CentOS 8 : container-tools:rhel8 (CESA-2022:1762)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1762 advisory. - psgo: Privilege escalation in 'podman top' CVE-2022-1227 - prometheus/clientgolang: Denial of service using InstrumentHandlerCounter CVE-2022-21698 -...

CentOS 8 : libsndfile (CESA-2022:1968)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1968 advisory. - libsndfile: heap out-of-bounds read in src/flac.c in flacbuffercopy CVE-2021-4156 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 8 : grub2 (CESA-2022:2110)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2110 advisory. - grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content CVE-2021-3981 Note that Nessus has not tested for this issue but has...

CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2022:1764)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1764 advisory. - python: urllib: Regular expression DoS in AbstractBasicAuthHandler CVE-2021-3733 - python: urllib: HTTP client possible infinite loop on a 100 Contin...

CentOS 8 : fetchmail (CESA-2022:1964)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:1964 advisory. - fetchmail: DoS or information disclosure when logging long messages CVE-2021-36386 - fetchmail: STARTTLS session encryption bypassing CVE-2021-39272...

CentOS 8 : python3 (CESA-2022:1986)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1986 advisory. - python: urllib: HTTP client possible infinite loop on a 100 Continue response CVE-2021-3737 - python: ftplib should not use the host from the PASV...

CentOS 8 : webkit2gtk3 (CESA-2022:1777)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1777 advisory. - webkitgtk: Use-after-free leading to arbitrary code execution CVE-2021-30809 - webkitgtk: Type confusion issue leading to arbitrary code execution...

CentOS 8 : libssh (CESA-2022:2031)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2031 advisory. - libssh: possible heap-based buffer overflow when rekeying CVE-2021-3634 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : grafana (CESA-2022:1781)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1781 advisory. - grafana: directory traversal vulnerability CVE-2021-43813 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : gfbgraph (CESA-2022:1801)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1801 advisory. - gfbgraph: missing TLS certificate verification CVE-2021-39358 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : libreoffice (CESA-2022:1766)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1766 advisory. - libreoffice: Content Manipulation with Double Certificate Attack CVE-2021-25633 - libreoffice: Timestamp Manipulation with Signature Wrapping...

CentOS 8 : bluez (CESA-2022:2081)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2081 advisory. - bluez: memory leak in the SDP protocol CVE-2021-41229 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : c-ares (CESA-2022:2043)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2043 advisory. - c-ares: Missing input validation of host names may lead to domain hijacking CVE-2021-3672 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : mod_auth_openidc:2.3 (CESA-2022:1823)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:1823 advisory. - modauthopenidc: open redirect in oidcvalidateredirecturl CVE-2021-32786 - modauthopenidc: hardcoded static IV and AAD with a reused key in AES GCM...

CentOS 8 : mod_auth_mellon (CESA-2022:1934)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1934 advisory. - modauthmellon: Open Redirect vulnerability in logout URLs CVE-2021-3639 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : squid:4 (CESA-2022:1939)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1939 advisory. - squid: out-of-bounds read in WCCP protocol data may lead to information disclosure CVE-2021-28116 Note that Nessus has not tested for this issue but has inste...

CentOS 8 : libpq (CESA-2022:1891)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1891 advisory. - postgresql: libpq processes unencrypted bytes from man-in-the-middle CVE-2021-23222 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : samba (CESA-2022:2074)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:2074 advisory. - samba: Symlink race error can allow metadata read and modify outside of the exported share CVE-2021-20316 - samba: Information leak via symlinks of...

CentOS 8 : python-lxml (CESA-2022:1932)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1932 advisory. - python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : postgresql:10 (CESA-2022:1830)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1830 advisory. - postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 Note that Nessus has not tested for this issue but has instead relied onl...