Important: xorg-x11-server

Issue Overview: A vulnerability classified as critical was found in X.org Server. Affected by this vulnerability is the function GetCountedString of the file xkb/xkb.c. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of th...

Important: bcel

Issue Overview: Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllab...

Amazon Linux 2 : python-pip (ALAS-2021-1667)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1667 advisory. The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy if an SSLContext isn't given...

Amazon Linux 2 : 389-ds-base (ALAS-2021-1650)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1650 advisory. When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not...

Amazon Linux 2 : samba, --advisory ALAS2-2021-1649 (ALAS-2021-1649)

The version of samba installed on the remote host is prior to 4.10.16-13. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1649 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Amazon Linux 2022 : dbus (ALAS2022-2022-260)

The version of dbus installed on the remote host is prior to 1.12.24-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-260 advisory. - An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An...

Amazon Linux 2 : hivex (ALAS-2021-1658)

The version of hivex installed on the remote host is prior to 1.3.10-6.11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1658 advisory. A flaw was found in the hivex library. It is caused due to a lack of bounds check within the hivexopen function. An attacker coul...

Amazon Linux 2022 : clamav (ALAS2022-2022-229)

The version of clamav installed on the remote host is prior to 0.103.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-229 advisory. - A vulnerability in the OOXML parsing module in Clam AntiVirus ClamAV Software version 0.104.1 and LTS version 0.103.4...

Amazon Linux 2 : python3 (ALAS-2021-1670)

The version of python3 installed on the remote host is prior to 3.7.10-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1670 advisory. A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively ...

Amazon Linux 2 : libxml2 (ALAS-2021-1662)

The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1662 advisory. GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at...

Amazon Linux 2 : python (ALAS-2021-1669)

The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1669 advisory. A flaw was found in Python. The built-in modules httplib and http.client included in Python 2 and Python 3, respectively do not...

Medium: kernel

Issue Overview: A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVMEIOCTLRESET and the NVMEIOCTLSUBSYSRESET through the device file of the driver, resulting in a PCIe link disconnect. CVE-2022-3169 Affected Packages: kernel Note:...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-039 (ALASKERNEL-5.4-2022-039)

The version of kernel installed on the remote host is prior to 5.4.224-128.414. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-039 advisory. A memory overflow vulnerability was found in the Linux kernel's ipc functionality of the memcg subsystem, ...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-024 (ALASKERNEL-5.10-2022-024)

The version of kernel installed on the remote host is prior to 5.10.157-139.675. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-024 advisory. A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive reque...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2022-040)

The version of kernel installed on the remote host is prior to 5.4.226-129.415. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-040 advisory. A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request...

Amazon Linux 2 : kernel (ALAS-2022-1903)

The version of kernel installed on the remote host is prior to 4.14.301-224.520. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1903 advisory. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is...

Amazon Linux AMI : kernel (ALAS-2022-1645)

The version of kernel installed on the remote host is prior to 4.14.299-152.520. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1645 advisory. 2024-07-03: CVE-2022-48651 was added to this advisory. 2024-05-23: CVE-2021-47103 was added to this advisory. In th...

Amazon Linux AMI : git (ALAS-2022-1653)

The version of git installed on the remote host is prior to 2.38.1-1.77. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1653 advisory. Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5,...

Amazon Linux 2022 : ImageMagick (ALAS2022-2022-215)

The version of ImageMagick installed on the remote host is prior to 6.9.12.64-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-215 advisory. - A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, AS...

Amazon Linux 2022 : cyrus-sasl (ALAS2022-2022-234)

The version of cyrus-sasl installed on the remote host is prior to 2.1.27-18. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-234 advisory. - In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE...