CentOS 8 : sqlite (CESA-2020:1810)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1810 advisory. - sqlite: fts3: improve shadow table corruption detection CVE-2019-13752 - sqlite: fts3: incorrectly removed corruption check CVE-2019-13753 - sqlite:...

CentOS 8 : dotnet3.1 (CESA-2021:0095)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0095 advisory. - dotnet: ASP.NET Core Callbacks outside of locks cause Krestel deadlock when using HTTP2 CVE-2021-1723 Note that Nessus has not tested for this issue but has...

CentOS 8 : pcre2 (CESA-2020:4539)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory. - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : subversion:1.10 (CESA-2020:4712)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4712 advisory. - subversion: remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev' CVE-2018-11782 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : postgresql:10 (CESA-2020:5567)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5567 advisory. - postgresql: Reconnection can downgrade connection security settings CVE-2020-25694 - postgresql: Multiple features escape security restricted operati...

CentOS 8 : firefox (CESA-2020:3557)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3557 advisory. - Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer CVE-2020-12422 - Mozilla: WebRTC permission prompt could have been bypassed by a...

CentOS 8 : frr (CESA-2020:4619)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4619 advisory. - frr: default permission issue eases information leaks CVE-2020-12831 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : python-pip (CESA-2020:4432)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4432 advisory. - python-pip: directory traversal in downloadhttpurl function in src/pip/internal/download.py CVE-2019-20916 Note that Nessus has not tested for this issue but...

CentOS 8 : firefox (CESA-2020:5237)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5237 advisory. - Mozilla: Variable time processing of cross-origin images during drawImage calls CVE-2020-16012 - Mozilla: Parsing mismatches could confuse and bypass...

CentOS 8 : fontforge (CESA-2020:4844)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4844 advisory. - fontforge: SFDGetFontMetaData insufficient CVE-2020-5395 backport CVE-2020-25690 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : java-1.8.0-openjdk (CESA-2020:0202)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0202 advisory. - OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport Serialization, 8224909 CVE-2020-2583 - OpenJDK: Improper checks ...

CentOS 8 : samba (CESA-2020:1878)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1878 advisory. - samba: Combination of parameters and permissions can allow user to escape from the share path definition CVE-2019-10197 - samba: smb client vulnerabl...

CentOS 8 : php:7.3 (CESA-2020:3662)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3662 advisory. - php: Out-of-bounds read due to integer overflow in iconvmimedecodeheaders CVE-2019-11039 - php: Buffer over-read in exifreaddata CVE-2019-11040 - php...

CentOS 8 : freerdp and vinagre (CESA-2020:4647)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4647 advisory. - freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 - freerdp: Out of bound read in updaterecv could result in a crash...

CentOS 8 : java-1.8.0-openjdk (CESA-2020:1515)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1515 advisory. - OpenJDK: Misplaced regular expression syntax error check in RegExpScanner Scripting, 8223898 CVE-2020-2754 - OpenJDK: Incorrect handling of empty...

CentOS 8 : squid:4 (CESA-2020:2041)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2041 advisory. - squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow CVE-2019-12519 - squid: parsing of header...

CentOS 8 : java-11-openjdk (CESA-2020:0128)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0128 advisory. - OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport Serialization, 8224909 CVE-2020-2583 - OpenJDK: Improper checks ...

CentOS 8 : firefox (CESA-2020:2828)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2828 advisory. - Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64 CVE-2020-12417 - Mozilla: Information disclosure due to manipulated U...

CentOS 8 : thunderbird (CESA-2020:0577)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0577 advisory. - Mozilla: Message ID calculation was based on uninitialized data CVE-2020-6792 - Mozilla: Out-of-bounds read when processing certain email messages...

CentOS 8 : unbound (CESA-2020:2416)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2416 advisory. - unbound: amplification of an incoming query into a large number of queries directed to a target CVE-2020-12662 - unbound: infinite loop via malformed...