RHEL 6 : python-pygments (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-pygments: ReDoS in multiple lexers CVE-2021-27291 Note that Nessus has not tested for this issue but has...

RHEL 8 : bash (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - bash: BASHCMD is writable in restricted bash shells CVE-2019-9924 Note that Nessus has not tested for this issue bu...

RHEL 7 : golang-fips_openssl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 Note that Nessus has...

RHEL 6 : policycoreutils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead...

RHEL 6 : stb_image (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - stbimage: heap-based buffer overflow CVE-2021-37789 Note that Nessus has not tested for this issue but has instead...

RHEL 5 : nspr (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nspr: Memory allocation issue related to PRprintf functions CVE-2016-1951 Note that Nessus has not tested for this...

RHEL 7 : jasperrreports (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jasperrreports: XSS and CSRF vulnerabilities leading to information disclosure CVE-2017-5528 Note that Nessus has n...

RHEL 7 : linuxptp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - linuxptp: wrong length of one-step follow-up in transparent clock CVE-2021-3571 Note that Nessus has not tested for...

RHEL 7 : golang.org_x_crypto (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - golang.org/x/crypto: empty plaintext packet causes panic CVE-2021-43565 Note that Nessus has not tested for this...

RHEL 7 : lua (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - lua: stack overflow in luaresume of ldo.c allows a DoS via a crafted script file CVE-2021-43519 Note that Nessus ha...

RHEL 7 : tpm2-tools (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - tpm2-tools: Sending password in plaintext for HMAC generation on server CVE-2017-7524 Note that Nessus has not test...

RHEL 6 : sendmail (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - sendmail: SMTP smuggling vulnerability CVE-2023-51765 Note that Nessus has not tested for this issue but has instea...

RHEL 7 : lldp_openvswitch (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - lldp/openvswitch: denial of service via externally triggered memory leak CVE-2020-27827 Note that Nessus has not...

RHEL 7 : python-jinja2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-jinja2: ReDoS vulnerability in the urlize filter CVE-2020-28493 Note that Nessus has not tested for this iss...

RHEL 6 : dracut (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - dracut: Brute force attack on LUKS password decryption via initramfs CVE-2016-4484 Note that Nessus has not tested...

RHEL 6 : spice-client (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows CVE-2018-10893 Note...

RHEL 8 : nodejs-path-parse (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe CVE-2021-23343 Note that Nessus has not...

RHEL 7 : libseccomp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libseccomp: incorrect generation of syscall filters in libseccomp CVE-2019-9893 Note that Nessus has not tested for...

RHEL 7 : shadow-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - shadow-utils: possible password leak during passwd1 change CVE-2023-4641 Note that Nessus has not tested for this...

RHEL 6 : shadow-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - shadow-utils: possible password leak during passwd1 change CVE-2023-4641 Note that Nessus has not tested for this...