RHEL 5 : thunderbird (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - thunderbird: spoofing a message author via a crafted S/MIME CVE-2019-11755 Note that Nessus has not tested for this...

RHEL 6 : python-mako (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-mako: REDoS in Lexer class CVE-2022-40023 Note that Nessus has not tested for this issue but has instead...

RHEL 8 : fluentd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - fluentd: Escape sequence injection in filterparser.rb:filterstream can lead to arbitrary command execution when...

RHEL 9 : libtiff (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtiff: heap-based use after free in tiff2pdf.c:t2pwriteproc CVE-2017-17973 Note that Nessus has not tested for th...

RHEL 5 : xsa231_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xsa231 xen: Missing NUMA node parameter verification XSA-231 CVE-2017-14316 Note that Nessus has not tested for thi...

RHEL 7 : ed (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ed: Invalid free in regex.c CVE-2017-5357 Note that Nessus has not tested for this issue but has instead relied on...

RHEL 7 : aspell (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - aspell: Heap-buffer-overflow in acommon::ObjStack::duptop CVE-2019-25051 Note that Nessus has not tested for this...

RHEL 7 : apache-commons-io (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 CVE-2021-29425 Note that Nessus has not...

RHEL 5 : vorbis-tools (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - vorbis-tools: Invalid memory allocation in wavopen function in oggenc/audio.c CVE-2017-11331 Note that Nessus has n...

RHEL 5 : xmlsec1 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xmlsec1: xmlsec vulnerable to external entity expansion CVE-2017-1000061 Note that Nessus has not tested for this...

RHEL 7 : bcc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - bcc: unprivileged users can force loading of compromised linux headers CVE-2024-2314 Note that Nessus has not teste...

RHEL 7 : v8 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - V8: integer overflow leading to buffer overflow in Zone::New CVE-2016-1669 Note that Nessus has not tested for this...

RHEL 7 : tmux (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - tmux: null pointer dereference in windowpanesetevent in window.c CVE-2022-47016 Note that Nessus has not tested for...

RHEL 7 : python-ldap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-ldap: Regular expression denial of service in LDAP schema parser CVE-2021-46823 Note that Nessus has not...

RHEL 7 : django (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - Django: denial-of-service in intcomma template filter CVE-2024-24680 Note that Nessus has not tested for this issue...

RHEL 7 : alpaca (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication CVE-2021-3618...

CVE-2022-48667

A vulnerability was found in the Linux kernel's Server Message Block version 3 SMB3 protocol, specifically related to the insert range operation. This issue occurs when cached regions affected by the insert range operation are not properly discarded, which could lead to temporary file data...

CVE-2022-48667

In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesn't discard the affected cached region so can risk temporarily corrupting file data. Also includes some minor cleanup avoiding rereading inode size repeatedly...

CVE-2022-48667 smb3: fix temporary data corruption in insert range

In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesn't discard the affected cached region so can risk temporarily corrupting file data. Also includes some minor cleanup avoiding rereading inode size repeatedly...

CVE-2022-48667 smb3: fix temporary data corruption in insert range

In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesn't discard the affected cached region so can risk temporarily corrupting file data. Also includes some minor cleanup avoiding rereading inode size repeatedly...