CentOS 8 : container-tools:4.0 (CESA-2022:7469)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7469 advisory. - cri-o: memory exhaustion on the node when access to the kube api CVE-2022-1708 - golang: crash in a golang.org/x/crypto/ssh server CVE-2022-27191 -...

CentOS 8 : openjpeg2 (CESA-2022:7645)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7645 advisory. - openjpeg: segmentation fault in opj2decompress due to uninitialized pointer CVE-2022-1122 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : php:7.4 (CESA-2022:7628)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7628 advisory. - php: Special character breaks path in xml parsing CVE-2021-21707 - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 -...

CentOS 8 : fribidi (CESA-2022:7514)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7514 advisory. - fribidi: Stack based buffer overflow CVE-2022-25308 - fribidi: Heap-buffer-overflow in fribidicaprtltounicode CVE-2022-25309 - fribidi: SEGV in...

CentOS 8 : dnsmasq (CESA-2022:7633)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7633 advisory. - dnsmasq: Heap use after free in dhcp6norelay CVE-2022-0934 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : flatpak-builder (CESA-2022:7458)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7458 advisory. - flatpak: flatpak-builder --mirror-screenshots-url can access files outside the build directory CVE-2022-21682 Note that Nessus has not tested for this issue b...

CentOS 8 : xorg-x11-server and xorg-x11-server-Xwayland (CESA-2022:7583)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7583 advisory. - xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access CVE-2022-2319 - xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo...

CentOS 8 : libldb (CESA-2022:7730)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7730 advisory. - samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request CVE-2022-32746 Note that Nessus has not tested for this...

CentOS 8 : redis:6 (CESA-2022:7541)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7541 advisory. - redis: Code injection via Lua script execution environment CVE-2022-24735 - redis: Malformed Lua script can crash Redis CVE-2022-24736 Note that Ness...

CentOS 8 : mutt (CESA-2022:7640)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:7640 advisory. - mutt: buffer overflow in uudecoder function CVE-2022-1328 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : gstreamer1-plugins-good (CESA-2022:7618)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7618 advisory. - gstreamer-plugins-good: Use-after-free in matroska demuxing CVE-2021-3497 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : e2fsprogs (CESA-2022:7720)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7720 advisory. - e2fsprogs: out-of-bounds read/write via crafted filesystem CVE-2022-1304 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : php:8.0 (CESA-2022:7624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7624 advisory. - php: Use after free due to phpfilterfloat failing for ints CVE-2021-21708 - php: Uninitialized array in pgqueryparams leading to RCE CVE-2022-31625...

CentOS 8 : rsync (CESA-2022:7793)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7793 advisory. - zlib: heap-based buffer over-read and overflow in inflate in inflate.c via a large gzip header extra field CVE-2022-37434 Note that Nessus has not tested for...

CentOS 8 : dovecot (CESA-2022:7623)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7623 advisory. - dovecot: Privilege escalation when similar master and non-master passdbs are used CVE-2022-30550 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : grafana (CESA-2022:7519)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7519 advisory. - sanitize-url: XSS due to improper sanitization in sanitizeUrl function CVE-2021-23648 - golang: net/http: improper sanitization of Transfer-Encoding...

CentOS 8 : pcs (CESA-2022:7447)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7447 advisory. - pcs: improper authentication via PAM CVE-2022-1049 Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...

CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2022:7581)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7581 advisory. - python: mailcap: findmatch function does not sanitize the second argument CVE-2015-20107 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : httpd:2.4 (CESA-2022:7647)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7647 advisory. - httpd: modlua: Use of uninitialized value of in r:parsebody CVE-2022-22719 - httpd: core: Possible buffer overflow with very large or unlimited...

CentOS 8 : openblas (CESA-2022:7639)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7639 advisory. - lapack: Out-of-bounds read in larrv CVE-2021-4048 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...