Fedora 41 : golang-github-chainguard-dev-git-urls / golang-github-task (2024-40d4ab1c94)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-40d4ab1c94 advisory. Bugfix to mitigate CVE-2023-46402 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Oracle Linux 9 : libsndfile:1.0.31 (ELSA-2024-11237)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-11237 advisory. 1.0.31-8.2 - fix crash in ogg vorbis RHEL-65096 CVE-2024-50612 Tenable has extracted the preceding description block directly from the Oracle Linux security...

About Elevation of Privilege – needrestart (CVE-2024-48990) vulnerability

About Elevation of Privilege - needrestart CVE-2024-48990 vulnerability. On November 19, Qualys released a security bulletin about five privilege escalation vulnerabilities in the needrestart utility CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003 used in Ubuntu...

Fedora 39 : needrestart (2024-6015ee69f0)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6015ee69f0 advisory. Rebase to fix CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Siemens SCALANCE M-800 Integer Overflow or Wraparound (CVE-2023-49441)

dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid502667; scriptversion"1.3";...

Fedora 37 : sysstat (2022-9f3af921a5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-9f3af921a5 advisory. Security fix for CVE-2022-39377 - arithmetic overflow in allocatestructures on 32 bit systems Tenable has extracted the preceding description block directly...

Fedora 37 : python3.9 (2022-6b8b96f883)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-6b8b96f883 advisory. Update to 3.9.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 41 : pgadmin4 (2024-4944ad2c87)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-4944ad2c87 advisory. Fix CVE-2024-9014. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 37 : snakeyaml (2022-c01dd659fa)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c01dd659fa advisory. Security fix for CVE-2022-41854 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 37 : python3.8 (2022-18b234c18b)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-18b234c18b advisory. Update to 3.8.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

MLflow < 2.9.2 Path Traversal Vulnerability

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 Tenable, Inc. include'compat.inc'; if description scriptid210769;...

RockyLinux 8 : python3.12 (RLSA-2024:8836)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8836 advisory. python: cpython: tarfile: ReDos via excessive backtracking while parsing header values CVE-2024-6232 Tenable has extracted the preceding description block directl...

NumPy < 1.22.0 Vulnerability - CVE-2021-34141

The version of NumPy installed on the remote host is prior to 1.22.0. It is, therefore, affected by an incomplete string comparison vulnerability in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE...

PT-2024-10127

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.4.0 Description Rsync contains multiple vulnerabilities, including a critical heap-buffer overflow that allows for remote code execution. The heap-based buffer overflow occurs due to improper handling of...

Fedora 40 : podman-tui (2024-afa796a751)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-afa796a751 advisory. release 1.2.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Oracle Linux 9 : python3.11 (ELSA-2024-8374)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8374 advisory. 3.11.7-1.6 - Security fix for CVE-2024-6232 Resolves: RHEL-57411 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 39 : wireshark (2024-68faaf3451)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-68faaf3451 advisory. New version 4.0.17, fix for CVE-2024-8250 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CBL Mariner 2.0 Security Update: busybox (CVE-2023-42363)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42363 advisory. - A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox...

GLSA-202408-01 : containerd: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-01 containerd: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in containerd. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

Photon OS 5.0: Gdb PHSA-2023-5.0-0060

An update of the gdb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0060. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20455...