Oracle Linux 9 : libksba (ELSA-2022-7090)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7090 advisory. 1.5.1-5 - Fix for CVE-2022-3515 2135703 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

RHEL 8 : libksba (RHSA-2022:7089)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7089 advisory. KSBA pronounced Kasbah is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are...

EulerOS Virtualization 3.0.6.0 : perl-CPAN (EulerOS-SA-2022-2581)

According to the versions of the perl-CPAN package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156 Note that Tenable Network Security has extracted the preceding...

RHEL 9 : zlib (RHSA-2022:4584)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4584 advisory. The zlib packages provide a general-purpose lossless data compression library that is used by many different programs. Security Fixes: zlib: A flaw...

RHEL 9 : rsync (RHSA-2022:4592)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4592 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...

RHEL 9 : kernel (RHSA-2022:6003)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6003 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: information leak in scsiioctl...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9699)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-9699 advisory. - netsched: clsroute: remove from list when handle is 0 Thadeu Lima de Souza Cascardo Orabug: 34460938 CVE-2022-2588 - KVM: x86: Avoid theoretical NULL pointer...

RHEL 8 : ruby:2.5 (RHSA-2022:5779)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5779 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

Tenable SecurityCenter < 5.22.0 Multiple Vulnerabilities (TNS-2022-15)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host has a third-party software vulnerability in Moment.js, prior to version 2.29.4. It contains a denial of service vulnerability due to an inefficient parsing algorithm. An remote attacker can...

Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2022-5061)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5061 advisory. 3.1.420-1.0.1 - Add missing Oracle Linux Runtime IDs - Update to .NET SDK 3.1.417 and Runtime 3.1.23 - Resolves: RHBZ2060566 3.1.420-1 - Update to .NET SDK...

F5 Networks BIG-IP : zlib vulnerability (K21548854)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0. It is, therefore, affected by a vulnerability as referenced in the K21548854 advisory. zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many...

Debian DLA-3005-1 : lrzip - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3005 advisory. lrzip, a compression program, was found to have a heap memory corruption bug. For Debian 9 stretch, this problem has been fixed in version 0.631-1+deb9u3. We recommend that...

RHEL 7 : kpatch-patch (RHSA-2022:2211)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:2211 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

CentOS 8 : gnome-shell (CESA-2022:1814)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1814 advisory. - gnome-shell: Password from logged-out user may be shown on login screen CVE-2020-17489 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : php:7.4 (CESA-2022:1935)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:1935 advisory. - php: Local privilege escalation via PHP-FPM CVE-2021-21703 - php: SSRF bypass in FILTERVALIDATEURL CVE-2021-21705 Note that Nessus has not tested for...

QNAP QTS / QuTS hero Improper Authorization Vulnerability in HBS 3 (QSA-21-13)

The version of QNAP QTS or QuTS hero on the remote host is affected by an improper authorization vulnerability when running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. Note that Nessus has not tested for this issue but has instead relie...

Apache APISIX Dashboard < 2.10.1 Authentication Bypass

The version of Apache APISIX Dashboard installed on the remote host is prior to 2.10.1. It is, therefore, affected by an authentication bypass vulnerability. An unauthenticated, remote attacker could exploit this to bypass authentication. Note that Nessus has not tested for these issues but has...

Ubuntu 20.04 LTS : libarchive vulnerability (USN-5374-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5374-1 advisory. It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to expose sensitive information. Tenable ha...

openSUSE 15 Security Update : slirp4netns (openSUSE-SU-2022:0943-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0943-1 advisory. - slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total...

AlmaLinux 8 : vim (ALSA-2022:0366)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:0366 advisory. - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3872, CVE-2021-3984, CVE-2021-4019 - vim is vulnerable to Use After Free CVE-2021-4192 - vim is...