CentOS 8 : tpm2-tools (CESA-2021:4413)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4413 advisory. - tpm2-tools: fixed AES wrapping key in tpm2import CVE-2021-3565 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : file-roller (CESA-2021:4179)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4179 advisory. - file-roller: directory traversal via directory symlink pointing outside of the target directory incomplete fix for CVE-2020-11736 CVE-2020-36314 Note that...

CentOS 8 : glib2 (CESA-2021:4385)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4385 advisory. - glib: gfilereplace with GFILECREATEREPLACEDESTINATION creates empty target for dangling symlink CVE-2021-28153 - glib2: Possible privilege escalation...

CentOS 8 : openjpeg2 (CESA-2021:4251)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4251 advisory. - openjpeg: division-by-zero in functions pinextpcrl, pinextcprl, and pinextrpcl in openmj2/pi.c CVE-2018-20845 - openjpeg: integer overflow in functio...

CentOS 8 : libX11 (CESA-2021:4326)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4326 advisory. - libX11: missing request length checks CVE-2021-31535 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : json-c (CESA-2021:4382)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4382 advisory. - json-c: integer overflow and out-of-bounds write via a large JSON file CVE-2020-12762 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : linuxptp (CESA-2021:4321)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4321 advisory. - linuxptp: wrong length of one-step follow-up in transparent clock CVE-2021-3571 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : grilo (CESA-2021:4339)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4339 advisory. - grilo: missing TLS certificate verification CVE-2021-39365 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : rust-toolset:rhel8 (CESA-2021:4270)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4270 advisory. - rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string CVE-2021-29922 Note that Nessus has not tested for this issue b...

CentOS 8 : resource-agents (CESA-2021:4139)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4139 advisory. - python-pygments: Infinite loop in SML lexer may lead to DoS CVE-2021-20270 - python-pygments: ReDoS in multiple lexers CVE-2021-27291 Note that Nessu...

CentOS 8 : spamassassin (CESA-2021:4315)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4315 advisory. - spamassassin: Malicious rule configuration files can be configured to run system commands CVE-2020-1946 Note that Nessus has not tested for this issue but has...

CentOS 8 : pcre (CESA-2021:4373)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4373 advisory. - pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 CVE-2019-20838 - pcre: Integer overflow when...

CentOS 8 : libjpeg-turbo (CESA-2021:4288)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4288 advisory. - libjpeg-turbo: Stack-based buffer overflow in the transform component CVE-2020-17541 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : glibc (CESA-2021:4358)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4358 advisory. - glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c CVE-2021-27645 - glibc: mqnotify does not handle separately allocated thread...

CentOS 8 : GNOME (CESA-2021:4381)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4381 advisory. - webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution CVE-2020-13558 - LibRaw: Stack buffer overflow in...

CentOS 8 : thunderbird (CESA-2021:4130)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4130 advisory. - Mozilla: iframe sandbox rules did not apply to XSLT stylesheets CVE-2021-38503 - Mozilla: Use-after-free in file picker dialog CVE-2021-38504 -...

CentOS 8 : firefox (CESA-2021:4123)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4123 advisory. - Mozilla: iframe sandbox rules did not apply to XSLT stylesheets CVE-2021-38503 - Mozilla: Use-after-free in file picker dialog CVE-2021-38504 -...

CentOS 8 : kernel (CESA-2021:4056)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4056 advisory. - kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free CVE-2020-36385 - kernel: out-of-bounds write due to a heap buffer overflo...

CentOS 8 : flatpak (CESA-2021:4042)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4042 advisory. - flatpak: Sandbox bypass via recent VFS-manipulating syscalls CVE-2021-41133 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : curl (CESA-2021:4059)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4059 advisory. - curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols CVE-2021-22946 - curl: Server responses received before STARTTLS...