Oracle Linux 8 : gdb (ELSA-2019-3352)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3352 advisory. 8.2-6.el8 - Fix yum vs dnf messaging for RHEL8 RH BZ 1666249: Add gdb-rhbz1666249-suggest-yum-instead-of-dnf.pattch Do not define DNFDEBUGINFOINSTALL for RHEL. ...

Oracle Linux 8 : patch (ELSA-2020-1852)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1852 advisory. - CVE-2019-13636 , Dont follow symlinks unless --follow-symlinks is given Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 7 : mailman (ELSA-2020-1054)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-1054 advisory. - Resolves: 1599692 - Sanitize input on listinfo page CVE-2018-0618 Tenable has extracted the preceding description block directly from the Oracle Linu...

Medium: indent

Issue Overview: GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file. CVE-2023-40305 Affected Packages: indent Issue Correction: Run dnf update indent --releasever 2023.1.20230906 or dnf update --advisory ALAS2023-2023-318 --releasever 2023.1.20230906 t...

Oracle Linux 7 : patch (ELSA-2019-2033)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2033 advisory. - Fixed CVE-2016-10713 - Out-of-bounds access in pchwriteline function - Fixed CVE-2018-6952 - Double free of memory Tenable has extracted the precedin...

Oracle Linux 8 : mailman:2.1 (ELSA-2021-4826)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-4826 advisory. - Fix for CVE-2021-42096 - Fix for CVE-2021-42097 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 7 : glibc (ELSA-2019-2118)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-2118 advisory. - Mention CVE numbers in the .spec file for CVE-2015-8983 and CVE-2015-8984. - CVE-2016-10739: Reject trailing characters in getaddrinfo 1673465 Tenable has...

Fedora 37 : indent (2023-67d8bcb63c)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-67d8bcb63c advisory. This release fixes a heap buffer overwrite in searchbrace CVE-2023-40305 and a heap overread in lexi. Tenable has extracted the preceding descriptio...

Oracle Linux 8 : curl (ELSA-2019-3701)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3701 advisory. - fix SMTP end-of-response out-of-bounds read CVE-2019-3823 - fix NTLMv2 type-3 header stack buffer overflow CVE-2019-3822 - fix NTLM type-2...

SUSE SLED15: gsl_2_4-gnu-hpc / gsl_2_4-gnu-hpc-devel / gsl_2_4-gnu-hpc-doc / etc (SUSE-SU-2023:3527-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3527-1 advisory. - CVE-2020-35357: Fixed a stack out of bounds read in gslstatsquantilefromsorteddata. bsc1214681 Tenable...

Firefox 117 Denial Of Service

This is barely a DoS, but since Chrome has explicit protection against it, we decided to disclose it. If firefox user visits a specially crafted page, then firefox may create many files in /Downloads, The user is notified about this in a small dialog, but there is no option to stop the downloads...

Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2023-2681)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : binutils (ELSA-2019-2075)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2075 advisory. 2.27-41.base.0.1 - Complete the backport of upstream commit a5def14f1ca70e14d9433cb229c9369fa3051598 Add a test for R386GOT32/R386GOT32X IFUNC reloc...

GNU Binutils Denial of Service Vulnerability

GNU Binutils is a set of tools for working with binary files. A denial of service vulnerability exists in GNU Binutils, which stems from an issue with the displaydebugnames function in the readelf tool that can cause reachable assertions to fail. An attacker could exploit this vulnerability to...

GNU Binutils Denial of Service Vulnerability

GNU Binutils is a set of open source tools for working with binaries such as target files, executables, libraries, etc., mainly used in the areas of compilation, debugging, reverse engineering and so on. A denial of service vulnerability exists in GNU Binutils. An attacker can exploit this...

GNU Scientific Library Buffer Overflow Vulnerability

GNU Scientific Library is an open source scientific computing library developed by the GNU organization , mainly used for C/C++ programs , providing mathematical operations , statistical analysis , linear algebra , etc. more than 1,000 functions , applicable to physical simulation , engineering...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : indent (SUSE-SU-2023:3433-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3433-1 advisory. - CVE-2023-40305: Fixed a memory safety issues bug. bsc1214243 Tenable has extracted the preceding...

SUSE SLES12 Security Update : indent (SUSE-SU-2023:3432-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3432-1 advisory. - CVE-2023-40305: Fixed a memory safety issues bug. bsc1214243 Tenable has extracted the preceding description block directly from the SUSE...

GNU Binutils make_tempname function denial of service vulnerability

GNU Binutils is a set of open source tools for working with binaries such as target files, executables, libraries, etc., mainly used in the areas of compilation, debugging, reverse engineering and so on. A denial of service vulnerability exists in GNU Binutils, which stems from a memory leak in t...

Gnu Binutils objdump Out-of-Bounds Read Vulnerability

Gnu Binutils objdump is a command-line tool in the GNU Binutils toolset that is mainly used to analyze binary files e.g., executables, target files, static libraries, etc. and display their detailed information. An out-of-bounds read vulnerability exists in Gnu Binutils objdump, which stems from ...