Photon OS 4.0: Linux PHSA-2024-4.0-0662

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0662. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2024:2804-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2804-1 advisory. - Fixed not copying of skel files bsc1228770 Tenable has extracted the preceding description block direct...

Siemens RUGGEDCOM Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2024-39675)

In some configurations the affected products wrongly enable the Modbus service in non-managed VLANS. Only serial devices are affected by this vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Fedora 40 : orc (2024-c7bb042d5b)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c7bb042d5b advisory. Update to 0.4.39 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

UBUNTU-CVE-2024-42238

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Return error if block header overflows file Return an error from csdsppowerup if a block header is longer than the amount of data left in the file. The previous code in csdspload and csdsploadcoeff would loop whi...

GLSA-202408-12 : Bitcoin: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202408-12 Bitcoin: Denial of Service Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has not...

Apple TV < 17.6 Multiple Vulnerabilities (HT214122)

According to its banner, the version of Apple TV on the remote device is prior to 17.6. It is therefore affected by multiple vulnerabilities as described in the HT214122 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid205149; scriptversion"1.3";...

SUSE SLES12 Security Update : patch (SUSE-SU-2024:2704-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2704-1 advisory. - CVE-2019-20633: Fixed double-free/OOB read in pch.c bsc1167721 Tenable has extracted the preceding description block directly from the SUS...

OSGeo GeoTools RCE (CVE-2024-36404)

The version of OSGeo GeoTools installed on the remote host is affected by a remote code execution vulnerability, as follows: - Remote Code Execution is possible if an application uses certain GeoTools functionality to evaluate XPath expressions supplied by user input. Note that Nessus has not...

Fedora 40 : kernel (2024-873e2cb5f2)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-873e2cb5f2 advisory. The 6.9.12 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

Slackware Linux 15.0 / current curl Vulnerability (SSA:2024-213-01)

The version of curl installed on the remote host is prior to 8.9.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-213-01 advisory. New curl packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding description...

Fedora 40 : chromium (2024-141c438daf)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-141c438daf advisory. - fix crash on ppc64le Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 39 : xdg-desktop-portal-hyprland (2024-295a735fbc)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-295a735fbc advisory. Update to 1.3.3 https://github.com/hyprwm/xdg-desktop-portal-hyprland/releases/tag/v1.3.3 Tenable has extracted the preceding description block directly from...

Fedora 40 : darkhttpd (2024-25f8e34407)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-25f8e34407 advisory. - Update to 1.16 fixes rhbz2259096 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 40 : tinyproxy (2024-aa3631a416)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-aa3631a416 advisory. Update to version 1.11.2 to fix CVE-2023-49606. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Oracle Linux 8 : libndp (ELSA-2024-4620)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-4620 advisory. 1.7-7 - Validate route information option length Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Fedora 39 : qt6-qtbase (2024-903b88b49e)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-903b88b49e advisory. Fix for CVE-2024-39936. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Photon OS 3.0: Httpd PHSA-2023-3.0-0522

An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0522. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Systemd PHSA-2022-3.0-0487

An update of the systemd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0487. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Python3 PHSA-2023-3.0-0646

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0646. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...