase (2020-3069e44be5)

Security fix for CVE-2015-9541 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

[SECURITY] Fedora 30 Update: wireshark-3.2.3-1.fc30

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

SUSE SLED15 / SLES15 Security Update : Test update for SUSE:SLE-15-SP2:Update (security) (SUSE-SU-2020:1077-1)

This is a security test update for SUSE:SLE-15-SP2:Update Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2020:1083-1)

This update for cups fixes the following issues : CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption bsc1168422. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:1065-1)

This update for ovmf fixes the following issues : CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

CVE-2020-11940

CVE-2020-11940 affects nDPI up to 3.2 Stable. The root cause is an out-of-bounds read in concat_hash_string (ssh.c). This enables a network-positioned attacker to exploit malformed SSH protocol messages on a network segment monitored by nDPI’s library, potentially impacting availability. The desc...

Exploit for Improper Authentication in Microsoft

CVE-2020-0688 Working Exploit PoC CVE-202...

Photon OS 3.0: Linux PHSA-2020-3.0-0082

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0082. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135871;...

CVE-2020-11967

CVE-2020-11967 affects IQrouter firmware up to v3.3.1. The vulnerability is caused by Incorrect Access Control, enabling remote attackers to take full device control (e.g., restart network, reboot, upgrade, reset) without authentication. Documentation consistently notes this risk is most relevant...

Photon OS 3.0: Httpd PHSA-2020-3.0-0079

An update of the httpd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0079. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135787...

CVE-2020-11967

In IQrouter through 3.3.1, remote attackers can control the device restart network, reboot, upgrade, reset because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration which has a...

Scientific Linux Security Update : gettext on SL7.x x86_64 (20200407)

gettext: double free in defaultaddmessage in read-catalog.c C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135811; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Fedora 31 : libssh (2020-5a77f0d68f)

Fixes CVE-2020-1730 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, In...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2020-1505)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded...

Debian DLA-2179-1 : jackson-databind security update

Following CVEs were reported against the jackson-databind source package : CVE-2020-10968 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy. CVE-2020-10969...

EulerOS 2.0 SP8 : icu (EulerOS-SA-2020-1506)

According to the version of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer...

Fedora 31 : chromium (2020-161c87cbc7)

Bugfix release from Google for 80.0.3987.162. ---- Update to 80.0.3987.162. Fixes the following CVEs : - CVE-2020-6450 - CVE-2020-6451 - CVE-2020-6452 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...