Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-2061)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 3.0: Linux PHSA-2022-3.0-0409

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0409. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Amazon Linux 2 : httpd (ALAS-2024-2594)

The version of httpd installed on the remote host is prior to 2.4.61-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2594 advisory. Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sen...

EulerOS 2.0 SP8 : systemd (EulerOS-SA-2024-2061)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they ha...

EulerOS 2.0 SP8 : ncurses (EulerOS-SA-2024-2059)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component ncwrapentry.CVE-2023-50495 Tenable has extracted the...

Slackware Linux 15.0 mozilla-thunderbird Multiple Vulnerabilities (SSA:2024-205-03)

The version of mozilla-thunderbird installed on the remote host is prior to 115.13.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-205-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 to fix security issues. Tenable has extract...

Amazon Linux 2 : libreswan (ALAS-2024-2596)

The version of libreswan installed on the remote host is prior to 3.25-4.8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2596 advisory. The Libreswan Project was notified of an issue causing libreswan to restart when using IKEv1 without specifying an esp= line. Wh...

Atlassian Confluence 7.19.23 < 7.19.25 / 8.5.x < 8.5.12 / 8.9.x < 8.9.4 (CONFSERVER-96103)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-96103 advisory. - When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory erro...

Oracle Enterprise Manager Cloud Control (Jul 2024 CPU)

The 13.5.0.0 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Install Apach...

EulerOS Virtualization 2.10.1 : util-linux (EulerOS-SA-2024-2013)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users...

Oracle VM VirtualBox (July 2024 CPU)

The versions of VM VirtualBox installed on the remote host are prior to 7.0.20 and therefore affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are...

Oracle Linux 8 / 9 : java-21-openjdk (ELSA-2024-4573)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4573 advisory. 1:21.0.4.0.7-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.4.0.7-1 - Update to jdk-21.0.4+7 GA - Update release notes to 21.0.4+7 -...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2024:2535-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2535-1 advisory. - CVE-2023-28746: Register File Data Sampling XSA-452, bsc1221332 - CVE-2023-46842: HVM hypercalls may trigger Xen bug check XSA-45...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6900-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6900-1 advisory. It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An...

EulerOS 2.0 SP9 : python3 (EulerOS-SA-2024-1943)

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects serve...

EulerOS 2.0 SP9 : tpm2-tss (EulerOS-SA-2024-1976)

According to the versions of the tpm2-tss package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2GENERATEDVALUE...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-1974)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2024-1966)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libtiff 4.5.0 is vulnerable to Buffer Overflow in uvencode when libtiff reads a corrupted little-endian TIFF file and specifies the output to be...

Mageia: Security Advisory (MGASA-2024-0268)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Corretto Java 8.x < 8.422.05.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 8 8.422.05.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2024-Jul-16 advisory. - hotspot/runtime CVE-2024-21131, CVE-2024-21138 - hotspot/compiler CVE-2024-21140, CVE-2024-21147 -...