RHEL 7 : Red Hat Single Sign-On 7.6.9 security update on RHEL 7 (Low) (RHSA-2024:3566)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3566 advisory. Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on...

RHEL 4 : gdk-pixbuf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables CVE-2011-2897 Note that Nessus has no...

RHEL 9 : jss (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jss: Memory leak on TLS connections CVE-2022-4132 Note that Nessus has not tested for this issue but has instead...

RHEL 4 : unixodbc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - unixODBC: possible buffer overrun in SQLDriverConnect CVE-2011-1145 - Buffer overflow in the...

RHEL 5 : acpid (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - acpid: blocked writes can lead to acpid daemon hang CVE-2011-1159 - acpid: Unsafe umask for actions...

RHEL 6 : bzip2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - bzip2: heap use after free in bzip2recover CVE-2016-3189 Note that Nessus has not tested for this issue but has...

RHEL 7 : mysql-connector-odbc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mysql-connector-odbc: An unauthenticated attacker with network access can, via multiple protocols compromise MySQL...

RHEL 7 : cyrus-sasl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cyrus-sasl: denial of service in sasladdstring function CVE-2019-19906 Note that Nessus has not tested for this iss...

RHEL 7 : cli (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader CVE-2021-27918 Note th...

RHEL 5 : logrotate (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - logrotate: TOCTOU race condition by creation of new files between opening the file and moment, final...

RHEL 5 : sos (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - sos: Usage of predictable temporary files allows privilege escalation CVE-2015-7529 Note that Nessus has not tested...

RHEL 6 : python-sqlalchemy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-sqlalchemy: SQL Injection when the groupby parameter can be controlled CVE-2019-7548 Note that Nessus has no...

RHEL 7 : python-sqlalchemy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-sqlalchemy: SQL Injection when the groupby parameter can be controlled CVE-2019-7548 Note that Nessus has no...

RHEL 8 : pcp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - pcp: unsafe use of directories allows pcp to root privilege escalation CVE-2023-6917 Note that Nessus has not teste...

RHEL 6 : json-path (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json-path: stack-based buffer overflow in Criteria.parse method CVE-2023-51074 Note that Nessus has not tested for...

RHEL 5 : avahi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - avahi: Multicast DNS responds to unicast queries outside of local network CVE-2017-6519 Note that Nessus has not...

RHEL 7 : libwebp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libwebp: use of uninitialized value in ReadSymbol CVE-2018-25014 Note that Nessus has not tested for this issue but...

RHEL 5 : ctdb (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ctdb: /tmp file vulnerability issues CVE-2013-4159 Note that Nessus has not tested for this issue but has instead...

RHEL 7 : rubygem-hammer_cli (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - rubygem-hammercli: no verification of API server's SSL certificate CVE-2017-2667 Note that Nessus has not tested fo...

RHEL 9 : cri-o (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - opencontainers: OCI manifest and index parsing confusion CVE-2021-41190 Note that Nessus has not tested for this...