CentOS 8 : mailman:2.1 (CESA-2021:1751)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1751 advisory. - mailman: arbitrary content injection via the options login page CVE-2020-12108 - mailman: arbitrary content injection via the private archive login...

CentOS 8 : freerdp (CESA-2021:1849)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1849 advisory. - freerdp: out of bound reads resulting in accessing memory location outside of static array PRIMARYDRAWINGORDERFIELDBYTES CVE-2020-11095 - freerdp:...

CentOS 8 : idm:DL1 and idm:client (CESA-2021:1846)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1846 advisory. - jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Note that Nessus has not tested for this issue but has...

CentOS 8 : qt5-qtbase (CESA-2021:1756)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1756 advisory. - qt: buffer over-read in readxbmbody in gui/image/qxbmhandler.cpp CVE-2020-17507 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 8 : krb5 (CESA-2021:1593)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1593 advisory. - krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1encode.c may lead to DoS CVE-2020-28196 Note that Nessus has not tested...

CentOS 8 : pandoc (CESA-2021:1972)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1972 advisory. - cmark-gfm: Exponential time to parse certain inputs could lead to DoS CVE-2020-5238 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : gssdp and gupnp (CESA-2021:1789)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1789 advisory. - hostapd: UPnP SUBSCRIBE misbehavior in WPS AP CVE-2020-12695 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : curl (CESA-2021:1610)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1610 advisory. - curl: Expired pointer dereference via multi API with CURLOPTCONNECTONLY option set CVE-2020-8231 - curl: FTP PASV command response can cause curl to...

CentOS 8 : linux-firmware (CESA-2021:1620)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1620 advisory. - kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : sqlite (CESA-2021:1581)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1581 advisory. - sqlite: integer overflow in sqlite3strvappendf function in printf.c CVE-2020-13434 - sqlite: heap-based buffer overflow in multiSelectOrderBy due to...

CentOS 8 : firefox (CESA-2021:1360)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1360 advisory. - Mozilla: More internal network hosts could have been probed by a malicious webpage CVE-2021-23961 - Mozilla: Out of bound write due to lazy...

CentOS: Security Advisory for bind (CESA-2021:1469)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for xterm-295-3.el7_ (CESA-2021:0617)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for java-11-openjdk (CESA-2021:1297)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : bind (RHSA-2021:1469)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1469 advisory. - In BIND 9.0.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as...

CentOS 7 : java-11-openjdk (RHSA-2021:1297)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1297 advisory. - Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are...

CentOS 8 : thunderbird (CESA-2021:1353)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1353 advisory. - Mozilla: More internal network hosts could have been probed by a malicious webpage CVE-2021-23961 - Mozilla: Out of bound write due to lazy...

CentOS 7 : squid (RHSA-2021:1135)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1135 advisory. - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request...

CentOS: Security Advisory for java (CESA-2015:2086)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS: Security Advisory for qemu-guest-agent (CESA-2015:2694)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...