SUSE SLED15 / SLES15 Security Update : cups (SUSE-SU-2020:1083-1)

This update for cups fixes the following issues : CVE-2020-3898: Fixed a heap buffer overflow in ppdFindOption bsc1168422. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

Ubuntu 16.04 LTS / 18.04 LTS : Python vulnerabilities (USN-4333-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4333-1 advisory. It was discovered that Python incorrectly stripped certain characters from requests. A remote attacker could use this issue to perform CRLF...

RHEL 7 : java-11-openjdk (RHSA-2020:1509)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1509 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

Photon OS 3.0: Linux PHSA-2020-3.0-0082

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0082. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135871;...

Photon OS 3.0: Httpd PHSA-2020-3.0-0079

An update of the httpd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0079. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135787...

Ubuntu 16.04 LTS / 18.04 LTS : File Roller vulnerability (USN-4332-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4332-1 advisory. It was discovered that File Roller incorrectly handled symlinks. An attacker could possibly use this issue to expose sensitive information. Tenable ha...

Scientific Linux Security Update : gettext on SL7.x x86_64 (20200407)

gettext: double free in defaultaddmessage in read-catalog.c C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135811; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Fedora 31 : libssh (2020-5a77f0d68f)

Fixes CVE-2020-1730 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, In...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2020-1505)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with modrewrite that were intended to be self-referential might be fooled by encoded...

Debian DLA-2179-1 : jackson-databind security update

Following CVEs were reported against the jackson-databind source package : CVE-2020-10968 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider aka bus-proxy. CVE-2020-10969...

Fedora 31 : chromium (2020-161c87cbc7)

Bugfix release from Google for 80.0.3987.162. ---- Update to 80.0.3987.162. Fixes the following CVEs : - CVE-2020-6450 - CVE-2020-6451 - CVE-2020-6452 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Tenable Network Security Tenable.Sc Cross-Site Scripting Vulnerability

Tenable Network Security Tenable.Sc is a vulnerability analysis solution from Tenable Network Security, USA. The product supports real-time vulnerability assessment and management, among other things. A cross-site scripting vulnerability exists in Tenable Network Security Tenable.Sc versions prio...

EulerOS 2.0 SP8 : icu (EulerOS-SA-2020-1506)

According to the version of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer...

CVE-2020-5737

Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation techniques have been implemented to correct this issue...

Cisco IP Phone Harbors Critical RCE Flaw

Cisco is warning of a critical flaw in the web server of its IP phones. If exploited, the flaw could allow an unauthenticated, remote attacker to execute code with root privileges or launch a denial-of-service DoS attack. Proof-of-concept PoC exploit code has been posted on GitHub for the...

EulerOS Virtualization 3.0.2.2 : krb5 (EulerOS-SA-2020-1467)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Double free vulnerability in MIT Kerberos 5 aka krb5 allows attackers to have unspecified impact via vectors involving automatic...

EulerOS Virtualization 3.0.2.2 : libX11 (EulerOS-SA-2020-1471)

According to the versions of the libX11 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the...

Fedora 31 : cacti / cacti-spine (2020-c1745db1aa)

Update to 1.2.11 Release notes: https://www.cacti.net/releasenotes.php?version=1.2.11 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 31 : golang-github-buger-jsonparser (2020-97e8a67945)

Multiple bug fixes, including a fix for CVE-2020-10675 . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 30 : kernel / kernel-headers / kernel-tools (2020-73c00eda1c)

The 5.5.16 stable kernel update contains a number of important fixes across the tree. ---- The 5.5.15 stable kernel update contains a number of important fixes across the tree. ---- The 5.5.13 stable kernel update contains a number of important fixes across the tree. ---- The 5.5.11 stable kernel...