CentOS 8 : irssi (CESA-2020:1616)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1616 advisory. - irssi: use after free when sending SASL login to server CVE-2019-13045 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : libssh (CESA-2020:4545)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4545 advisory. - libssh: unsanitized location in scp could lead to unwanted command execution CVE-2019-14889 - libssh: denial of service when handling AES-CTR or DES...

CentOS 8 : openssl (CESA-2020:4514)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4514 advisory. - openssl: Integer overflow in RSAZ modular exponentiation on x8664 CVE-2019-1551 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : kernel (CESA-2020:0339)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0339 advisory. - kernel: heap overflow in mwifiexsetuaprates function of Marvell Wifi Driver leading to DoS CVE-2019-14814 - kernel: heap-overflow in...

CentOS 8 : firefox (CESA-2020:5237)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5237 advisory. - Mozilla: Variable time processing of cross-origin images during drawImage calls CVE-2020-16012 - Mozilla: Parsing mismatches could confuse and bypass...

CentOS 8 : linux-firmware (CESA-2020:5479)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5479 advisory. - hardware: buffer overflow in bluetooth firmware CVE-2020-12321 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : ibus and glib2 (CESA-2020:1880)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1880 advisory. - ibus: missing authorization allows local attacker to access the input bus of another user CVE-2019-14822 Note that Nessus has not tested for this issue but ha...

CentOS 8 : frr (CESA-2020:4619)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4619 advisory. - frr: default permission issue eases information leaks CVE-2020-12831 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : fontforge (CESA-2020:1921)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1921 advisory. - fontforge: out-of-bounds write in SFDGetFontMetaData function in sfd.c CVE-2020-5395 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : thunderbird (CESA-2020:2046)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2046 advisory. - Mozilla: Use-after-free during worker shutdown CVE-2020-12387 - Mozilla: Arbitrary local file access with 'Copy as cURL' CVE-2020-12392 - Mozilla:...

CentOS 8 : freerdp (CESA-2020:2407)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2407 advisory. - freerdp: Out-of-bounds write in cryptorsacommon in libfreerdp/crypto/crypto.c CVE-2020-13398 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : thunderbird (CESA-2020:5398)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:5398 advisory. - Mozilla: Stack overflow due to incorrect parsing of SMTP server response codes CVE-2020-26970 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : fontforge (CESA-2020:4844)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4844 advisory. - fontforge: SFDGetFontMetaData insufficient CVE-2020-5395 backport CVE-2020-25690 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : container-tools:rhel8 (CESA-2020:4694)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4694 advisory. - containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters CVE-2020-10749 - QEMU: slirp: networking out-of-bound...

CentOS 8 : kernel (CESA-2020:1769)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1769 advisory. - kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence CVE-2018-16871 - Kernel: net: using kernel space address bits to deri...

CentOS 8 : pcre2 (CESA-2020:4539)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory. - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : go-toolset:rhel8 (CESA-2020:5493)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5493 advisory. - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS CVE-2020-24553 - golang: math/big: panic during recursive...

CentOS 8 : memcached (CESA-2020:1576)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1576 advisory. - memcached: null-pointer dereference in lru mode and lru tempttl causing denial of service CVE-2019-11596 Note that Nessus has not tested for this issue but ha...

CentOS 8 : mod_auth_openidc:2.3 (CESA-2020:3032)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3032 advisory. - modauthopenidc: Open redirect in logout url when using URLs with leading slashes CVE-2019-14857 - modauthopenidc: Open redirect issue exists in URLs...

CentOS 8 : microcode_ctl (CESA-2020:2431)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2431 advisory. - hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 - hw: Vector Register Data Sampling CVE-2020-0548 - hw: L1D Cache Eviction Sampling...