CentOS 8 : binutils (CESA-2020:4465)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4465 advisory. - binutils: denial of service via crafted ELF file CVE-2019-17450 Note that Nessus has not tested for this issue but has instead relied only on the application'...

CentOS 8 : qt5-qtbase and qt5-qtwebsockets (CESA-2020:4690)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4690 advisory. - qt: XML entity expansion vulnerability CVE-2015-9541 - qt5-qtwebsockets: websocket implementation allows only limited size for frames and messages...

CentOS 8 : tigervnc (CESA-2020:1497)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1497 advisory. - tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder CVE-2019-15691 - tigervnc: Heap buffer overflow triggered from...

CentOS 8 : cloud-init (CESA-2020:3050)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:3050 advisory. - cloud-init: default configuration disabled deletion of SSH host keys CVE-2018-10896 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : librabbitmq (CESA-2020:4445)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4445 advisory. - librabbitmq: integer overflow in amqphandleinput in amqpconnection.c leads to heap-based buffer overflow CVE-2019-18609 Note that Nessus has not tested for th...

CentOS 8 : container-tools:1.0 (CESA-2020:1360)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1360 advisory. - QEMU: slirp: OOB buffer access while emulating tcp protocols in tcpemu CVE-2020-7039 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : grafana (CESA-2020:1659)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1659 advisory. - grafana: incorrect access control in snapshot HTTP API leads to denial of service CVE-2019-15043 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : dotnet5.0 (CESA-2021:0094)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:0094 advisory. - dotnet: ASP.NET Core Callbacks outside of locks cause Krestel deadlock when using HTTP2 CVE-2021-1723 Note that Nessus has not tested for this issue but has...

CentOS 8 : python27:2.7 (CESA-2020:1605)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1605 advisory. - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header CVE-2018-18074 - python-urllib3: Cross-host redirect does not remov...

CentOS 8 : libexif (CESA-2020:2550)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2550 advisory. - libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS CVE-2020-13112 Note that Nessus has not tested for th...

CentOS 8 : container-tools:rhel8 (CESA-2020:1650)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1650 advisory. - runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation CVE-2019-19921 - containers/image: Container...

CentOS 8 : gd (CESA-2020:4659)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4659 advisory. - gd: NULL pointer dereference in gdImageClone CVE-2018-14553 - gd: Heap-based buffer overflow in gdImageColorMatch in gdcolormatch.c CVE-2019-6977 - g...

CentOS 8 : go-toolset:rhel8 (CESA-2020:0329)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0329 advisory. - golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling CVE-2019-16276 - golang: invalid public key causes...

CentOS 8 : liblouis (CESA-2020:1708)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1708 advisory. - liblouis: Segmentation fault in logging.c:loulogPrint CVE-2018-11577 - liblouis: Stack-based buffer overflow in function includeFile in...

CentOS 8 : thunderbird (CESA-2020:1495)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:1495 advisory. - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 ...

CentOS 8 : evolution (CESA-2020:4649)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4649 advisory. - evolution-data-server: Response injection via STARTTLS in SMTP and POP3 CVE-2020-14928 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : firefox (CESA-2020:3241)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3241 advisory. - Mozilla: Potential leak of redirect targets when loading scripts in a worker CVE-2020-15652 - Mozilla: Memory safety bugs fixed in Firefox 79 and...

CentOS 8 : cyrus-imapd (CESA-2020:4655)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4655 advisory. - cyrus-imapd: privilege escalation in HTTP request CVE-2019-18928 - cyrus-imapd: lmtpd component created mailboxes with administrator privileges if th...

CentOS 8 : container-tools:1.0 (CESA-2020:1926)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1926 advisory. - buildah: Crafted input tar file may lead to local file overwrite during image build process CVE-2020-10696 Note that Nessus has not tested for this issue but...

CentOS 8 : wavpack (CESA-2020:1581)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1581 advisory. - wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 - wawpack: Out-of-bounds read in WavpackVerifySingleBlock function lead...