CentOS 8 : edk2 (CESA-2021:4198)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4198 advisory. - openssl: integer overflow in CipherUpdate CVE-2021-23840 - openssl: NULL pointer dereference in X509issuerandserialhash CVE-2021-23841 Note that Ness...

CentOS 8 : squid:4 (CESA-2021:4292)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4292 advisory. - squid: denial of service in URN processing CVE-2021-28651 - squid: denial of service issue in Cache Manager CVE-2021-28652 - squid: denial of service...

CentOS 8 : mutt (CESA-2021:4181)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4181 advisory. - mutt: Incorrect handling of invalid initial IMAP responses could lead to an authentication attempt over unencrypted connection CVE-2020-28896 - mutt:...

CentOS 8 : exiv2 (CESA-2021:4173)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4173 advisory. - exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata CVE-2021-29457 - exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode...

CentOS 8 : jasper (CESA-2021:4235)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4235 advisory. - jasper: Heap-based buffer overflow in cpcreate in jpcenc.c CVE-2020-27828 - jasper: Out of bounds read in jp2decode in jp2dec.c CVE-2021-26926 -...

CentOS 8 : container-tools:rhel8 (CESA-2021:4154)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4154 advisory. - containers/storage: DoS via malicious image CVE-2021-20291 - buildah: Host environment variables leaked in build container when using chroot isolatio...

CentOS 8 : rpm (CESA-2021:4489)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4489 advisory. - rpm: missing length checks in hdrblobInit CVE-2021-20266 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : autotrace (CESA-2021:4519)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4519 advisory. - autotrace: integer overflow in input-bmp.c CVE-2019-19004 - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact...

CentOS 8 : qt5 (CESA-2021:4172)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4172 advisory. - qt: Out of bounds read in function QRadialFetchSimd from crafted svg file CVE-2021-3481 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2021:4160)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4160 advisory. - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS CVE-2021-28957 - python-ipaddress: Improper input validation ...

CentOS 8 : cups (CESA-2021:4393)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4393 advisory. - cups: access to uninitialized buffer in ipp.c CVE-2020-10001 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : kexec-tools (CESA-2021:4404)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4404 advisory. - kexec-tools: incorrect permissions on kdump dmesg file CVE-2021-20269 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : lua (CESA-2021:4510)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4510 advisory. - lua: segmentation fault in getlocal and setlocal functions in ldebug.c CVE-2020-24370 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : python-pip (CESA-2021:4455)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4455 advisory. - python-pip: Incorrect handling of unicode separators in git references CVE-2021-3572 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2021:4191)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4191 advisory. - QEMU: net: e1000e: use-after-free while sending packets CVE-2020-15859 - QEMU: slirp: invalid pointer initialization may lead to information disclosu...

CentOS 8 : openssl (CESA-2021:4424)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4424 advisory. - openssl: integer overflow in CipherUpdate CVE-2021-23840 - openssl: NULL pointer dereference in X509issuerandserialhash CVE-2021-23841 Note that Ness...

CentOS 8 : httpd:2.4 (CESA-2021:4257)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4257 advisory. - httpd: modsession: NULL pointer dereference when parsing Cookie header CVE-2021-26690 - httpd: Unexpected URL matching with 'MergeSlashes OFF'...

CentOS 8 : mingw-glib2 (CESA-2021:4526)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4526 advisory. - glib: integer overflow in gbytearraynewtake function when called with a buffer of 4GB or more on a 64-bit platform CVE-2021-27218 - glib: integer...

CentOS 8 : lasso (CESA-2021:4325)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4325 advisory. - lasso: XML signature wrapping vulnerability when parsing SAML responses CVE-2021-28091 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : libtiff (CESA-2021:4241)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4241 advisory. - libtiff: Memory allocation failure in tiff2rgba CVE-2020-35521, CVE-2020-35522 - libtiff: Integer overflow in tifgetimage.c CVE-2020-35523 - libtiff:...