CentOS 8 : opensc (CESA-2020:4483)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4483 advisory. - opensc: Out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c CVE-2019-15945 - opensc: Out-of-bounds access of an ASN.1...

CentOS 8 : dovecot (CESA-2020:4763)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4763 advisory. - dovecot: command followed by sufficient number of newlines leads to use-after-free CVE-2020-10958 - dovecot: sending mail with empty quoted localpart...

CentOS 8 : java-11-openjdk (CESA-2020:4305)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4305 advisory. - OpenJDK: High memory usage during deserialization of Proxy class with many interfaces Serialization, 8236862 CVE-2020-14779 - OpenJDK: Credentials se...

CentOS 8 : thunderbird (CESA-2021:0089)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:0089 advisory. - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk CVE-2020-16044 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : pcre2 (CESA-2020:4539)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory. - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : libssh (CESA-2020:4545)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4545 advisory. - libssh: unsanitized location in scp could lead to unwanted command execution CVE-2019-14889 - libssh: denial of service when handling AES-CTR or DES...

CentOS 8 : go-toolset:rhel8 (CESA-2020:5493)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5493 advisory. - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS CVE-2020-24553 - golang: math/big: panic during recursive...

CentOS 8 : python-pip (CESA-2020:4432)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4432 advisory. - python-pip: directory traversal in downloadhttpurl function in src/pip/internal/download.py CVE-2019-20916 Note that Nessus has not tested for this issue but...

CentOS 8 : zsh (CESA-2020:0903)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0903 advisory. - zsh: insecure dropping of privileges when unsetting PRIVILEGED option CVE-2019-20044 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : cyrus-sasl (CESA-2020:4497)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4497 advisory. - cyrus-sasl: denial of service in sasladdstring function CVE-2019-19906 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : python-pip (CESA-2020:1916)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1916 advisory. - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header CVE-2018-18074 - python-urllib3: Cross-host redirect does not remov...

CentOS 8 : libtiff (CESA-2020:1688)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1688 advisory. - libtiff: integer overflow in TIFFCheckMalloc and TIFFCheckRealloc in tifaux.c CVE-2019-14973 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : varnish:6 (CESA-2020:4756)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4756 advisory. - varnish: denial of service handling certain crafted HTTP/1 requests CVE-2019-15892 - varnish: not clearing pointer between two client requests leads ...

CentOS 8 : spice and spice-gtk (CESA-2020:4186)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4186 advisory. - spice: multiple buffer overflow vulnerabilities in QUIC decoding code CVE-2020-14355 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : libcroco (CESA-2020:3654)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3654 advisory. - libcroco: Stack overflow in function crparserparseanycore in cr-parser.c CVE-2020-12825 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : unbound (CESA-2020:1716)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1716 advisory. - unbound: command injection with data coming from a specially crafted IPSECKEY answer CVE-2019-18934 Note that Nessus has not tested for this issue but has...

CentOS 8 : openssl (CESA-2020:4514)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4514 advisory. - openssl: Integer overflow in RSAZ modular exponentiation on x8664 CVE-2019-1551 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : memcached (CESA-2020:1576)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1576 advisory. - memcached: null-pointer dereference in lru mode and lru tempttl causing denial of service CVE-2019-11596 Note that Nessus has not tested for this issue but ha...

CentOS 8 : dpdk (CESA-2020:4806)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4806 advisory. - dpdk: librtevhost Integer overflow in vhostusersetlogbase CVE-2020-10722 - dpdk: librtevhost Integer truncation in vhostusercheckandallocqueuepair...

CentOS 8 : grafana (CESA-2020:4682)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4682 advisory. - grafana: XSS vulnerability via a column style on the Dashboard Table Panel screen CVE-2018-18624 - grafana: arbitrary file read via MySQL data source...