Slackware Linux 15.0 / current netatalk Multiple Vulnerabilities (SSA:2024-185-01)

The version of netatalk installed on the remote host is prior to 3.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-185-01 advisory. New netatalk packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

CBL Mariner 2.0 Security Update: patch (CVE-2019-13636)

The version of patch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-13636 advisory. - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files...

NumPy Detection

Binary data numpydetect.nbin...

Fedora 39 : freeipa (2024-1d1b485611)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1d1b485611 advisory. Fix CVE-2024-2698 and CVE-2024-3183 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2024:2171-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2171-1 advisory. - CVE-2024-20696: Fixed heap based out-of-bounds write bsc1225971. Tenable has extracted the preceding...

Slackware Linux 15.0 / current emacs Vulnerability (SSA:2024-174-01)

The version of emacs installed on the remote host is prior to 29.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-174-01 advisory. New emacs packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding descriptio...

Oracle Linux 8 : flatpak (ELSA-2024-3961)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3961 advisory. - Update to 1.12.9 CVE-2024-32462 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Fedora 40 : kitty (2024-15039ba9f9)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-15039ba9f9 advisory. rebuild for rhbz2292712 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Adobe Substance 3D Stager < 3.0.2 Multiple Vulnerabilities (APSB24-43) (macOS)

The version of Adobe Substance 3D Stager installed on the remote macOS host is prior to 3.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-43 advisory. Successful exploitation could lead to arbitrary code execution in the context of the current user. Note th...

Intel oneVPL GPU Runtime Installed (Linux)

Binary data intelonevplgpuruntimelinuxinstalled.nbin...

TensorFlow < 2.12.0 Multiple Vulnerabilities

The version of TensorFlow installed on the remote host is prior to 2.12.0. It is, therefore, affected by multiple vulnerabilities as referenced in the release notes. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Security Updates for Microsoft Office Products C2R (May 2024)

The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerability: - Microsoft Excel is affected by a remote code execution vulnerability. CVE-2024-30042 Note that Nessus has not tested for this issue but has instead relied only on the...

RHEL 7 : e2fsprogs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - e2fsprogs: out-of-bounds read/write via crafted filesystem CVE-2022-1304 Note that Nessus has not tested for this...

RHEL 7 : spice (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - spice: Improper input validation in function asyncREADhandler CVE-2020-23793 - spice: Client initiated...

RHEL 6 : glusterfs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - glusterfs: heap use-after-free in dhtsetxattrmdscbk in dht-common.c CVE-2022-48340 Note that Nessus has not tested...

RHEL 6 : tcpslice (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - tcpslice: use-after-free in extractslice CVE-2021-41043 Note that Nessus has not tested for this issue but has...

RHEL 7 : protobuf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference CVE-2021-22570 Note that...

RHEL 6 : minicom (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - minicom: Out of bounds write in vt100.c CVE-2017-7467 Note that Nessus has not tested for this issue but has instea...

RHEL 6 : jdbc-postgresql (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes CVE-2022-21724 Note that Nessus has no...

RHEL 8 : ipa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ipa: Session not terminated after logout CVE-2019-14826 Note that Nessus has not tested for this issue but has...