CentOS 8 : curl (CESA-2020:4599)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4599 advisory. - curl: Incorrect argument check can allow remote servers to overwrite local files CVE-2020-8177 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : libxslt (CESA-2020:4464)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4464 advisory. - libxslt: xsltCheckRead and xsltCheckWrite routines security bypass by crafted URL CVE-2019-11068 - libxslt: use after free in xsltCopyText in...

CentOS 8 : libsndfile (CESA-2020:1636)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1636 advisory. - libsndfile: stack-based buffer overflow in sndfile-deinterleave utility CVE-2018-13139 - libsndfile: buffer over-read in the function i2alawarray in...

CentOS 8 : gnutls (CESA-2020:1998)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1998 advisory. - gnutls: DTLS client hello contains a random value of all zeroes CVE-2020-11501 Note that Nessus has not tested for this issue but has instead relied only on t...

CentOS 8 : libsolv (CESA-2020:4508)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4508 advisory. - libsolv: out-of-bounds read in repodataschema2id in repodata.c CVE-2019-20387 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : thunderbird (CESA-2020:4913)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4913 advisory. - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 Note...

CentOS 8 : librsvg2 (CESA-2020:4709)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4709 advisory. - librsvg: Resource exhaustion via crafted SVG file with nested patterns CVE-2019-20446 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : icu (CESA-2020:0902)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0902 advisory. - ICU: Integer overflow in UnicodeString::doAppend CVE-2020-10531 Note that Nessus has not tested for this issue but has instead relied only on the application'...

CentOS 8 : cryptsetup (CESA-2020:4542)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4542 advisory. - cryptsetup: Out-of-bounds write when validating segments CVE-2020-14382 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : go-toolset:rhel8 (CESA-2020:3665)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3665 advisory. - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash CVE-2020-14040 - golang: data race in certain...

CentOS 8 : python-pillow (CESA-2020:0580)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0580 advisory. - python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service CVE-2019-16865 -...

CentOS 8 : haproxy (CESA-2020:1288)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1288 advisory. - haproxy: malformed HTTP/2 requests can lead to out-of-bounds writes CVE-2020-11100 Note that Nessus has not tested for this issue but has instead relied only ...

CentOS 8 : mariadb:10.3 (CESA-2020:5500)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5500 advisory. - mysql: InnoDB unspecified vulnerability CPU Oct 2019 CVE-2019-2938 - mysql: Server: Optimizer unspecified vulnerability CPU Oct 2019 CVE-2019-2974 -...

CentOS 8 : openjpeg2 (CESA-2020:0570)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0570 advisory. - openjpeg: heap-based buffer overflow in pjt1clbldecodeprocessor in openjp2/t1.c CVE-2020-8112 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : resource-agents (CESA-2020:4605)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4605 advisory. - python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request function CVE-2020-11078 Note that Nessus has not...

CentOS 8 : firefox (CESA-2020:5562)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5562 advisory. - chromium-browser: Uninitialized Use in V8 CVE-2020-16042 - Mozilla: Heap buffer overflow in WebGL CVE-2020-26971 - Mozilla: CSS Sanitizer performed...

CentOS 8 : .NET Core 3.1 (CESA-2020:3422)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3422 advisory. - dotnet: ASP.NET Core Resource Consumption Denial of Service CVE-2020-1597 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : nghttp2 (CESA-2020:2755)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2755 advisory. - nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : mariadb-connector-c (CESA-2020:5503)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5503 advisory. - mariadb-connector-c: Improper validation of content in a OK packet received from server CVE-2020-13249 - mysql: C API unspecified vulnerability CPU J...

CentOS 8 : nodejs:10 (CESA-2020:2848)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2848 advisory. - nghttp2: overly large SETTINGS frames can lead to DoS CVE-2020-11080 - nodejs-minimist: prototype pollution allows adding or modifying properties of...