NewStart CGSL MAIN 7.02 : less Vulnerability (NS-SA-2025-0106)

The remote NewStart CGSL host, running version MAIN 7.02, has less packages installed that are affected by a vulnerability: - less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires us...

NewStart CGSL MAIN 7.02 : tpm2-tss Vulnerability (NS-SA-2025-0110)

The remote NewStart CGSL host, running version MAIN 7.02, has tpm2-tss packages installed that are affected by a vulnerability: - This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info returned by FapiQuote has to be...

NewStart CGSL MAIN 7.02 : pcp Multiple Vulnerabilities (NS-SA-2025-0187)

The remote NewStart CGSL host, running version MAIN 7.02, has pcp packages installed that are affected by multiple vulnerabilities: - A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with...

NewStart CGSL MAIN 7.02 : git Vulnerability (NS-SA-2025-0169)

The remote NewStart CGSL host, running version MAIN 7.02, has git packages installed that are affected by a vulnerability: - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that...

NewStart CGSL MAIN 7.02 : qpdf Vulnerability (NS-SA-2025-0178)

The remote NewStart CGSL host, running version MAIN 7.02, has qpdf packages installed that are affected by a vulnerability: - Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::sharedcount function at /bits/sharedptrbase.h. CVE-2024-24246 Note...

NewStart CGSL MAIN 7.02 : python-pip Vulnerability (NS-SA-2025-0142)

The remote NewStart CGSL host, running version MAIN 7.02, has python-pip packages installed that are affected by a vulnerability: - When installing a package from a Mercurial VCS URL ie pip install hg+... with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary...

NewStart CGSL MAIN 7.02 : binutils Vulnerability (NS-SA-2025-0113)

The remote NewStart CGSL host, running version MAIN 7.02, has binutils packages installed that are affected by a vulnerability: - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c...

NewStart CGSL MAIN 7.02 : vim Multiple Vulnerabilities (NS-SA-2025-0141)

The remote NewStart CGSL host, running version MAIN 7.02, has vim packages installed that are affected by multiple vulnerabilities: - Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option...

NewStart CGSL MAIN 7.02 : ImageMagick Multiple Vulnerabilities (NS-SA-2025-0130)

The remote NewStart CGSL host, running version MAIN 7.02, has ImageMagick packages installed that are affected by multiple vulnerabilities: - A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. CVE-2023-5341 - A heap-based buffer overflow vulnerability was found in coders/tiff.c ...

NewStart CGSL MAIN 7.02 : postfix Vulnerability (NS-SA-2025-0159)

The remote NewStart CGSL host, running version MAIN 7.02, has postfix packages installed that are affected by a vulnerability: - Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and smtpddiscardehlokeywords=chunking or certain other...

NewStart CGSL MAIN 7.02 : yajl Vulnerability (NS-SA-2025-0202)

The remote NewStart CGSL host, running version MAIN 7.02, has yajl packages installed that are affected by a vulnerability: - There's a memory leak in yajl 2.1.0 with use of yajltreeparse function. which will cause out-of-memory in server and cause crash. CVE-2023-33460 Note that Nessus has not...

NewStart CGSL MAIN 7.02 : nghttp2 Multiple Vulnerabilities (NS-SA-2025-0134)

The remote NewStart CGSL host, running version MAIN 7.02, has nghttp2 packages installed that are affected by multiple vulnerabilities: - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wil...

NewStart CGSL MAIN 7.02 : httpd Multiple Vulnerabilities (NS-SA-2025-0132)

The remote NewStart CGSL host, running version MAIN 7.02, has httpd packages installed that are affected by multiple vulnerabilities: - Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications...

NewStart CGSL MAIN 7.02 : sane-backends Vulnerability (NS-SA-2025-0135)

The remote NewStart CGSL host, running version MAIN 7.02, has sane-backends packages installed that are affected by a vulnerability: - An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because...

NewStart CGSL MAIN 7.02 : dnsmasq Vulnerability (NS-SA-2025-0164)

The remote NewStart CGSL host, running version MAIN 7.02, has dnsmasq packages installed that are affected by a vulnerability: - An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. CVE-2023-284...

NewStart CGSL MAIN 7.02 : perl-HTTP-Tiny Vulnerability (NS-SA-2025-0177)

The remote NewStart CGSL host, running version MAIN 7.02, has perl-HTTP-Tiny packages installed that are affected by a vulnerability: - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to...

NewStart CGSL MAIN 7.02 : perl-CPAN Vulnerability (NS-SA-2025-0188)

The remote NewStart CGSL host, running version MAIN 7.02, has perl-CPAN packages installed that are affected by a vulnerability: - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Nessus has not tested for these issues but ha...

NewStart CGSL MAIN 7.02 : libqb Vulnerability (NS-SA-2025-0161)

The remote NewStart CGSL host, running version MAIN 7.02, has libqb packages installed that are affected by a vulnerability: - logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. CVE-2023-39976 Note that Nessus has not test...

NewStart CGSL MAIN 7.02 : squashfs-tools Multiple Vulnerabilities (NS-SA-2025-0192)

The remote NewStart CGSL host, running version MAIN 7.02, has squashfs-tools packages installed that are affected by multiple vulnerabilities: - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem...

NewStart CGSL MAIN 7.02 : zlib Vulnerability (NS-SA-2025-0200)

The remote NewStart CGSL host, running version MAIN 7.02, has zlib packages installed that are affected by a vulnerability: - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE:...