CentOS 9 : dnsmasq-2.85-13.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the dnsmasq-2.85-13.el9 build changelog. - An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag...

CentOS 9 : mod_auth_mellon-0.17.0-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the modauthmellon-0.17.0-6.el9 build changelog. - Open Redirect vulnerability in logout URLs CVE-2021-3639 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 9 : mod_http2-1.15.19-5.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the modhttp2-1.15.19-5.el9 build changelog. - HTTP request splitting with modrewrite and modproxy CVE-2023-25690 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 9 : vim-8.2.2637-14.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the vim-8.2.2637-14.el9 build changelog. - Stack-based Buffer Overflow in vim prior to 8.2 CVE-2022-0629 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 9 : libxml2-2.9.13-2.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libxml2-2.9.13-2.el9 build changelog. - In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer overflows. This can resu...

CentOS 9 : varnish-6.5.2-2.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the varnish-6.5.2-2.el9 build changelog. - HTTP/2 request smuggling attack via a large Content-Length header for a POST request CVE-2021-36740 Note that Nessus has not tested for this issue...

CentOS 9 : postgresql-13.7-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the postgresql-13.7-1.el9 build changelog. - A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's...

CentOS 9 : python3.9-3.9.14-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the python3.9-3.9.14-1.el9 build changelog. - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap...

CentOS 9 : vim-8.2.2637-16.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-16.el9 build changelog. - Use of Out-of-range Pointer Offset in vim prior CVE-2022-0554 - Heap-based Buffer Overflow occurs in vim CVE-2022-0943 Note that Nessus h...

CentOS 9 : libfastjson-0.99.9-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libfastjson-0.99.9-4.el9 build changelog. - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-127...

CentOS 9 : libX11-1.7.0-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libX11-1.7.0-8.el9 build changelog. - rhbz2213763 CVE-2023-3138 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CentOS 9 : qemu-kvm-6.2.0-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the qemu-kvm-6.2.0-7.el9 build changelog. - The inodeinitowner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group...

CentOS 9 : libxml2-2.9.13-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libxml2-2.9.13-4.el9 build changelog. - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. Thi...

CentOS 9 : microcode_ctl-20220809-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20220809-1.el9 build changelog. - Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of...

CentOS 9 : c-ares-1.19.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the c-ares-1.19.1-1.el9 build changelog. - AutoTools does not set CARESRANDOMFILE during cross compilation rhel-9 CVE-2023-31124 - Buffer Underwrite in aresinetnetpton rhel-9...

CentOS 9 : grafana-9.2.10-4.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the grafana-9.2.10-4.el9 build changelog. - account takeover possible when using Azure AD OAuth CVE-2023-3128 Note that Nessus has not tested for this issue but has instead relied only on t...

CentOS 9 : python3.11-pip-22.3.1-4.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python3.11-pip-22.3.1-4.el9 build changelog. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...

CentOS 9 : gmp-6.2.0-11.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the gmp-6.2.0-11.el9 build changelog. - GNU Multiple Precision Arithmetic Library GMP through 6.2.1 has an mpz/inpraw.c integer overflow and resultant buffer overflow via crafted input,...

CentOS 9 : expat-2.2.10-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the expat-2.2.10-9.el9 build changelog. - Large number of prefixed XML attributes on a single tag can crash libexpat CVE-2021-45960 - Integer overflow in doProlog in xmlparse.c...

CentOS 9 : curl-7.76.1-21.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the curl-7.76.1-21.el9 build changelog. - When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the...