Debian DLA-2195-1 : w3m security update

Two issues have been found in w3m, WWW browsable pager with excellent tables/frames support. One issue is related to a stack overflow, the other one is a fix for a NULL pointer dereference. Brief introduction CVE-2018-6196 Description CVE-2018-6197 Description For Debian 8 'Jessie', these problem...

EulerOS Virtualization for ARM 64 3.0.2.0 : libdb (EulerOS-SA-2020-1535)

According to the version of the libdb packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain...

EulerOS Virtualization for ARM 64 3.0.2.0 : edk2 (EulerOS-SA-2020-1574)

According to the versions of the edk2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the socket.recvfrominto function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3....

Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerability (USN-4347-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4347-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website...

Fedora 31 : python-bleach (2020-e1fa96c506)

Update to version 3.1.4, an upstream security release. See the upstream changelog for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

SUSE SLES15 Security Update : salt (SUSE-SU-2020:1151-1)

This update for salt fixes the following issues : Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 30 : python-bleach (2020-827b677e15)

Update to version 3.1.4, an upstream security release. See the upstream changelog for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1141-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a stack...

Fedora 31 : pxz (2020-07fcbfddbd)

Update to GIT 20200421 - Added patch against race condition in setting permissions on output file 1182024 - Added patch to revert environment redirect allowing export XZOPT='-9' or similar Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 30 : libxml2 (2020-0c71c00af4)

Update to 2.9.10 and fix CVE-2019-19956, CVE-2019-20388 and CVE-2020-7595 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Google Chrome < 81.0.4044.129 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 81.0.4044.129. It is, therefore, affected by multiple vulnerabilities as referenced in the 202004stable-channel-update-for-desktop27 advisory. - Use after free in task scheduling in Google Chrome prior to 81.0.4044.129...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:1150-1)

This update for salt fixes the following issues : Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as...

Ubuntu 16.04 LTS / 18.04 LTS : Mailman vulnerabilities (USN-4348-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4348-1 advisory. It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this to issue execute arbitrary scripts or...

Fedora 30 : 1:openssl (2020-da2d1ef2d7)

Update to version 1.1.1g from upstream fixing possible remote DoS security issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

SUSE SLED15 / SLES15 Security Update : apache2 (SUSE-SU-2020:1126-1)

This update for apache2 fixes the following issues : CVE-2020-1934: modproxyftp may use uninitialized memory when proxying to a malicious FTP server bsc1168404. CVE-2020-1927: modrewrite configurations vulnerable to open redirect bsc1168407. CVE-2020-1938: modproxyajp: Add 'secret' parameter to...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4345-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4345-1 advisory. Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondar...

Ubuntu 20.04 LTS : Linux kernel vulnerability (USN-4343-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4343-1 advisory. Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A loc...

RHEL 8 : kernel (RHSA-2020:1966)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1966 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: blktrace: Protect q-blktrace with RCU...

Druva inSync Windows Client 6.5.2 Privilege Escalation

Exploit Title: Druva inSync Windows Client 6.5.2 - Local Privilege Escalation Date: 2020-04-28 Exploit Author: Chris Lyne Vendor Homepage: druva.com Software Link: https://downloads.druva.com/downloads/inSync/Windows/6.5.2/inSync6.5.2r99097.msi Version: 6.5.2 Tested on: Windows 10 CVE :...

Tenable Virtual Appliance Unsupported Detection

The remote host is a Tenable Virtual Appliance which is no longer supported as of April 30, 2020. Lack of support implies that no security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security, Inc...