RHEL 7 : browserify-sign (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack CVE-2023-46234 Note that...

RHEL 8 : qpdf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - qpdf: recursive calls can lead to a DoS in libqpdf/QPDFWriter.cc CVE-2018-18020 Note that Nessus has not tested for...

RHEL 7 : tpm2-tools (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - tpm2-tools: Sending password in plaintext for HMAC generation on server CVE-2017-7524 Note that Nessus has not test...

RHEL 7 : jose-go (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jose-go: improper handling of highly compressed data CVE-2024-28180 Note that Nessus has not tested for this issue...

RHEL 6 : perl-xml-libxml (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-XML-LibXML: Use-after-free by controlling the arguments to a replaceChild call CVE-2017-10672 Note that Nessus...

RHEL 7 : tang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - tang: Race condition exists in the key generation and rotation functionality CVE-2023-1672 Note that Nessus has not...

RHEL 9 : sdl2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - SDL2: memory leak in GLESCreateTexture in render/opengles/SDLrendergles.c CVE-2022-4743 Note that Nessus has not...

RHEL 7 : fop (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - fop: XML external entity processing vulnerability CVE-2017-5661 Note that Nessus has not tested for this issue but...

RHEL 7 : log4j (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - log4j: Socket receiver deserialization vulnerability CVE-2017-5645 Note that Nessus has not tested for this issue b...

RHEL 6 : ibm_jdk (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - IBM JDK: Information disclosure via calls to System.arraycopy with invalid length CVE-2019-17639 Note that Nessus h...

RHEL 6 : postfix (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - postfix: SMTP smuggling vulnerability CVE-2023-51764 Note that Nessus has not tested for this issue but has instead...

RHEL 7 : gogo_protobuf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation CVE-2021-3121 Note that Nessus has not...

RHEL 5 : xsa154_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xsa154 xen: inconsistent cachability flags on guest mappings XSA-154 CVE-2016-2270 Note that Nessus has not tested...

RHEL 8 : nodejs-set-value (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-set-value: prototype pollution in function set-value CVE-2019-10747 Note that Nessus has not tested for this...

RHEL 7 : aspell (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - aspell: Heap-buffer-overflow in acommon::ObjStack::duptop CVE-2019-25051 Note that Nessus has not tested for this...

RHEL 7 : libxvmc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libXvMC: Insufficient validation of server responses results in buffer underflow CVE-2016-7953 Note that Nessus has...

RHEL 5 : libwmf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libwmf: Memory allocation failure in wmfmalloc CVE-2016-9011 Note that Nessus has not tested for this issue but has...

RHEL 7 : s_mime (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - S/MIME: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails CVE-2017-17689 Note that Nessus h...

RHEL 7 : jasperreports (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jasperreports: Information disclosure vulnerability CVE-2017-5529 Note that Nessus has not tested for this issue bu...

RHEL 7 : perl-email-address (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-Email-Address: Specially crafted input could cause Denial of Service due to complex parse method CVE-2018-1255...