MiracleLinux 8 : zziplib-0.13.68-13.el8 (AXSA:2024-8177:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8177:02 advisory. zziplib: invalid memory access at zzipdiskentrytofileheader in mmapped.c CVE-2020-18770 Tenable has extracted the preceding description block directly from t...

MiracleLinux 8 : kernel-4.18.0-553.27.1.el8_10 (AXSA:2024-9028:36)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9028:36 advisory. kernel: net/bluetooth: race condition in conninfomin,maxageset CVE-2024-24857 kernel: dmaengine: fix NULL pointer in channel unregistration function...

MiracleLinux 9 : firefox-115.5.0-1.el9_3.ML.1 (AXSA:2023-7215:44)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7215:44 advisory. Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer CVE-2023-6204 Mozilla: Use-after-free in MessagePort::Entangled CVE-2023-6205 Mozilla:...

MiracleLinux 9 : net-snmp-5.9.1-13.el9_4.3 (AXSA:2024-8863:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8863:05 advisory. net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. CVE-2022-24805 : net-snmp:...

MiracleLinux 8 : vim-8.0.1763-16.el8.4 (AXSA:2022-3035:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3035:01 advisory. vim: heap-based buffer overflow in winredrstatus in drawscreen.c CVE-2021-3872 vim: illegal memory access in findstartbrace in cindent.c when...

MiracleLinux 9 : zziplib-0.13.71-11.el9 (AXSA:2024-7802:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7802:01 advisory. zziplib: invalid memory access at zzipdiskentrytofileheader in mmapped.c CVE-2020-18770 Tenable has extracted the preceding description block directly from t...

MiracleLinux 7 : kernel-3.10.0-1160.62.1.el7 (AXSA:2022-3142:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3142:06 advisory. kernel: use-after-free in RDMA listen CVE-2021-4028 kernel: fget: check that the fd still exists after getting a ref to it CVE-2021-4083 Tenable has...

MiracleLinux 7 : tigervnc-1.8.0-31.0.1.el7.AXS7 (AXSA:2024-7502:06)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7502:06 advisory. xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer CVE-2023-6816 xorg-x11-server: reattaching to different master devi...

Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.170 fixes various security issues The following security issues were fixed: CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 bsc1249242. CVE-2022-50327: ACPI: processor: idle: Che...

kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

A flaw was found in the Linux kernel’s ASoC Intel bytcrrt5640 driver. When an invalid value is passed via the driver’s “quirk” input option, the driver merely logs an error and retains the invalid value, rather than correcting it. This can result in out-of-bounds OOB memory access...

kernel: ipv6: Fix out-of-bounds access in ipv6_find_tlv()

An out of bounds OOB memory access flaw was found in the Linux kernel's ipv6 network subsystem. This could allow a local attacker to crash the system or leak kernel internal information...

MiracleLinux 4 : kernel-2.6.32-431.29.2.el6 (AXSA:2014-565:05)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-565:05 advisory. Description : The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of...

MiracleLinux 8 : kernel-4.18.0-348.20.1.el8_5 (AXSA:2022-3099:05)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3099:05 advisory. kernel: improper initialization of the flags member of the new pipebuffer CVE-2022-0847 kernel: Use After Free in unixgc which could result in a loc...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the FindUVChannels function. An attacker can cause a crash or unintended behavior by triggering access to memory after it has been freed. Remediation There is no fixed version for Assimp. References - GitHub Issue -...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the opencc::MaxMatchSegmentation and Conversion::Convertconst char functions. An attacker can achieve unauthorized access to memory and potentially execute arbitrary code by providing specially crafted inp...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the opencc::MaxMatchSegmentation and Conversion::Convertconst char functions. An attacker can achieve unauthorized access to memory and potentially execute arbitrary code by providing specially crafted inp...

Chromium: CVE-2026-0899 Out of bounds memory access in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

RDMA/irdma: avoid invalid read in irdma_net_event

...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003972 advisory. A memory leak flaw was found in the Linux kernels DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw allows a local user to read random memory from the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001311)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001311 advisory. An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.14. A denial of service out-of- bounds memory access and BUG can occur upon encountering an...