CentOS 8 : python-pillow (CESA-2021:4149)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4149 advisory. - python-pillow: Buffer over-read in PCX image reader CVE-2020-35653 - python-pillow: Buffer over-read in SGI RLE image reader CVE-2020-35655 -...

CentOS 8 : binutils (CESA-2021:4364)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4364 advisory. - binutils: Race window allows users to own arbitrary files CVE-2021-20197 - binutils: Heap-based buffer overflow in bfdgetlsigned32 in libbfd.c becaus...

CentOS 8 : compat-exiv2-026 (CESA-2021:4319)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4319 advisory. - exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS CVE-2021-31292 - exiv2: Out-of-bounds read in...

CentOS 8 : container-tools:3.0 (CESA-2021:4222)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4222 advisory. - buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 Note that Nessus has not tested for this issue but has...

CentOS 8 : zziplib (CESA-2021:4316)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4316 advisory. - zziplib: infinite loop via the return value of zzipfileread as used in unzzipcatfile CVE-2020-18442 Note that Nessus has not tested for this issue but has...

CentOS 8 : pcre (CESA-2021:4373)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4373 advisory. - pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 CVE-2019-20838 - pcre: Integer overflow when...

CentOS 8 : GNOME (CESA-2021:4381)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4381 advisory. - webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution CVE-2020-13558 - LibRaw: Stack buffer overflow in...

CentOS 8 : linuxptp (CESA-2021:4321)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4321 advisory. - linuxptp: wrong length of one-step follow-up in transparent clock CVE-2021-3571 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : go-toolset:rhel8 (CESA-2021:4156)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4156 advisory. - golang: net: lookup functions may return invalid host names CVE-2021-33195 - golang: net/http/httputil: ReverseProxy forwards connection headers if...

CentOS 8 : dnf (CESA-2021:4464)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4464 advisory. - libdnf: Signature verification bypass via signature placed in the main RPM header CVE-2021-3445 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : file-roller (CESA-2021:4179)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4179 advisory. - file-roller: directory traversal via directory symlink pointing outside of the target directory incomplete fix for CVE-2020-11736 CVE-2020-36314 Note that...

CentOS 8 : rust-toolset:rhel8 (CESA-2021:4270)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4270 advisory. - rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string CVE-2021-29922 Note that Nessus has not tested for this issue b...

CentOS 8 : resource-agents (CESA-2021:4139)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4139 advisory. - python-pygments: Infinite loop in SML lexer may lead to DoS CVE-2021-20270 - python-pygments: ReDoS in multiple lexers CVE-2021-27291 Note that Nessu...

CentOS 8 : libsolv (CESA-2021:4408)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4408 advisory. - libsolv: heap-based buffer overflow in testcaseread in src/testcase.c CVE-2021-3200 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : dnsmasq (CESA-2021:4153)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4153 advisory. - dnsmasq: fixed outgoing port used when --server is used with an interface name CVE-2021-3448 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : grilo (CESA-2021:4339)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4339 advisory. - grilo: missing TLS certificate verification CVE-2021-39365 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2021:4162)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4162 advisory. - python-psutil: Double free because of refcount mishandling CVE-2019-18874 - python: Unsafe use of eval on data retrieved via HTTP in the test suite...

CentOS 8 : libgcrypt (CESA-2021:4409)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4409 advisory. - libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpipowm CVE-2021-33560 Note that Nessus h...

CentOS 8 : httpd:2.4 (CESA-2021:4537)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4537 advisory. - httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5 CVE-2021-20325 Note that Nessus has not tested for this issue but...

CentOS 8 : babel (CESA-2021:4201)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4201 advisory. - python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code CVE-2021-42771 Note that Nessus has not tested...