CentOS 8 : dnsmasq (CESA-2021:0150)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:0150 advisory. - dnsmasq: heap-based buffer overflow in sortrrset when DNSSEC is enabled CVE-2020-25681 - dnsmasq: buffer overflow in extractname due to missing lengt...

CentOS 8 : kernel (CESA-2019:1479)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1479 advisory. - Kernel: tcp: integer overflow while processing SACK blocks allows remote denial of service CVE-2019-11477 - Kernel: tcp: excessive resource consumpti...

CentOS 8 : thunderbird (CESA-2019:1308)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1308 advisory. - mozilla: Cross-origin theft of images with ImageBitmapRenderingContext CVE-2018-18511 - Mozilla: Use-after-free in XMLHttpRequest CVE-2019-11691 -...

CentOS 8 : pki-deps:10.6 (CESA-2019:2720)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2720 advisory. - jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution CVE-2019-12384 Note that Nessus ha...

CentOS 8 : dbus (CESA-2019:3707)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3707 advisory. - dbus: DBusServer DBUSCOOKIESHA1 authentication bypass CVE-2019-12749 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : gdb (CESA-2019:3352)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3352 advisory. - libiberty: Memory leak in demangletemplate function resulting in a denial of service CVE-2018-20657 Note that Nessus has not tested for this issue but has...

CentOS 8 : container-tools:1.0 (CESA-2019:3494)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3494 advisory. - containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure CVE-2019-10214 - QEM...

CentOS 8 : kernel (CESA-2019:2827)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2827 advisory. - kernel: vhost-net: guest to host kernel escape during migration CVE-2019-14835 Note that Nessus has not tested for this issue but has instead relied only on t...

CentOS 8 : poppler (CESA-2019:2713)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2713 advisory. - poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc CVE-2018-18897 - poppler: NULL pointer dereference in the XRef::getEntry in...

CentOS 8 : 389-ds:1.4 (CESA-2019:3401)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3401 advisory. - 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default CVE-2018-10871 - 389-ds-base: using dscreate in verbose...

CentOS 8 : pango (CESA-2019:2582)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2582 advisory. - pango: pangolog2visgetembeddinglevels heap-based buffer overflow CVE-2019-1010238 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 8 : python3 (CESA-2019:3520)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3520 advisory. - python: NULL pointer dereference using a specially crafted X509 certificate CVE-2019-5010 - python: CRLF injection via the query part of the url pass...

CentOS 8 : virt-manager (CESA-2019:3464)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3464 advisory. - virt-install: unattended option leaks password via command line argument CVE-2019-10183 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : openwsman (CESA-2019:0972)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:0972 advisory. - openwsman: Disclosure of arbitrary files outside of the registered URIs CVE-2019-3816 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : fribidi (CESA-2019:4361)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:4361 advisory. - fribidi: buffer overflow in fribidigetparembeddinglevelsex in lib/fribidi-bidi.c leading to denial of service and possible code execution CVE-2019-18397 Note...

CentOS 8 : firefox (CESA-2019:4111)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:4111 advisory. - Mozilla: Buffer overflow in plain text serializer CVE-2019-17005 - Mozilla: Use-after-free in worker destruction CVE-2019-17008 - Mozilla:...

CentOS 8 : ghostscript (CESA-2019:2591)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2591 advisory. - ghostscript: Safer mode bypass by .forceput exposure in .pdfhookDSCCreator 701445 CVE-2019-14811 - ghostscript: Safer mode bypass by .forceput exposu...

CentOS 8 : glibc (CESA-2019:3513)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3513 advisory. - glibc: getaddrinfo should reject IP addresses with trailing characters CVE-2016-10739 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : nghttp2 (CESA-2019:2692)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2692 advisory. - HTTP/2: large amount of data requests leads to denial of service CVE-2019-9511 - HTTP/2: flood using PRIORITY frames results in excessive resource...

CentOS 8 : kernel (CESA-2019:2411)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2411 advisory. - kernel: hw: Spectre SWAPGS gadget vulnerability CVE-2019-1125 - kernel: broken permission and object lifetime handling for PTRACETRACEME CVE-2019-132...