Ubuntu 20.04 LTS : Firefox vulnerability (USN-6367-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6367-1 advisory. It was discovered that Firefox did not properly manage memory when handling WebP images. If a user were tricked into opening a webpage containing malicious WebP...

Google Chrome < 116.0.5845.187 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 116.0.5845.187. It is, therefore, affected by a vulnerability as referenced in the 202309stable-channel-update-for-desktop11 advisory. - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp...

Foxit PDF Editor < 13.0 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 13.0. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application'...

Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4642)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4642 advisory. 7.0.110-1.0.1 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ2228571 Tenable has extracted the preceding description block directly fr...

AlmaLinux 9 : .NET 7.0 (ALSA-2023:4642)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:4642 advisory. - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2023-35390 - .NET and Visual Studio Denial of Service Vulnerability CVE-2023-38180 Note...

RHEL 7 : rh-dotnet60-dotnet (RHSA-2023:4641)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4641 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 8 : .NET 7.0 (RHSA-2023:4643)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4643 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 8 : .NET 6.0 (RHSA-2023:4645)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4645 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Oracle Linux 7 : linux-firmware (ELSA-2023-12689)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12689 advisory. 20230516-999.22.git6c9e0ed5.el7 - remove amd-ucode/README Orabug: 35645306 - Resolves 'Zenbleed' Orabug: 35650345 CVE-2023-20593 Tenable has extracted the...

Oracle Linux 7 : linux-firmware (ELSA-2023-12690)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12690 advisory. 20230516-999.22.git6c9e0ed5.el7 - remove amd-ucode/README Orabug: 35645306 - Resolves 'Zenbleed' Orabug: 35650345 CVE-2023-20593 Tenable has extracted the...

Oracle Linux 7 : linux-firmware (ELSA-2023-12657)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12657 advisory. 20230516-999.20.git6c9e0ed5.el7 - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode - 92624e57af69 linux-firmware: Update AMD cpu microcode...

Fedora 37 : ghostscript (2023-83c805b441)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-83c805b441 advisory. fix for CVE-2023-36664 rhbz2217805 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Oracle Linux 8 : python27:2.7 (ELSA-2023-3780)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3780 advisory. - Fix CVE-2021-20095 Resolves: rhbz1955615 Cython - Fix for CVE-2023-24329 - Add missing part of fix for CVE-2022-45061 python2-pip - Fix CVE-2020-28493: ReDOS...

Fedora 38 : pcs (2023-b86fd9ad80)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b86fd9ad80 advisory. - Rebased to the latest upstream sources see CHANGELOG.md - Updated pcs-web-ui - Removed dependency fedora-logos - favicon is now correctly provided by...

Oracle Linux 8 : sqlite (ELSA-2023-3840)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3840 advisory. - Bumped release to add correct changelog entry. Version 3.26.0-18 fixes CVE-2020-24736 Tenable has extracted the preceding description block directly from the...

SUSE SLES15: kubernetes1.24-client / kubernetes1.24-client-bash-completion / etc (SUSE-SU-2023:2654-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2654-1 advisory. - rebuild the package with the go 1.20 security release bsc1206346. Tenable has extracted the preceding description block...

RHEL 8 : ruby:2.7 (RHSA-2023:3821)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3821 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...

Rocky Linux 8 : python3 (RLSA-2023:3591)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3591 advisory. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank...

Ubuntu 22.04 LTS / 23.04 : GlusterFS vulnerability (USN-6157-1)

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6157-1 advisory. Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of...

Fedora 37 : python3.11 (2023-63c69aa712)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-63c69aa712 advisory. Fix for CVE-2023-24329 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...