CentOS 8 : idm:DL1 (CESA-2021:1983)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1983 advisory. - slapi-nis: NULL dereference DoS with specially crafted Binding DN CVE-2021-3480 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : libxml2 (CESA-2021:1597)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1597 advisory. - libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal in entities.c CVE-2020-24977 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : wpa_supplicant (CESA-2021:1686)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:1686 advisory. - wpasupplicant: P2P group information processing vulnerability CVE-2021-0326 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : opensc (CESA-2021:1600)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1600 advisory. - opensc: heap-based buffer overflow in scoberthurreadfile CVE-2020-26570 - opensc: stack-based buffer overflow in scpkcs15emugemsafeGPKinit...

CentOS 8 : exiv2 (CESA-2021:1758)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1758 advisory. - exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check CVE-2019-17402 Note that Nessus has not tested for this issue but has...

CentOS 8 : spice (CESA-2021:1924)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1924 advisory. - spice: Client initiated renegotiation denial of service CVE-2021-20201 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : unbound (CESA-2021:1853)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1853 advisory. - unbound: integer overflow in the regional allocator via regionalalloc CVE-2019-25032 - unbound: integer overflow in sldnsstr2wirednamebuforigin can...

CentOS 8 : sane-backends (CESA-2021:1744)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1744 advisory. - sane-backends: NULL pointer dereference in saneiepsonnetread function CVE-2020-12867 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : libvncserver (CESA-2021:1811)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1811 advisory. - libvncserver: uninitialized memory contents are vulnerable to Information Leak CVE-2018-21247 - libvncserver: buffer overflow in...

CentOS 8 : evolution (CESA-2021:1752)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1752 advisory. - evolution-data-server: NULL pointer dereference related to imapxfreecapability and imapxconnecttoserver CVE-2020-16117 Note that Nessus has not tested for thi...

CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2021:1775)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1775 advisory. - resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class CVE-2020-1695 Note that Nessus has not tested for this issue but has...

CentOS 8 : cpio (CESA-2021:1582)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:1582 advisory. - cpio: improper input validation when writing tar header fields leads to unexpected tar generation CVE-2019-14866 Note that Nessus has not tested for this issu...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2021:1762)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1762 advisory. - libvirt: double free in qemuAgentGetInterfaces in qemuagent.c CVE-2020-25637 - QEMU: heap buffer overflow in iscsiaioioctlcb in block/iscsi.c may lea...

CentOS 8 : grafana (CESA-2021:1859)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1859 advisory. - grafana: XSS via a query alias for the Elasticsearch and Testdata datasource CVE-2020-24303 - crewjam/saml: authentication bypass in saml...

CentOS 8 : brotli (CESA-2021:1702)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1702 advisory. - brotli: buffer overflow when input chunk is larger than 2GiB CVE-2020-8927 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : spice-vdagent (CESA-2021:1791)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1791 advisory. - spice-vdagent: memory DoS via arbitrary entries in activexfers hash table CVE-2020-25650 - spice-vdagent: possible file transfer DoS and information...

CentOS 8 : trousers (CESA-2021:1627)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1627 advisory. - trousers: fails to drop the root gid privilege when no longer needed CVE-2020-24330 - trousers: tss user still has read and write access to the...

CentOS 8 : python3 (CESA-2021:1633)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1633 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python: Unsafe use of eval on data retrieved via HTTP in the...

CentOS 8 : userspace graphics, xorg-x11, and mesa (CESA-2021:1804)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1804 advisory. - libX11: Heap overflow in the X input method client CVE-2020-14344 - xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14345 -...

CentOS 8 : ghostscript (CESA-2021:1852)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1852 advisory. - ghostscript: use-after-free vulnerability in igcrelocstructptr could result in DoS CVE-2020-14373 - ghostscript: buffer overflow in lprnisblack in...