CentOS 7 : xorg-x11-server (RHSA-2021:2033)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2033 advisory. - A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The...

CentOS 7 : postgresql (RHSA-2021:1512)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1512 advisory. - A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5...

CentOS 7 : qemu-kvm (RHSA-2021:2322)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2322 advisory. - ideatapicmdreplyend in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated. CVE-2020-29443 Note that Nessus...

CentOS 7 : qt5-qtimageformats (RHSA-2021:2328)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2328 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16. CVE-2018-25011 - A use of uninitialized value was found in...

CentOS 7 : samba (RHSA-2021:2313)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2313 advisory. - A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw...

CentOS 7 : kernel (RHSA-2021:2314)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2314 advisory. - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel version 5.5 may...

CentOS 7 : hivex (RHSA-2021:2318)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2318 advisory. - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen function. An attacker could...

CentOS 7 : glib2 (RHSA-2021:2147)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2147 advisory. - An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an...

CentOS 8 : polkit (CESA-2021:2238)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2238 advisory. - polkit: local privilege escalation using polkitsystembusnamegetcredssync CVE-2021-3560 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : firefox (CESA-2021:2233)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:2233 advisory. - Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 CVE-2021-29967 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : glib2 (CESA-2021:2170)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2170 advisory. - glib: integer overflow in gbytesnew function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits CVE-2021-27219 Note that Nessus has not teste...

CentOS 8 : pki-core:10.6 (CESA-2021:2235)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2235 advisory. - pki-server: Dogtag installer pkispawn logs admin credentials into a world-readable log file CVE-2021-3551 Note that Nessus has not tested for this issue but h...

CentOS 8 : dotnet3.1 (CESA-2021:2037)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2037 advisory. - dotnet: .NET Core single-file application privilege escalation CVE-2021-31204 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : dotnet5.0 (CESA-2021:2036)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2036 advisory. - dotnet: .NET Core single-file application privilege escalation CVE-2021-31204 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : redis:6 (CESA-2021:2034)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2034 advisory. - redis: Integer overflow via STRALGO LCS command CVE-2021-29477 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : python-lxml (CESA-2021:1898)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:1898 advisory. - python-lxml: mXSS due to the use of improper parser CVE-2020-27783 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : container-tools:rhel8 (CESA-2021:1796)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1796 advisory. - golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference CVE-2020-29652 - podman: Remote traffic to rootless containers...

CentOS 8 : python38:3.8 (CESA-2021:1879)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1879 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python-lxml: mXSS due to the use of improper parser...

CentOS 8 : go-toolset:rhel8 (CESA-2021:1746)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1746 advisory. - golang: crypto/elliptic: incorrect operations on the P-224 curve CVE-2021-3114 - golang: cmd/go: packages using cgo can cause arbitrary code executio...

CentOS 8 : glibc (CESA-2021:1585)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1585 advisory. - glibc: iconv program can hang when invoked with the -c option CVE-2016-10228 - glibc: buffer over-read in iconv when processing invalid multi-byte...