MiracleLinux 9 : dbus-broker-28-5.1.el9 (AXSA:2022-4072:01)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4072:01 advisory. dbus-broker: a stack buffer over-read if a malicious Exec line is supplied CVE-2022-31212 dbus-broker: null pointer reference when supplying a...

MiracleLinux 9 : openssl-3.2.2-6.el9.ML.1 (AXSA:2024-9111:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9111:08 advisory. openssl: Unbounded memory growth with session handling in TLSv1.3 CVE-2024-2511 openssl: Excessive time spent checking DSA keys and parameters...

MiracleLinux 7 : rh-php73-php-7.3.20-1.el7 (AXSA:2020-958:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-958:01 advisory. php: DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte CVE-2019-11045 php: Information...

MiracleLinux 8 : vim-8.0.1763-19.el8.2 (AXSA:2022-3678:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3678:04 advisory. vim: heap buffer overflow CVE-2022-1621 vim: buffer over-read CVE-2022-1629 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : SDL-1.2.15-38.el8 (AXSA:2021-1321:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1321:01 advisory. SDL: buffer over-read in IMAADPCMnibble in audio/SDLwave.c CVE-2019-7572 SDL: heap-based buffer overflow in MSADPCMdecode in audio/SDLwave.c...

Demon Routing Protocol Daemon RCE

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260119-7343

A vulnerability in the drivers/misc/fastrpc.c component of the Linux operating system kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

MiracleLinux 7 : tcpdump-4.9.2-4.el7.1 (AXSA:2020-040:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-040:01 advisory. tcpdump: Stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap CVE-2018-19519 Tenable has extracted the preceding description block direct...

ROS-20260119-7363

A vulnerability in the cacheinfo component of the Linux operating system kernel is related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

Mageia: Security Advisory (MGASA-2026-0010)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 8 : tcpdump-4.9.2-6.el8 (AXSA:2020-315:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-315:02 advisory. tcpdump: Stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap CVE-2018-19519 Tenable has extracted the preceding description block direct...

CVE-2025-60003

A Buffer Over-read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When an affected device receives a BGP update with a set of specific optional transitive...

OESA-2026-1184 util-linux security update

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function,...

OESA-2026-1112 libpcap security update

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string...

OESA-2026-1109 libpcap security update

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string...

Adobe Substance 3D Modeler Buffer Overflow Information Disclosure

The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to disclose confidential information...

Adobe Substance 3D Modeler Buffer Overflow Information Disclosure

The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to disclose confidential information...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000676 advisory. The ieee80211radiotapiteratorinit function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004185)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004185 advisory. A buffer over-read flaw was found in RH kernel versions before 5.0 in cryptoauthencextractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module,...

Cisco IOS XE Software Unified Threat Defense Snort Intrusion Prevention System Engine Multiple Vulnerabilities (cisco-sa-snort3-dcerpc-vulns-J9HNF4tH)

According to its self-reported version, Cisco IOS-XE Software is affected by the following vulnerabilities: - A vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restar...