CentOS 7 : hivex (RHSA-2021:2318)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2318 advisory. - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could...

CentOS 7 : kernel (RHSA-2021:2314)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2314 advisory. - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may...

CentOS 7 : glib2 (RHSA-2021:2147)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2147 advisory. - An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an...

CentOS 8 : polkit (CESA-2021:2238)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2238 advisory. - polkit: local privilege escalation using polkitsystembusnamegetcredssync CVE-2021-3560 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : firefox (CESA-2021:2233)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:2233 advisory. - Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 CVE-2021-29967 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : glib2 (CESA-2021:2170)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2170 advisory. - glib: integer overflow in gbytesnew function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits CVE-2021-27219 Note that Nessus has not teste...

CentOS 8 : pki-core:10.6 (CESA-2021:2235)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2235 advisory. - pki-server: Dogtag installer pkispawn logs admin credentials into a world-readable log file CVE-2021-3551 Note that Nessus has not tested for this issue but h...

CentOS 8 : dotnet3.1 (CESA-2021:2037)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2037 advisory. - dotnet: .NET Core single-file application privilege escalation CVE-2021-31204 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : dotnet5.0 (CESA-2021:2036)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2036 advisory. - dotnet: .NET Core single-file application privilege escalation CVE-2021-31204 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : container-tools:rhel8 (CESA-2021:1796)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1796 advisory. - golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference CVE-2020-29652 - podman: Remote traffic to rootless containers...

CentOS 8 : redis:6 (CESA-2021:2034)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2034 advisory. - redis: Integer overflow via STRALGO LCS command CVE-2021-29477 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : python-lxml (CESA-2021:1898)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:1898 advisory. - python-lxml: mXSS due to the use of improper parser CVE-2020-27783 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : python38:3.8 (CESA-2021:1879)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1879 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python-lxml: mXSS due to the use of improper parser...

CentOS 8 : go-toolset:rhel8 (CESA-2021:1746)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1746 advisory. - golang: crypto/elliptic: incorrect operations on the P-224 curve CVE-2021-3114 - golang: cmd/go: packages using cgo can cause arbitrary code executio...

CentOS 8 : glibc (CESA-2021:1585)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1585 advisory. - glibc: iconv program can hang when invoked with the -c option CVE-2016-10228 - glibc: buffer over-read in iconv when processing invalid multi-byte...

CentOS 8 : kernel (CESA-2021:1578)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1578 advisory. - kernel: memory leak in sofsetgetlargectrldata function in sound/soc/sof/ipc.c CVE-2019-18811 - kernel: use-after-free caused by a malicious USB devic...

CentOS Web Panel Command Injection Vulnerability

CentOS Web Panel CWP is a free web hosting control panel from the Control Web Panel community. A security vulnerability exists in CentOS Web Panel that originates in the Unprivileged User Portal section that is affected by a command injection vulnerability that can be exploited by an attacker to...

CentOS 8 : evolution (CESA-2021:1752)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1752 advisory. - evolution-data-server: NULL pointer dereference related to imapxfreecapability and imapxconnecttoserver CVE-2020-16117 Note that Nessus has not tested for thi...

CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2021:1775)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1775 advisory. - resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class CVE-2020-1695 Note that Nessus has not tested for this issue but has...

CentOS 8 : raptor2 (CESA-2021:1842)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1842 advisory. - raptor: heap-based buffer overflows due to an error in calculating the maximum nspace declarations for the XML writer CVE-2017-18926 - raptor2:...