RHEL 8 : libssh (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libssh: possible heap-based buffer overflow when rekeying CVE-2021-3634 Note that Nessus has not tested for this...

RHEL 8 : developer_environment (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Developer environment: Homoglyph characters can lead to trojan source attack CVE-2021-42694 - An issue wa...

RHEL 8 : edk2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - edk2: DxeImageVerificationHandler integer overflow leads to endless loop CVE-2019-14562 Note that Nessus has not...

RHEL 5 : e2fsprogs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - e2fsprogs: Crafted ext4 partition leads to out-of-bounds write CVE-2019-5094 - e2fsprogs: Out-of-bounds...

RHEL 7 : ipxe (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ipxe: Padding oracle attack vulnerability CVE-2022-4087 Note that Nessus has not tested for this issue but has...

RHEL 7 : containernetworking-cni (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - containernetworking-cni: Arbitrary path injection via type field in CNI configuration CVE-2021-20206 Note that Ness...

RHEL 8 : coreos-installer (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - coreos-installer: restrict access permissions on /boot/ignition,/config.ign CVE-2021-3917 Note that Nessus has not...

RHEL 6 : libidn2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libidn2: Integer overflow in punydecode.c/decodedigit CVE-2017-14062 Note that Nessus has not tested for this issue...

RHEL 6 : iptables (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - iptables: buffer overflow in iptables-restore CVE-2019-11360 Note that Nessus has not tested for this issue but has...

RHEL 7 : iptables (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - iptables: buffer overflow in iptables-restore CVE-2019-11360 Note that Nessus has not tested for this issue but has...

RHEL 6 : ntfs-3g (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ntfs-3g: heap-based buffer overflow leads to local root privilege escalation CVE-2019-9755 Note that Nessus has not...

RHEL 5 : yum-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Nessus has n...

RHEL 7 : xmlgraphics-commons (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xmlgraphics-commons: SSRF due to improper input validation by the XMPParser CVE-2020-11988 Note that Nessus has not...

RHEL 5 : vixie-cron (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - vixie-cron: memory consumption DoS via a large crontab file CVE-2019-9705 Note that Nessus has not tested for this...

RHEL 6 : jss (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jss: Memory leak on TLS connections CVE-2022-4132 Note that Nessus has not tested for this issue but has instead...

RHEL 7 : log4j (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - log4j: Socket receiver deserialization vulnerability CVE-2017-5645 Note that Nessus has not tested for this issue b...

RHEL 8 : nodejs-deep-extend (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties CVE-2018-3750 Note that...

RHEL 7 : wawpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 Note that Nessus has not tested for...

RHEL 6 : python-lxml (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 - An iss...

RHEL 8 : gettext (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gettext: double free in defaultaddmessage in read-catalog.c CVE-2018-18751 Note that Nessus has not tested for this...