CentOS 8 : libldb (CESA-2020:4568)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4568 advisory. - samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and pagedresults CVE-2020-10730 Note that Nessus has not tested f...

CentOS 8 : thunderbird (CESA-2020:3341)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3341 advisory. - Mozilla: Potential leak of redirect targets when loading scripts in a worker CVE-2020-15652 - Mozilla: Memory safety bugs fixed in Firefox 79 and...

CentOS 8 : patch (CESA-2020:1852)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1852 advisory. - patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files CVE-2019-13636 Note that Nessus has not tested for this iss...

CentOS 8 : dovecot (CESA-2020:2901)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2901 advisory. - dovecot: malformed NOOP commands leads to DoS CVE-2020-10957 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : .NET Core 3.1 on Red Hat Enterprise Linux 8 (CESA-2020:2450)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2450 advisory. - dotnet: Denial of service via untrusted input CVE-2020-1108 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : gnupg2 (CESA-2020:4490)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4490 advisory. - GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS CVE-2019-13050 Note that...

CentOS 8 : mariadb:10.3 (CESA-2020:5500)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5500 advisory. - mysql: InnoDB unspecified vulnerability CPU Oct 2019 CVE-2019-2938 - mysql: Server: Optimizer unspecified vulnerability CPU Oct 2019 CVE-2019-2974 -...

CentOS 8 : java-1.8.0-openjdk (CESA-2020:1515)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1515 advisory. - OpenJDK: Misplaced regular expression syntax error check in RegExpScanner Scripting, 8223898 CVE-2020-2754 - OpenJDK: Incorrect handling of empty...

CentOS 8 : grub2 (CESA-2020:0335)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0335 advisory. - grub2: grub2-set-bootflag utility causes grubenv corruption rendering the system non-bootable CVE-2019-14865 Note that Nessus has not tested for this issue bu...

CentOS 8 : vim (CESA-2020:4453)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4453 advisory. - vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode CVE-2019-20807 Note that Nessus has not tested for this issu...

CentOS 8 : virt:rhel (CESA-2020:4059)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4059 advisory. - QEMU: slirp: networking out-of-bounds read information disclosure vulnerability CVE-2020-10756 - QEMU: usb: out-of-bounds r/w access issue while...

CentOS 8 : curl (CESA-2020:4599)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4599 advisory. - curl: Incorrect argument check can allow remote servers to overwrite local files CVE-2020-8177 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : nss and nspr (CESA-2020:3280)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3280 advisory. - nss: Use-after-free in sftkFreeSession due to improper refcounting CVE-2019-11756 - nss: Check length of inputs for cryptographic primitives...

CentOS 8 : mariadb-connector-c (CESA-2020:5503)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5503 advisory. - mariadb-connector-c: Improper validation of content in a OK packet received from server CVE-2020-13249 - mysql: C API unspecified vulnerability CPU J...

CentOS 8 : firefox (CESA-2020:5562)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5562 advisory. - chromium-browser: Uninitialized Use in V8 CVE-2020-16042 - Mozilla: Heap buffer overflow in WebGL CVE-2020-26971 - Mozilla: CSS Sanitizer performed...

CentOS 8 : librsvg2 (CESA-2020:4709)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4709 advisory. - librsvg: Resource exhaustion via crafted SVG file with nested patterns CVE-2019-20446 Note that Nessus has not tested for this issue but has instead relied on...

CentOS 8 : firefox (CESA-2020:2828)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2828 advisory. - Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64 CVE-2020-12417 - Mozilla: Information disclosure due to manipulated U...

CentOS 8 : php:7.2 (CESA-2020:1624)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1624 advisory. - php: Buffer over-read in PHAR reading functions CVE-2018-20783 - php: Heap buffer overflow in function exifprocessIFDTAG CVE-2019-11034 - php: Heap...

CentOS 8 : openjpeg2 (CESA-2020:0274)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0274 advisory. - openjpeg: Heap-based buffer overflow in opjt1clbldecodeprocessor CVE-2020-6851 Note that Nessus has not tested for this issue but has instead relied only on t...

CentOS 8 : java-1.8.0-openjdk (CESA-2020:2972)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2972 advisory. - OpenJDK: Incorrect handling of access control context in ForkJoinPool Libraries, 8237117 CVE-2020-14556 - OpenJDK: HostnameChecker does not ensure...