CentOS 8 : virt:rhel (CESA-2020:0279)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0279 advisory. - hw: TSX Transaction Asynchronous Abort TAA CVE-2019-11135 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : libvncserver (CESA-2020:0920)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0920 advisory. - libvncserver: HandleCursorShape integer overflow resulting in heap-based buffer overflow CVE-2019-15690 - libvncserver: integer overflow and heap-bas...

CentOS 8 : ipmitool (CESA-2020:0981)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0981 advisory. - ipmitool: Buffer overflow in readfruareasection function in lib/ipmifru.c CVE-2020-5208 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : targetcli (CESA-2020:4697)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4697 advisory. - targetcli: weak permissions for /etc/target and backup files CVE-2020-13867 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2020:4676)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4676 advisory. - QEMU: Slirp: use-after-free during packet reassembly CVE-2019-15890 - libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent...

CentOS 8 : firefox (CESA-2020:2379)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2379 advisory. - Mozilla: Use-after-free in SharedWorkerService CVE-2020-12405 - Mozilla: JavaScript Type confusion with NativeTypes CVE-2020-12406 - Mozilla: Memory...

CentOS 8 : targetcli (CESA-2020:1933)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1933 advisory. - targetcli: world writable /var/run/targetclid.sock allows unprivileged user to execute commands CVE-2020-10699 Note that Nessus has not tested for this issue...

CentOS 8 : container-tools:2.0 (CESA-2020:1931)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1931 advisory. - buildah: Crafted input tar file may lead to local file overwrite during image build process CVE-2020-10696 Note that Nessus has not tested for this issue but...

CentOS 8 : firefox (CESA-2020:4317)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4317 advisory. - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 Note...

CentOS 8 : e2fsprogs (CESA-2020:1913)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1913 advisory. - e2fsprogs: Crafted ext4 partition leads to out-of-bounds write CVE-2019-5094 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : nodejs:10 (CESA-2020:0579)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0579 advisory. - nodejs: Remotely trigger an assertion on a TLS server with a malformed certificate string CVE-2019-15604 - nodejs: HTTP request smuggling using...

CentOS 8 : kernel (CESA-2020:4286)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4286 advisory. - kernel: net: bluetooth: type confusion while processing AMP packets CVE-2020-12351 - kernel: net: bluetooth: information leak when processing certain...

CentOS 8 : dnsmasq (CESA-2020:1715)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1715 advisory. - dnsmasq: memory leak in the createhelper function in /src/helper.c CVE-2019-14834 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 8 : edk2 (CESA-2020:4805)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4805 advisory. - edk2: memory leak in ArpOnFrameRcvdDpc CVE-2019-14559 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : GNOME (CESA-2020:4451)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4451 advisory. - webkitgtk: Incorrect state management leading to universal cross-site scripting CVE-2019-8625, CVE-2019-8813, CVE-2020-3867 - webkitgtk: Multiple...

CentOS 8 : dbus (CESA-2020:3014)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3014 advisory. - dbus: denial of service via file descriptor leak CVE-2020-12049 Note that Nessus has not tested for this issue but has instead relied only on the application'...

CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2020:4847)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4847 advisory. - jquery: Cross-site scripting via cross-domain ajax requests CVE-2015-9251 - bootstrap: XSS in the data-target attribute CVE-2016-10735 - bootstrap:...

CentOS 8 : curl (CESA-2020:1792)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1792 advisory. - curl: TFTP receive heap buffer overflow in tftpreceivepacket function CVE-2019-5436 - curl: double free due to subsequent call of realloc CVE-2019-54...

CentOS 8 : fontforge (CESA-2020:1921)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1921 advisory. - fontforge: out-of-bounds write in SFDGetFontMetaData function in sfd.c CVE-2020-5395 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : kernel (CESA-2020:2102)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2102 advisory. - Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic CVE-2020-10711 - Kernel: s390: page...