CentOS 9 : xorg-x11-server-1.20.11-18.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the xorg-x11-server-1.20.11-18.el9 build changelog. - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destro...

CentOS 9 : vim-8.2.2637-15.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the vim-8.2.2637-15.el9 build changelog. - buffer overflow rhel-9 CVE-2022-0714 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

CentOS 9 : containernetworking-plugins-1.3.0-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the containernetworking-plugins-1.3.0-2.el9 build changelog. - A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a...

CentOS 9 : linux-firmware-20230726-138.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the linux- firmware-20230726-138.el9 build changelog. - Cross-Process Information Leak rhbz 2227156 CVE-2023-20593 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 9 : tmux-3.2a-4.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the tmux-3.2a-4.el9 build changelog. - In tmux before version 3.1c the function inputcsidispatchsgrcolon in file input.c contained a stack- based buffer-overflow that can be exploited by...

CentOS 9 : libuv-1.42.0-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libuv-1.42.0-1.el9 build changelog. - Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uvidnatoascii is used to convert strings to ASCII. The pointer ...

CentOS 9 : ruby-3.0.4-160.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ruby-3.0.4-160.el9 build changelog. - A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp fr...

CentOS 9 : grafana-pcp-3.2.0-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the grafana-pcp-3.2.0-2.el9 build changelog. - net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 - io/fs: stack exhaustion in Glob CVE-2022-30630 -...

CentOS 9 : ghostscript-9.54.0-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ghostscript-9.54.0-7.el9 build changelog. - Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampleddatafinish called from sampleddatacontinue and interp...

CentOS 9 : curl-7.76.1-20.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the curl-7.76.1-20.el9 build changelog. - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated...

CentOS 9 : sqlite-3.34.1-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the sqlite-3.34.1-6.el9 build changelog. - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API...

CentOS 9 : runc-1.1.7-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the runc-1.1.7-1.el9 build changelog. - runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless...

CentOS 9 : zsh-5.8-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the zsh-5.8-9.el9 build changelog. - In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This...

CentOS 9 : curl-7.76.1-22.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the curl-7.76.1-22.el9 build changelog. - A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP...

CentOS 9 : less-590-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the less-590-2.el9 build changelog. - In GNU Less before 609, crafted data can result in less -R not filtering ANSI escape sequences sent to the terminal. CVE-2022-46663 Note that Nessus ha...

CentOS 9 : LibRaw-0.21.1-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the LibRaw-0.21.1-1.el9 build changelog. - A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash...

CentOS 9 : aide-0.16-100.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the aide-0.16-100.el9 build changelog. - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of ...

CentOS 9 : skopeo-1.12.0-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the skopeo-1.12.0-3.el9 build changelog. - A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service...

CentOS 9 : dbus-1.12.20-8.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the dbus-1.12.20-8.el9 build changelog. - D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the...

CentOS 9 : iperf3-3.9-11.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the iperf3-3.9-11.el9 build changelog. - iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. CVE-2023-38403 Note that Nessus has not...