Amazon Linux 2 : libwmf, --advisory ALAS2-2020-1533 (ALAS-2020-1533)

The version of libwmf installed on the remote host is prior to 0.2.8.4-44. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1533 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C...

Amazon Linux 2 : qt5-qtbase (ALAS-2020-1543)

The version of qt5-qtbase installed on the remote host is prior to 5.9.2-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1543 advisory. 2023-08-03: CVE-2020-24742 was added to this advisory. Files placed by attacker can influence the working directory and...

Amazon Linux 2 : glibc (ALAS-2020-1517)

The version of glibc installed on the remote host is prior to 2.26-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1517 advisory. In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IP...

Amazon Linux 2 : squid (ALAS-2020-1548)

The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1548 advisory. A flaw was found in squid. Due to incorrect data validation, a HTTP Request Smuggling attack against HTTP and HTTPS traffi...

Amazon Linux 2 : libexif (ALAS-2020-1523)

The version of libexif installed on the remote host is prior to 0.6.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1523 advisory. In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of...

Amazon Linux 2 : freerdp (ALAS-2020-1516)

The version of freerdp installed on the remote host is prior to 2.1.1-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1516 advisory. In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients...

Amazon Linux AMI : php72, php73 (ALAS-2020-1440)

The version of php72 installed on the remote host is prior to 7.2.34-1.26. The version of php73 installed on the remote host is prior to 7.3.23-1.29. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1440 advisory. In PHP versions 7.2.x below 7.2.34, 7.3.x belo...

Amazon Linux 2 : edk2 (ALAS-2020-1510)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1510 advisory. Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to...

Amazon Linux 2 : poppler (ALAS-2020-1541)

The version of poppler installed on the remote host is prior to 0.26.5-43. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1541 advisory. A divide-by-zero error was found in the way Poppler handled certain PDF files. A remote attacker could exploit this flaw by...

Amazon Linux 2 : doxygen (ALAS-2020-1508)

The version of doxygen installed on the remote host is prior to 1.8.5-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1508 advisory. Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scriptin...

Amazon Linux 2 : mariadb (ALAS-2020-1537)

The version of mariadb installed on the remote host is prior to 5.5.68-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1537 advisory. Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Pluggable Auth. Supported versions tha...

Amazon Linux 2 : libxslt (ALAS-2020-1535)

The version of libxslt installed on the remote host is prior to 1.1.28-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1535 advisory. libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit...

Amazon Linux 2 : libcroco (ALAS-2020-1521)

The version of libcroco installed on the remote host is prior to 0.6.12-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1521 advisory. A stack overflow flaw was found in libcroco. A service using libcroco's CSS parser could be crashed by a local, authenticated...

Amazon Linux AMI : mysql57 (ALAS-2020-1439)

The version of mysql57 installed on the remote host is prior to 5.7.31-1.16. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1439 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are...

Amazon Linux 2 : freeradius (ALAS-2020-1515)

The version of freeradius installed on the remote host is prior to 3.0.13-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1515 advisory. It was discovered freeradius does not correctly configure logrotate, allowing a local attacker who already has contro...

Amazon Linux 2 : openldap (ALAS-2020-1539)

The version of openldap installed on the remote host is prior to 2.4.44-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1539 advisory. In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of...

Amazon Linux 2 : NetworkManager (ALAS-2020-1498)

The version of NetworkManager installed on the remote host is prior to 1.18.8-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1498 advisory. A flaw was found in nmcli, where the command-line interface to the NetworkManager did not accept the 802-1x.ca-path and...

Amazon Linux 2 : hunspell (ALAS-2020-1518)

The version of hunspell installed on the remote host is prior to 1.3.2-16. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1518 advisory. Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. CVE-2019-16707 Tenable has...

Amazon Linux 2 : ImageMagick (ALAS-2020-1497)

The version of ImageMagick installed on the remote host is prior to 6.9.10.68-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1497 advisory. ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c,...

Amazon Linux 2 : expat (ALAS-2020-1513)

The version of expat installed on the remote host is prior to 2.1.0-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1513 advisory. It was discovered that the setElementTypePrefix function incorrectly extracted XML namespace prefixes. By tricking an...