CentOS: Security Advisory for iwl1000-firmware (CESA-2021:0339)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 8 : flatpak (CESA-2021:0304)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0304 advisory. - flatpak: sandbox escape via spawn portal CVE-2021-21261 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 7 : qemu-kvm (RHSA-2021:0347)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0347 advisory. - romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an...

CentOS 7 : glibc (RHSA-2021:0348)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0348 advisory. - The iconv feature in the GNU C Library aka glibc or libc6 through 2.32, when processing invalid multi- byte input sequences in the EUC-KR encoding, m...

CentOS 7 : perl (RHSA-2021:0343)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0343 advisory. - Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow...

CentOS 7 : linux-firmware (RHSA-2021:0339)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0339 advisory. - Improper buffer restriction in some IntelR Wireless BluetoothR products before version 21.110 may allow an unauthenticated user to potentially enable escalati...

CentOS 8 : firefox (CESA-2020:1406)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:1406 advisory. - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Out of bounds write in GMPDecodeData...

CentOS 8 : libexif (CESA-2020:4766)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4766 advisory. - libexif: out of bounds write in exif-data.c CVE-2019-9278 - libexif: out of bounds read due to a missing bounds check in exifdatasavedataentry functi...

CentOS 8 : exiv2 (CESA-2020:1577)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1577 advisory. - exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service CVE-2019-9143 - exiv2: null pointer...

CentOS 8 : gnome-software and fwupd (CESA-2020:4436)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4436 advisory. - fwupd: Possible bypass in signature verification CVE-2020-10759 Note that Nessus has not tested for this issue but has instead relied only on the application'...

CentOS 8 : sudo (CESA-2020:1804)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1804 advisory. - sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user CVE-2019-19232 Note that Nessus has not tested for this issue but...

CentOS 8 : dovecot (CESA-2020:3713)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3713 advisory. - dovecot: Resource exhaustion via deeply nested MIME parts CVE-2020-12100 - dovecot: Out of bound reads in dovecot NTLM implementation CVE-2020-12673 ...

CentOS 8 : glibc (CESA-2020:4444)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4444 advisory. - glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions CVE-2020-10029 - glibc: array overflow in backtrace functions f...

CentOS 8 : expat (CESA-2020:4484)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4484 advisory. - expat: large number of colons in input makes parser consume high amount of resources, leading to DoS CVE-2018-20843 - expat: heap-based buffer...

CentOS 8 : libtiff (CESA-2020:4634)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4634 advisory. - libtiff: integer overflow leading to heap-based buffer overflow in tifgetimage.c CVE-2019-17546 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : sqlite (CESA-2020:0273)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0273 advisory. - sqlite: fts3: improve shadow table corruption detection CVE-2019-13734 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : binutils (CESA-2020:1797)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1797 advisory. - binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcppfile.h leads to denial of...

CentOS 8 : evolution (CESA-2020:4649)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4649 advisory. - evolution-data-server: Response injection via STARTTLS in SMTP and POP3 CVE-2020-14928 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : grub2 (CESA-2020:3216)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3216 advisory. - grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 - grub2: grubmalloc does not validate allocation...

CentOS 8 : nginx:1.16 (CESA-2020:5495)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5495 advisory. - nginx: HTTP request smuggling in configurations with URL redirect used as errorpage CVE-2019-20372 Note that Nessus has not tested for this issue but has...