13509 matches found
CentOS 8 : nss and nspr (CESA-2019:1951)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1951 advisory. - nss: NULL pointer dereference in several CMS functions resulting in a denial of service CVE-2018-18508 - nss: Out-of-bounds read when importing...
CentOS 8 : pacemaker (CESA-2019:1279)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1279 advisory. - pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc CVE-2018-16877 - pacemaker: Insufficien...
CentOS 8 : systemd (CESA-2019:0990)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:0990 advisory. - systemd: Insufficient input validation in busprocessobject resulting in PID 1 crash CVE-2019-6454 Note that Nessus has not tested for this issue but has inste...
CentOS 8 : openssh (CESA-2019:3702)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3702 advisory. - openssh: scp client improper directory name validation CVE-2018-20685 - openssh: Missing character encoding in progress display allows for spoofing o...
CentOS 8 : virt:rhel (CESA-2019:1268)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:1268 advisory. - libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter CVE-2019-10132 Note that Nessus has not tested for this issue but has...
CentOS 8 : firefox (CESA-2019:3196)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3196 advisory. - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total Security...
CentOS 8 : gvfs (CESA-2019:1517)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:1517 advisory. - gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password CVE-2019-3827 Note th...
CentOS 8 : squid:4 (CESA-2019:3476)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3476 advisory. - squid: XSS via username or auth parameter in cachemgr.cgi CVE-2019-13345 Note that Nessus has not tested for this issue but has instead relied only on the...
CentOS 8 : libyang (CESA-2019:4360)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:4360 advisory. - libyang: stack-based buffer overflow in makecanonical when bits leaf type is used CVE-2019-19333 - libyang: stack-based buffer overflow in...
CentOS 8 : curl (CESA-2019:3701)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3701 advisory. - curl: NTLM type-2 heap out-of-bounds buffer read CVE-2018-16890 - wget: Information exposure in setfilemetadata function in xattr.c CVE-2018-20483 -...
CentOS 8 : squid:4 (CESA-2019:2593)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2593 advisory. - squid: heap-based buffer overflow in HttpHeader::getAuth CVE-2019-12527 Note that Nessus has not tested for this issue but has instead relied only on the...
CentOS 8 : java-1.8.0-openjdk (CESA-2019:3134)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3134 advisory. - OpenJDK: Missing restrictions on use of custom SocketImpl Networking, 8218573 CVE-2019-2945 - OpenJDK: Improper handling of Kerberos proxy credential...
CentOS 8 : gnutls (CESA-2019:3600)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3600 advisory. - gnutls: use-after-free/double-free in certificate verification CVE-2019-3829 - gnutls: invalid pointer access upon receiving async handshake messages...
CentOS 8 : python36:3.6 (CESA-2019:0984)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0984 advisory. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 - python-sqlalchemy: SQL Injection when the groupby...
CentOS 8 : kernel (CESA-2019:1167)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1167 advisory. - hardware: Microarchitectural Store Buffer Data Sampling MSBDS CVE-2018-12126 - hardware: Micro-architectural Load Port Data Sampling - Information Le...
CentOS 8 : elfutils (CESA-2019:3575)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3575 advisory. - elfutils: buffer over-read in the eblobjectnote function in eblobjnote.c in libebl CVE-2019-7146 - elfutils: heap-based buffer over-read in...
CentOS 8 : nss (CESA-2019:4114)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:4114 advisory. - nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSCEncryptUpdate CVE-2019-11745 Note that Nessus has not tested for this...
CentOS 8 : libjpeg-turbo (CESA-2019:3705)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3705 advisory. - libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c leads to denial of service CVE-2018-14498 Note that Nessus has not...
CentOS 8 : evolution (CESA-2019:3699)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3699 advisory. - evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome- online-accounts CVE-2019-3890 Note that Nessus has no...
