RHEL 8 : OpenShift Container Platform 4.2.28 (RHSA-2020:1401)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1401 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

RHEL 7 : kernel (RHSA-2020:1473)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1473 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: rtlp2pnoaie in...

RHEL 7 : kernel (RHSA-2020:1460)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1460 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: hardware: bluetooth: BR/EDR encryption key...

Arbitrary Code Execution

redhat-ds-base is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the way Red Hat Directory Server handled simple paged result searches. If an unauthenticated user were able to send multiple simple paged search requests to Directory Server, it could cause t...

Denial Of Service (DoS)

redhat-ds-base is vulnerable to denial of service DoS. The vulnerability exists when multiple Red Hat Directory Server instances were configured on the system to run under different unprivileged users, the Directory Server setup scripts set insecure permissions on the /var/run/dirsrv/ directory,...

Arbitrary Code Execution

redhat-ds-base is vulnerable to arbitrary code execution. The vulnerability exists as a buffer overflow flaw was found in the Red Hat Directory Server 8.0 regular expression handler. An unauthenticated attacker could construct a malicious LDAP query that could cause the LDAP server to crash, or,...

CentOS 7 : bluez (RHSA-2020:1101)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1101 advisory. - A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead...

CentOS 7 : unzip (CESA-2020:1181)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1181 advisory. - unzip: overlapping of files in ZIP container leads to denial of service CVE-2019-13232 Note that Nessus has not tested for this issue but has inste...

CentOS 7 : libosinfo (RHSA-2020:1051)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1051 advisory. - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...

CentOS 7 : mariadb (RHSA-2020:1100)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1100 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions that are affected are 5.6.44 an...

CentOS 6 : krb5-appl (CESA-2020:1349)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1349 advisory. - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 Note that Nessus has not tested for...

CentOS 7 : gettext (RHSA-2020:1138)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1138 advisory. - An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read- catalog.c, related to an invalid free in pogramparse in...

CentOS 7 : evolution (RHSA-2020:1080)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1080 advisory. - GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a...

CentOS 7 : kernel (RHSA-2020:1016)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1016 advisory. - In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size...

CentOS 7 : mutt (RHSA-2020:1126)

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1126 advisory. - An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles .. directory traversal in a mailbox name. CVE-2018-14355...

CentOS 7 : samba (RHSA-2020:1084)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1084 advisory. - A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set i...

CentOS 7 : file (RHSA-2020:1022)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1022 advisory. - The docorenote function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service out-of-bounds read and application crash...

CentOS 7 : bind (RHSA-2020:1061)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1061 advisory. - managed-keys is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in...

CentOS 7 : bash (RHSA-2020:1113)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1113 advisory. - rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASHCMDS, thus allowing the user to execute any command with the permissions of t...

CentOS 7 : libreoffice (RHSA-2020:1151)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1151 advisory. - LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc...