CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2022:1759)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1759 advisory. - QEMU: block: fdc: null pointer dereference may lead to guest crash CVE-2021-20196 - ntfs-3g: Out-of-bounds heap buffer access in ntfsgetattributevalu...

CentOS 8 : mod_auth_openidc:2.3 (CESA-2022:1823)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:1823 advisory. - modauthopenidc: open redirect in oidcvalidateredirecturl CVE-2021-32786 - modauthopenidc: hardcoded static IV and AAD with a reused key in AES GCM...

CentOS 8 : gnome-shell (CESA-2022:1814)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1814 advisory. - gnome-shell: Password from logged-out user may be shown on login screen CVE-2020-17489 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : libssh (CESA-2022:2031)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2031 advisory. - libssh: possible heap-based buffer overflow when rekeying CVE-2021-3634 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : container-tools:3.0 (CESA-2022:1793)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1793 advisory. - crun: Default inheritable capabilities for linux container should be empty CVE-2022-27650 Note that Nessus has not tested for this issue but has instead relie...

CentOS 8 : python27:2.7 (CESA-2022:1821)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1821 advisory. - python: urllib: Regular expression DoS in AbstractBasicAuthHandler CVE-2021-3733 - python: urllib: HTTP client possible infinite loop on a 100 Contin...

CentOS 8 : bluez (CESA-2022:2081)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2081 advisory. - bluez: memory leak in the SDP protocol CVE-2021-41229 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : python-lxml (CESA-2022:1932)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1932 advisory. - python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Note that Nessus has not tested for this issue but has instea...

CentOS 8 : libtiff (CESA-2022:1810)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1810 advisory. - libtiff: a buffer overflow via the invertImage may lead to DoS CVE-2020-19131 Note that Nessus has not tested for this issue but has instead relied only on th...

CentOS 8 : qt5-qtbase (CESA-2022:1796)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1796 advisory. - qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke CVE-2021-38593 Note that Nessus has not...

CentOS 8 : container-tools:rhel8 (CESA-2022:1762)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1762 advisory. - psgo: Privilege escalation in 'podman top' CVE-2022-1227 - prometheus/clientgolang: Denial of service using InstrumentHandlerCounter CVE-2022-21698 -...

CentOS 8 : grub2 (CESA-2022:2110)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:2110 advisory. - grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content CVE-2021-3981 Note that Nessus has not tested for this issue but has...

CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2022:1764)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1764 advisory. - python: urllib: Regular expression DoS in AbstractBasicAuthHandler CVE-2021-3733 - python: urllib: HTTP client possible infinite loop on a 100 Contin...

CentOS 8 : libsndfile (CESA-2022:1968)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1968 advisory. - libsndfile: heap out-of-bounds read in src/flac.c in flacbuffercopy CVE-2021-4156 Note that Nessus has not tested for this issue but has instead relied only o...

CentOS 8 : postgresql:10 (CESA-2022:1830)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1830 advisory. - postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : qt5-qtsvg (CESA-2022:1920)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1920 advisory. - qt: out-of-bounds write may lead to DoS CVE-2021-45930 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : python3 (CESA-2022:1986)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1986 advisory. - python: urllib: HTTP client possible infinite loop on a 100 Continue response CVE-2021-3737 - python: ftplib should not use the host from the PASV...

CentOS 8 : flatpak (CESA-2022:1792)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:1792 advisory. - flatpak: Permissions granted to applications can be hidden from the user at install time CVE-2021-43860 Note that Nessus has not tested for this issue but has...

CentOS 8 : go-toolset:rhel8 (CESA-2022:1819)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1819 advisory. - golang: Command-line arguments may overwrite global data CVE-2021-38297 - golang: archive/zip: malformed archive may cause panic or memory exhaustion...

CentOS: Security Advisory for firefox (CESA-2022:1703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...