Ubuntu 12.04 LTS : libotr vulnerabilities (USN-2091-1)

This update disables the OTR v1 protocol to prevent protocol downgrade attacks. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Oracle Linux 6 : libvirt (ELSA-2014-0103)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0103 advisory. - qemu: Do not access stale data in virDomainBlockStats CVE-2013-6458 - qemu: Avoid using stale data in virDomainGetBlockInfo CVE-2013-6458 - qemu: Fix...

Fedora 19 : libXfont-1.4.5-5.fc19 (2014-0467)

Fix CVE-2013-6462, potential stack overflow, see http://lists.x.org/archives/xorg/2014-January/056265.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Fedora 20 : drupal7-7.26-1.fc20 (2014-1015)

Fix for SA-CORE-2014-001 : https://drupal.org/drupal-7.26-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 19 : drupal7-7.26-1.fc19 (2014-0983)

Fix for SA-CORE-2014-001 : https://drupal.org/drupal-7.26-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Note that Tenable Network Security has extracted the preceding description block directly from the...

Ubuntu 12.10 / 13.04 / 13.10 : openjdk-7 vulnerabilities (USN-2089-1)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. CVE-2013-3829, CVE-2013-5783, CVE-2013-5804, CVE-2014-0411 Several vulnerabilities were discovered in the...

Fedora 19 : qt-4.8.5-15.fc19 (2013-22932)

Qt Project Security Advisory: XML Entity Expansion Denial of Service CVE-2013-4549 See also http://lists.qt-project.org/pipermail/announce/2013-December/000036.ht ml In addition, this update : - adds support for the aarch64 architecture, - fixes QTBUG-35459, a too low character limit for XML...

ColdFusion Extended Support Version Detection (credentialed check)

According to its version, there is at least one installation of ColdFusion that is potentially under Extended Support. Note that the Extended Support program requires a vendor contract. Extended Support provides upgrades and security fixes for two years after regular support ends. C Tenable Netwo...

Fedora 20 : kernel-3.12.8-300.fc20 (2014-1062)

The 3.12.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : kernel-3.12.8-200.fc19 (2014-1072)

The 3.12.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : graphviz vulnerabilities (USN-2083-1)

It was discovered that Graphviz incorrectly handled memory in the yyerror function. If a user were tricked into opening a specially crafted dot file, an attacker could cause Graphviz to crash, or possibly execute arbitrary code. CVE-2014-0978, CVE-2014-1235 It was discovered that Graphviz...

Fedora 20 : java-1.7.0-openjdk-1.7.0.60-2.4.4.0.fc20 (2014-0885)

Security update to icedtea 2.4.4 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2014-0026)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0026 advisory. 1.7.0.51-2.4.4.1.0.1.el65 - Update DISTRONAME in specfile 1.7.0.51-2.4.4.1.el6 - restored java7 provides - bumped release builds exists - Resolves:...

Fedora 19 : java-1.7.0-openjdk-1.7.0.60-2.4.4.0.fc19 (2014-0945)

Security update to icedtea 2.4.4 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

MySQL 5.5 < 5.5.34 Multiple Vulnerabilities

The version of MySQL installed on the remote host is 5.5.x prior to 5.5.34. It is, therefore, potentially affected by vulnerabilities in the following components : - InnoDB - Locking - Partition - Optimizer C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71973;...

Fedora 19 : kernel-3.12.7-200.fc19 (2014-0684)

The 3.12.7 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 18 : asterisk-11.7.0-1.fc18 (2013-24142)

Sat Dec 28 2013 Jeffrey Ollie - 11.7.0-1 : - The Asterisk Development Team has announced the release of Asterisk 11.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk Note that Tenable Network Security has extracted the preceding...

Fedora 20 : asterisk-11.7.0-1.fc20 (2013-24108)

Sat Dec 28 2013 Jeffrey Ollie - 11.7.0-1 : - The Asterisk Development Team has announced the release of Asterisk 11.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk Note that Tenable Network Security has extracted the preceding...

Solaris 10 (sparc) : 143749-02 (deprecated)

Messaging Server 7u2-12.01: core patch. Date this patch was last updated by Sun : Sep/21/10 This plugin has been deprecated and either replaced with individual 143749 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

Ubuntu 13.04 : linux vulnerabilities (USN-2073-1)

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload UFO. An unprivileged local user could exploit this flaw to cause a denial of service system crash or possibly gain administrative privileges. CVE-2013-4470 Multiple integer overflow flaws were discovered in the...