CentOS 8 : qt5-qtbase (CESA-2019:3390)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3390 advisory. - qt5-qtbase: Double free in QXmlStreamReader CVE-2018-15518 - qt5-qtbase: QImage allocation failure in qgifhandler CVE-2018-19870 - qt5-qtbase:...

CentOS 8 : java-1.8.0-openjdk (CESA-2019:1816)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1816 advisory. - OpenJDK: Side-channel attack risks in Elliptic Curve EC cryptography Security, 8208698 CVE-2019-2745 - OpenJDK: Insufficient checks of suppressed...

CentOS 8 : php:7.3 (CESA-2019:3736)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3736 advisory. - php: underflow in envpathinfo in fpmmain.c CVE-2019-11043 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : thunderbird (CESA-2019:4195)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:4195 advisory. - Mozilla: Buffer overflow in plain text serializer CVE-2019-17005 - Mozilla: Use-after-free in worker destruction CVE-2019-17008 - Mozilla:...

CentOS 8 : thunderbird (CESA-2019:1623)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1623 advisory. - libical: Heap buffer over read in icalparser.c parsergetnextchar CVE-2019-11703 - libical: Heap buffer overflow in icalmemorystrdupanddequote functio...

CentOS 8 : ghostscript (CESA-2019:3890)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3890 advisory. - ghostscript: -dSAFER escape in .charkeys 701841 CVE-2019-14869 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : kernel (CESA-2019:2703)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2703 advisory. - kernel: Use-after-free in sound/usb/card.c:usbaudioprobe CVE-2018-19824 - kernel: Count overflow in FUSE request leading to use-after-free issues...

CentOS 8 : libarchive (CESA-2019:3698)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3698 advisory. - libarchive: Out-of-bounds read in lhareaddatanone CVE-2017-14503 - libarchive: Double free in RAR decoder resulting in a denial of service...

CentOS 8 : thunderbird (CESA-2019:3237)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3237 advisory. - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total Security...

CentOS 8 : java-11-openjdk (CESA-2019:1817)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1817 advisory. - OpenJDK: Side-channel attack risks in Elliptic Curve EC cryptography Security, 8208698 CVE-2019-2745 - OpenJDK: Insufficient checks of suppressed...

CentOS 8 : sssd (CESA-2019:3651)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3651 advisory. - sssd: improper implementation of GPOs due to too restrictive permissions CVE-2018-16838 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : lua (CESA-2019:3706)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3706 advisory. - lua: use-after-free in luaupvaluejoin in lapi.c resulting in denial of service CVE-2019-6706 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : nodejs:10 (CESA-2019:2925)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2925 advisory. - nodejs: Insufficient Slowloris fix causing DoS via server.headersTimeout bypass CVE-2019-5737 - HTTP/2: large amount of data requests leads to denial...

CentOS 8 : httpd:2.4 (CESA-2019:0980)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0980 advisory. - httpd: privilege escalation from modules scripts CVE-2019-0211 - httpd: modssl: access control bypass when using per-location client certification...

CentOS 8 : edk2 (CESA-2019:0968)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:0968 advisory. - edk2: Buffer Overflow in BlockIo service for RAM disk CVE-2018-12180 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : cyrus-imapd (CESA-2019:1771)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:1771 advisory. - cyrus-imapd: buffer overflow in CalDAV request handling triggered by a long iCalendar property name CVE-2019-11356 Note that Nessus has not tested for this...

CentOS 8 : virt:rhel (CESA-2019:3345)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3345 advisory. - QEMU: qxl: null pointer dereference while releasing spice resources CVE-2019-12155 - ntfs-3g: heap-based buffer overflow leads to local root privileg...

CentOS 8 : firefox (CESA-2019:0966)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:0966 advisory. - Mozilla: Proxy Auto-Configuration file can define localhost access to be proxied CVE-2018-18506 - Mozilla: Memory safety bugs fixed in Firefox 66 and...

CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2019:2731)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2731 advisory. - dotnet: System.Net.Sockets.dll Socket.ConnectAsync Denial of Service CVE-2019-1301 Note that Nessus has not tested for this issue but has instead relied only ...

CentOS 8 : gettext (CESA-2019:3643)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3643 advisory. - gettext: double free in defaultaddmessage in read-catalog.c CVE-2018-18751 Note that Nessus has not tested for this issue but has instead relied only on the...