Microsoft: Attackers Exploiting ‘ZeroLogon’ Windows Flaw

Microsoft warned on Wednesday that malicious hackers are exploiting a particularly dangerous flaw in Windows Server systems that could be used to give attackers the keys to the kingdom inside a vulnerable corporate network. Microsofts warning comes just days after the U.S. Department of Homeland...

Fedora 32 : libproxy (2020-2407cb0512)

Fix CVE-2020-25219 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora 32 : 2:samba (2020-0be2776ed3)

Security fixes for CVE-2020-1472 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Photon OS 3.0: Linux PHSA-2020-3.0-0144

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0144. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140785;...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Aptdaemon vulnerability (USN-4537-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4537-1 advisory. Vaisha Bernard discovered that Aptdaemon incorrectly handled the Locale property. A local attacker could use this issue to test for the...

Fedora 32 : zeromq (2020-08402f4071)

Fix for 1876738 and 1876689 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Ubuntu 16.04 LTS : RDFLib vulnerability (USN-4535-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4535-1 advisory. Gabriel Corona discovered that RDFLib did not properly load modules on the command-line. An attacker could possibly use this issue to cause RDFLib to execute...

Ubuntu 18.04 LTS : Netty vulnerabilities (USN-4532-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4532-1 advisory. It was discovered that Netty incorrectly handled certain HTTP headers. By sending an HTTP header with whitespace before the colon, a remote attacker coul...

Ubuntu 18.04 LTS : Debian-LAN vulnerabilities (USN-4530-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4530-1 advisory. Wolfgang Schweer discovered that Debian-LAN did not properly handle ACLs for the Kerberos admin server. A local attacker could possibly use this issue to change t...

Ubuntu 20.04 LTS : LTSP Display Manager vulnerabilities (USN-4533-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4533-1 advisory. Veeti Vetelinen discovered that the LTSP Display Manager ldm incorrectly handled user logins from unsupported shells. A local attacker could possibly use this iss...

Mozilla Firefox < 81.0

The version of Firefox installed on the remote Windows host is prior to 81.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-42 advisory. - When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential...

Fedora 31 : mingw-libxml2 (2020-7dd29dacad)

Add fix for CVE-2020-24977 RHBZ1877788, RHBZ1877789. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

Ubuntu 16.04 LTS : TNEF vulnerabilities (USN-4524-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4524-1 advisory. Paul Dreik discovered that TNEF incorrectly handled filenames. If a user were tricked into opening a specially crafted email attachment, an attacker could possibl...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : pam_tacplus vulnerability (USN-4521-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4521-1 advisory. It was discovered that pamtacplus did not properly manage shared secrets if DEBUG loglevel and journald are used. A remote attacker could...

Fedora 31 : seamonkey (2020-3813e1317b)

Update to 2.53.4 Lightning, Chatzilla and DOM Inspector are now provided in the same way as for themes and language packs ie. as 'application global' addons. Previously, they were copied into the user profile on each update, which led to some issues. The old copies of those addons are automatical...

Google Chrome < 85.0.4183.121 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 85.0.4183.121. It is, therefore, affected by multiple vulnerabilities as referenced in the 202009stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a...

Ubuntu 16.04 LTS : noVNC vulnerability (USN-4522-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4522-1 advisory. It was discovered that noVNC did not properly manage certain messages, resulting in the remote VNC server injecting arbitrary HTML into the noVNC web page. An...

Ubuntu 16.04 LTS : PulseAudio vulnerability (USN-4519-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4519-1 advisory. Ratchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5...

Ubuntu 16.04 LTS : Exim SpamAssassin vulnerability (USN-4520-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4520-1 advisory. It was discovered that Exim SpamAssassin does not properly handle configuration strings. An attacker could possibly use this issue to execute arbitrary code...

Fedora 31 : kernel (2020-5920a7a0b2)

The 5.8.9 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...