CentOS 8 : firefox (CESA-2020:5237)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5237 advisory. - Mozilla: Variable time processing of cross-origin images during drawImage calls CVE-2020-16012 - Mozilla: Parsing mismatches could confuse and bypass...

CentOS 8 : kernel (CESA-2020:0339)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0339 advisory. - kernel: heap overflow in mwifiexsetuaprates function of Marvell Wifi Driver leading to DoS CVE-2019-14814 - kernel: heap-overflow in...

CentOS 8 : sane-backends (CESA-2020:2902)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2902 advisory. - sane-backends: Heap buffer overflow in epsondsnetread in epsonds-net.c CVE-2020-12861 - sane-backends: Heap buffer overflow in esci2img CVE-2020-1286...

CentOS 8 : freerdp and vinagre (CESA-2020:4647)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4647 advisory. - freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 - freerdp: Out of bound read in updaterecv could result in a crash...

CentOS 8 : .NET Core (CESA-2020:2143)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2143 advisory. - dotnet: Denial of service via untrusted input CVE-2020-1108 Note that Nessus has not tested for this issue but has instead relied only on the application's...

CentOS 8 : ppp (CESA-2020:0633)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0633 advisory. - ppp: Buffer overflow in the eaprequest and eapresponse functions in eap.c CVE-2020-8597 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : freeradius:3.0 (CESA-2020:1672)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1672 advisory. - freeradius: eap-pwd: Information leak due to aborting when needing more than 10 iterations CVE-2019-13456 Note that Nessus has not tested for this issue but h...

CentOS 8 : grafana (CESA-2020:4682)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4682 advisory. - grafana: XSS vulnerability via a column style on the Dashboard Table Panel screen CVE-2018-18624 - grafana: arbitrary file read via MySQL data source...

CentOS 8 : libvpx (CESA-2020:4629)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4629 advisory. - libvpx: Double free in ParseContentEncodingEntry in mkvparser.cc CVE-2019-2126 - libvpx: Out of bounds read in vp8norm table CVE-2019-9232 - libvpx:...

CentOS 8 : librepo (CESA-2020:3658)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3658 advisory. - librepo: missing path validation in repomd.xml may lead to directory traversal CVE-2020-14352 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : postgresql:10 (CESA-2020:5567)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5567 advisory. - postgresql: Reconnection can downgrade connection security settings CVE-2020-25694 - postgresql: Multiple features escape security restricted operati...

CentOS 8 : openwsman (CESA-2020:4689)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4689 advisory. - openwsman: Infinite loop in processconnection allows denial of service CVE-2019-3833 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : thunderbird (CESA-2020:3634)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3634 advisory. - Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 - Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 Note...

CentOS 8 : gdb (CESA-2020:1635)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1635 advisory. - gdb: buffer overflow while opening an ELF for debugging leads to Dos, information dislosure and code execution CVE-2019-1010180 Note that Nessus has not teste...

CentOS 8 : qt5 (CESA-2020:1665)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1665 advisory. - qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service CVE-2018-19869 - qt5-qtimageformats: QTgaFile CPU exhaustion...

CentOS 8 : go-toolset:rhel8 (CESA-2020:5493)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5493 advisory. - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS CVE-2020-24553 - golang: math/big: panic during recursive...

CentOS 8 : python-pip (CESA-2020:4432)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4432 advisory. - python-pip: directory traversal in downloadhttpurl function in src/pip/internal/download.py CVE-2019-20916 Note that Nessus has not tested for this issue but...

CentOS 8 : pcre2 (CESA-2020:4539)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory. - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : microcode_ctl (CESA-2020:5085)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5085 advisory. - hw: Information disclosure issue in Intel SGX via RAPL interface CVE-2020-8695 - hw: Vector Register Leakage-Active CVE-2020-8696 - hw: Fast forward...

CentOS 8 : openssl (CESA-2020:4514)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4514 advisory. - openssl: Integer overflow in RSAZ modular exponentiation on x8664 CVE-2019-1551 Note that Nessus has not tested for this issue but has instead relied only on...