CentOS 9 : libcap-2.48-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libcap-2.48-9.el9 build changelog. - A vulnerability was found in the pthreadcreate function in libcap. This issue may allow a malicious actor to use cause realpthreadcreate to...

CentOS 9 : spamassassin-3.4.6-5.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the spamassassin-3.4.6-5.el9 build changelog. - In Apache SpamAssassin before 3.4.5, malicious rule configuration .cf files can be configured to run system commands without any output or...

CentOS 9 : curl-7.76.1-12.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the curl-7.76.1-12.el9 build changelog. - When sending data to an MQTT server, libcurl = 7.20.0 and = 7.20.0 and = 7.78.0 connects to an IMAP or POP3 server to retrieve data using...

CentOS 9 : cups-2.3.3op2-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the cups-2.3.3op2-16.el9 build changelog. - authorization bypass when using local authorization CVE-2022-26691 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 9 : squid-5.5-3.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the squid-5.5-3.el9 build changelog. - buffer-over-read in SSPI and SMB authentication CVE-2022-41318 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 9 : haproxy-2.4.17-6.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the haproxy-2.4.17-6.el9 build changelog. - An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an...

CentOS 9 : python-lxml-4.6.5-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the python- lxml-4.6.5-1.el9 build changelog. - lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain...

CentOS 9 : haproxy-2.4.7-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the haproxy-2.4.7-1.el9 build changelog. - An issue was discovered in HAProxy 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 before 2.4.3. It does not ensure that the scheme and pat...

CentOS 9 : squid-5.5-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the squid-5.5-2.el9 build changelog. - DoS when processing gopher server responses CVE-2021-46784 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 9 : xterm-366-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the xterm-366-8.el9 build changelog. - xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text...

CentOS 9 : ansible-core-2.14.2-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ansible- core-2.14.2-4.el9 build changelog. - A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclos...

CentOS 9 : fribidi-1.0.10-6.el9.2

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the fribidi-1.0.10-6.el9.2 build changelog. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to...

CentOS 9 : libtpms-0.8.2-0.20210301git729fc6a4ca.el9.6

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libtpms-0.8.2-0.20210301git729fc6a4ca.el9.6 build changelog. - out-of-bounds access when trying to resume the state of the vTPM CVE-2021-3623 Note that Nessus has not tested for this...

CentOS 9 : haproxy-2.4.22-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the haproxy-2.4.22-1.el9 build changelog. - An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8,...

CentOS 9 : tang-11-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the tang-11-1.el9 build changelog. - A flaw exists in tang, a network-based cryptographic binding server, which could result in leak of private keys. CVE-2021-4076 Note that Nessus has not...

CentOS 9 : texlive-20200406-26.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the texlive-20200406-26.el9 build changelog. - LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs...

CentOS 9 : nodejs-16.20.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the nodejs-16.20.1-1.el9 build changelog. - The use of proto in process.mainModule.proto.require can bypass the policy mechanism and require modules outside of the policy.json...

CentOS 9 : xz-5.2.5-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the xz-5.2.5-8.el9 build changelog. - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name for example, a...

CentOS 9 : rust-1.71.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the rust-1.71.1-1.el9 build changelog. - Cargo downloads the Rust project's dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1,...

CentOS 9 : zlib-1.2.11-34.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the zlib-1.2.11-34.el9 build changelog. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant matches. CVE-2018-25032 -...