SUSE SLES12 Security Update : giflib (SUSE-SU-2024:1622-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1622-1 advisory. - CVE-2018-11490: Fixed a heap-based buffer overflow in DGifDecompressLine bsc1094832 - CVE-2021-40633: Fixed a denial of service...

Rocky Linux 9 : gstreamer1-plugins-base (RLSA-2024:2302)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2302 advisory. - GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code...

Adobe Animate 23.x < 23.0.6 / 24.x < 24.0.3 Multiple Vulnerabilities (APSB24-36)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.6 or 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-36 advisory. - Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write...

RHEL 7 : libvncserver (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libvncserver: Multiple heap out-of-bound writes in VNC client code Incomplete fix for CVE-2018-20019...

RHEL 8 : opencv (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - opencv: out-of-bounds read in function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp lead...

RHEL 7 : yajl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 -...

RHEL 8 : iscsi-initiator-utils (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - iscsi-initiator-utils: Heap-based buffer overflow in processiscsidbroadcast CVE-2017-17840 Note that Nessus has not...

RHEL 6 : libiberty (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libiberty: Memory leak in demangletemplate function resulting in a denial of service CVE-2018-20657 - The...

RHEL 6 : gstreamer-plugins-base (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gstreamer-plugins-base: out-of-bounds read when handling certain ID3v2 tags CVE-2021-3522 - The...

RHEL 8 : wildmidi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - wildmidi: Heap-based Buffer Overflow in WildMidiOpen CVE-2017-1000418 Note that Nessus has not tested for this issu...

RHEL 6 : giflib (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - giflib: out-of-bounds read in DumpScreen2RGB in gif2rgb.c in gif2rgb tool CVE-2020-23922 - giflib:...

RHEL 5 : libxcursor (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libXcursor: file.c: heap-based buffer overflow when reading/creating images CVE-2017-16612 Note that Nessus has not...

RHEL 7 : libyaml (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libyaml: Heap-Based Buffer Overflow CVE-2024-3205 Note that Nessus has not tested for this issue but has instead...

RHEL 7 : libsndfile (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libsndfile: Heap-based Buffer Overflow in psfbinheaderwritef function in common.c CVE-2017-12562 - An out...

RHEL 6 : yajl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 Note that...

RHEL 9 : vim (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - vim: buffer overflow CVE-2020-20703 - vim: Heap based buffer overflow in findfile.c CVE-2021-3973 - vim i...

RHEL 7 : libmspack,_clamav (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libmspack, clamav: heap-based buffer overflow in mspack/lzxd.c CVE-2017-6419 - The cabdreadstring functio...

RHEL 6 : busybox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - busybox: heap-based buffer overflow in OPTION6RD parsing CVE-2016-2148 - Integer overflow in the DHCP...

RHEL 6 : openjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openjpeg: Stack-buffer overflow in the pgxtoimage function CVE-2017-17479 - openjpeg: heap-based buffer...

RHEL 7 : openjpeg (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openjpeg: Stack-buffer overflow in the pgxtoimage function CVE-2017-17479 - openjpeg: heap-based buffer...