Ubuntu 16.04 LTS / 18.04 LTS : HAproxy vulnerability (USN-4174-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4174-1 advisory. It was discovered that HAproxy incorrectly handled certain HTTP requests. An attacker could possibly use this issue to a privilege escalation Request...

Ubuntu 16.04 LTS / 18.04 LTS : Firefox regressions (USN-4165-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4165-2 advisory. USN-4165-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the...

Solaris 10 (sparc) : 125719-60

X11 6.8.0: Xorg server patch. Date this patch was last updated by Sun : Nov/04/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid130509; scriptversion"1.4";...

Solaris 10 (sparc) : 119059-74

X11 6.6.2: Xsun patch. Date this patch was last updated by Sun : Nov/04/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid130508; scriptversion"1.3"; scriptcvsdate"Date: 2020/01/07...

Fedora 30 : varnish (2019-a2110fa094)

New upstream release. A security release, fixing VSV00004. References : - Changelog: https://github.com/varnishcache/varnish-cache/blob/6.3/d oc/changes.rstvarnish-cache-631-2019-10-21 - VSV00004: https://varnish-cache.org/security/VSV00004.html Note that Tenable Network Security has extracted th...

Fedora 29 : 1:java-latest-openjdk (2019-d81be00640)

This update brings security updates for OpenJDK 13 and updates it to most current version 13.0.1.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

Fedora 31 : 12:aspell (2019-1e0f7ac968)

Rebase to upstream version 0.60.8, that fixes potential security flaw. ChangeLog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 30 : python3 (2019-aba3cca74a)

Python 3.7.5 is the fifth and most recent maintenance release of Python 3.7. Includes a security fix for CVE-2019-16056. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean an...

Fedora 31 : nspr / nss (2019-4175e7cb56)

Updates the nspr and nss packages to upstream NSPR 4.23 and NSS 3.47 respectively. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.47releasenotes Note that Tenab...

SUSE SLES12 Security Update : samba (SUSE-SU-2019:2875-1)

This update for samba fixes the following issues : CVE-2019-10218: Fixed a path injection caused by filenames containing path separators bso14071 bsc1144902. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Tenable Nessus < 8.7.0 DoS (TNS-2019-06)

According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 8.7.0. It is, therefore, affected by a denial of service vulnerability due to improper validation of specific imported scan types. An authenticated, remote attacker can exploit this...

Fedora 29 : sudo (2019-72755db9c7)

Rebase to 1.8.28 - Fixed CVE-2019-14287 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Debian DLA-1978-1 : python-ecdsa security update

It was discovered that python-ecdsa, a cryptographic signature library for Python, did not correctly verify DER encoded signatures. Malformed signatures could lead to unexpected exceptions and in some cases did not raise any exception. For Debian 8 'Jessie', these problems have been fixed in...

MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Exploit

Exploit Title: MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Exploit Author: Jacob Baines Vendor Homepage: https://mikrotik.com/ Software Link: https://mikrotik.com/download Version: 6.45.6 Stable and below or 6.44.5 Long-term and below Tested on: Various x86 and MIPSBE RouterOS installs CVE :...

Fedora 31 : golang (2019-4593120208)

Security fix for CVE-2019-17596 Rebase to 1.13.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Ubuntu 18.04 LTS : Libidn2 vulnerabilities (USN-4168-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4168-1 advisory. It was discovered that Libidn2 incorrectly handled certain inputs. A attacker could possibly use this issue to impersonate domains. CVE-2019-12290 It was...

Ubuntu 16.04 LTS / 18.04 LTS : Apport vulnerabilities (USN-4171-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4171-1 advisory. Kevin Backhouse discovered Apport would read its user-controlled settings file as the root user. This could be used by a local attacker to...

RHEL 7 : Ansible (RHSA-2019:3201)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3201 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH a...

Fedora 31 : chromium (2019-9a5e81214f)

Chromium update to 77.0.3865.120. For the upstream announcement see https://chromereleases.googleblog.com/2019/10/stable-channel-update-fo r-desktop.html. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 30 : 14:libpcap (2019-eaa681d33e)

Security fix for CVE-2018-16301, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format ...