Debian: Security Advisory (DSA-4523-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : kernel-rt (RHSA-2019:2741)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2741 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2019-1913)

According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers...

EulerOS 2.0 SP5 : expat (EulerOS-SA-2019-1896)

According to the version of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - XML External Entity vulnerability in libexpat 2.2.0 and earlier Expat XML Parser Library allows attackers to put the parser in an infinite loop usin...

EulerOS 2.0 SP5 : libpng (EulerOS-SA-2019-1912)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libpng before 1.6.32 does not properly check the length of chunks against the user limit.CVE-2017-12652 Note that Tenable Network Security has...

Security Update for .NET Core SDK (Sep 2019)

The Microsoft .NET Core SDK installation on the remote host is version 2.1.x 2.1.509, or 2.1.606 or 2.1.802, 2.2.x 2.2.109 or 2.2.206 or 2.2.302. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability when .Net Core improperly handles web requests. An...

Google Chrome < 77.0.3865.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 77.0.3865.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201909stable-channel-update-for-desktop advisory. - Use after free in V8 in Google Chrome prior to 77.0.3865.75 allowed a remote...

Photon OS 2.0: Linux PHSA-209-2.0-0175

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-209-2.0-0175. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid128725;...

Security Updates for Exchange (September 2019)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who...

Kubernetes 1.11.x < 1.11.9 / 1.12.x < 1.12.7 / 1.13.x < 1.13.5 kubectl directory traversal

The version of Kubernetes installed on the remote host is version 1.11.x prior to 1.11.9, 1.12.x prior to 1.12.7 or 1.13.x prior to 1.13.5. It is, therefore, affected by a directory traversal vulnerability in the kubectl cp command due to mishandling of symlinks when copying files from a running...

Debian: Security Advisory (DLA-1914-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for golang FEDORA-2019-65db7ad6c7

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 6 : chromium-browser (RHSA-2019:2670)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2670 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 76.0.3809.132. Security Fixes:...

Fedora 29 : 1:nginx (2019-7a0b45fdc4) (0-Length Headers Leak) (Data Dribble) (Resource Loop)

Security fix for CVE-2019-9511, CVE-2019-9513, CVE-2019-9516 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Debian: Security Advisory (DLA-1908-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 29 : python-slixmpp (2019-5a947d8603)

Security fix for CVE-2019-1000021 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Networ...

RHEL 7 : pango (RHSA-2019:2571)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2571 advisory. Pango is a library for laying out and rendering of text, with an emphasis on internationalization. Pango forms the core of text and font handling for...

Scientific Linux Security Update : curl on SL7.x x86_64 (20190806)

Security Fixes : - curl: Heap-based buffer over-read in the curl tool warning formatting CVE-2018-16842 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128212; scriptversion"1.4";...

Scientific Linux Security Update : libwpd on SL7.x x86_64 (20190806)

Security Fixes : - libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp CVE-2018-19208 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128238; scriptversion"1.4";...

Debian: Security Advisory (DLA-1896-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...