NewStart CGSL MAIN 7.02 : shadow Vulnerability (NS-SA-2025-0198)

The remote NewStart CGSL host, running version MAIN 7.02, has shadow packages installed that are affected by a vulnerability: - A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails i...

NewStart CGSL MAIN 7.02 : unixODBC Vulnerability (NS-SA-2025-0116)

The remote NewStart CGSL host, running version MAIN 7.02, has unixODBC packages installed that are affected by a vulnerability: - An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee writes 8 bytes. This issue may go unnoticed on...

NewStart CGSL MAIN 7.02 : docker-ce Vulnerability (NS-SA-2025-0150)

The remote NewStart CGSL host, running version MAIN 7.02, has docker-ce packages installed that are affected by a vulnerability: - Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is bui...

NewStart CGSL MAIN 7.02 : qt5-qtsvg Vulnerability (NS-SA-2025-0192)

The remote NewStart CGSL host, running version MAIN 7.02, has qt5-qtsvg packages installed that are affected by a vulnerability: - In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPerEm initialization is mishandled. CVE-2023-32573...

NewStart CGSL MAIN 7.02 : python-setuptools Vulnerability (NS-SA-2025-0181)

The remote NewStart CGSL host, running version MAIN 7.02, has python-setuptools packages installed that are affected by a vulnerability: - A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These...

NewStart CGSL MAIN 7.02 : gdb Multiple Vulnerabilities (NS-SA-2025-0165)

The remote NewStart CGSL host, running version MAIN 7.02, has gdb packages installed that are affected by multiple vulnerabilities: - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at /gdb/coff-pe-read.c. CVE-2023-39130 - GNU gdb GDB...

NewStart CGSL MAIN 7.02 : zlib Vulnerability (NS-SA-2025-0200)

The remote NewStart CGSL host, running version MAIN 7.02, has zlib packages installed that are affected by a vulnerability: - MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE:...

NewStart CGSL MAIN 7.02 : perl-HTTP-Tiny Vulnerability (NS-SA-2025-0177)

The remote NewStart CGSL host, running version MAIN 7.02, has perl-HTTP-Tiny packages installed that are affected by a vulnerability: - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to...

NewStart CGSL MAIN 7.02 : squashfs-tools Multiple Vulnerabilities (NS-SA-2025-0192)

The remote NewStart CGSL host, running version MAIN 7.02, has squashfs-tools packages installed that are affected by multiple vulnerabilities: - squashfsopendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem...

NewStart CGSL MAIN 7.02 : sane-backends Vulnerability (NS-SA-2025-0135)

The remote NewStart CGSL host, running version MAIN 7.02, has sane-backends packages installed that are affected by a vulnerability: - An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the saneiconfigureattach function. NOTE: this is disputed because...

NewStart CGSL MAIN 7.02 : perl-CPAN Vulnerability (NS-SA-2025-0188)

The remote NewStart CGSL host, running version MAIN 7.02, has perl-CPAN packages installed that are affected by a vulnerability: - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Nessus has not tested for these issues but ha...

NewStart CGSL MAIN 7.02 : systemd Vulnerability (NS-SA-2025-0186)

The remote NewStart CGSL host, running version MAIN 7.02, has systemd packages installed that are affected by a vulnerability: - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowi...

NewStart CGSL MAIN 7.02 : bind Multiple Vulnerabilities (NS-SA-2025-0108)

The remote NewStart CGSL host, running version MAIN 7.02, has bind packages installed that are affected by multiple vulnerabilities: - If a server hosts a zone containing a KEY Resource Record, or a resolver DNSSEC-validates a KEY Resource Record from a DNSSEC-signed domain in cache, a client can...

NewStart CGSL MAIN 7.02 : binutils Vulnerability (NS-SA-2025-0113)

The remote NewStart CGSL host, running version MAIN 7.02, has binutils packages installed that are affected by a vulnerability: - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c...

NewStart CGSL MAIN 7.02 : libqb Vulnerability (NS-SA-2025-0161)

The remote NewStart CGSL host, running version MAIN 7.02, has libqb packages installed that are affected by a vulnerability: - logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. CVE-2023-39976 Note that Nessus has not test...

NewStart CGSL MAIN 7.02 : openvswitch Multiple Vulnerabilities (NS-SA-2025-0196)

The remote NewStart CGSL host, running version MAIN 7.02, has openvswitch packages installed that are affected by multiple vulnerabilities: - A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow ...

NewStart CGSL MAIN 7.02 : python-werkzeug Vulnerability (NS-SA-2025-0136)

The remote NewStart CGSL host, running version MAIN 7.02, has python-werkzeug packages installed that are affected by a vulnerability: - Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code on a developer's...

NewStart CGSL MAIN 7.02 : libvirt Multiple Vulnerabilities (NS-SA-2025-0189)

The remote NewStart CGSL host, running version MAIN 7.02, has libvirt packages installed that are affected by multiple vulnerabilities: - A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop method, the data pointer t...

NewStart CGSL MAIN 7.02 : avahi Multiple Vulnerabilities (NS-SA-2025-0174)

The remote NewStart CGSL host, running version MAIN 7.02, has avahi packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in Avahi. A reachable assertion exists in the avahialternativehostname function. CVE-2023-38473 - A flaw was found in avahi in versions...

NewStart CGSL MAIN 7.02 : poppler Multiple Vulnerabilities (NS-SA-2025-0119)

The remote NewStart CGSL host, running version MAIN 7.02, has poppler packages installed that are affected by multiple vulnerabilities: - A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, ...