Photon OS 3.0: Elfutils PHSA-2019-3.0-0021

An update of the elfutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0021. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Hikvision Video Recorders NULL Pointer Dereference (CVE-2024-29947)

There is a NULL pointer dereference vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an attacker may send specially crafted messages to an affected product, causing a process abnormality. This plugin only works with Tenable.ot. Please visit...

Photon OS 1.0: Unzip PHSA-2017-0040

An update of the unzip package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0040. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid202833;...

Hikvision NVRs Devices HTTP Buffer Overflow (CVE-2015-4408)

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the ISAPI issue. This plugin only works with Tenable.ot. Please visit...

Photon OS 3.0: Libarchive PHSA-2019-3.0-0004

An update of the libarchive package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0004. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Siemens SITOP UPS1600 Out-of-bounds Write (CVE-2023-26553)

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

EulerOS 2.0 SP8 : sudo (EulerOS-SA-2024-2055)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Sudo before 1.9.13 does not escape control characters in sudoreplay output.CVE-2023-28487 Sudo before 1.9.13 does not escape control characters in lo...

Siemens SITOP UPS1600 Out-of-Bounds Write (CVE-2023-26552)

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Photon OS 2.0: Libseccomp PHSA-2019-2.0-0149

An update of the libseccomp package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0149. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Cassandra PHSA-2017-0029

An update of the cassandra package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Glibc PHSA-2019-3.0-0005

An update of the glibc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0005. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Libsoup PHSA-2019-2.0-0161

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0161. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Sqlite PHSA-2019-3.0-0012

An update of the sqlite package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0012. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Libtiff PHSA-2019-3.0-0017

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0017. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Perl PHSA-2019-3.0-0003

An update of the perl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0003. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Linux PHSA-2020-3.0-0093

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0093. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Binutils PHSA-2017-0052

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0052. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Hikvision DVRs Devices Buffer Overflow (CVE-2014-4878)

While processing specified RTSP requests, buffer overflow vulnerabilities may occurs for select Hikvision DVRs, which may result in potential service interruption for users. These issues have been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2014-4878, CVE-2014-4879 and CVE-2014-4880...

Hikvision NVRs Devices HTTP Buffer Overflow (CVE-2015-4409)

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the SDK issue. This plugin only works with Tenable.ot. Please visit...

Hikvision IP Cameras Buffer Overflow (CVE-2013-4977)

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 Jan 2013, and possibly other devices, allows remote attackers to cause a denial of service device crash and reboot and possibly execute arbitrary code via a long string in the Range header...