MiracleLinux 8 : grafana-pcp-5.1.1-2.el8_10.ML.1 (AXBA:2024-8391:04)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXBA:2024-8391:04 advisory. - A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using...

MiracleLinux 7 : bash-4.2.46-34.el7 (AXSA:2020-4537:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4537:01 advisory. bash: BASHCMD is writable in restricted bash shells CVE-2019-9924 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 7 : tcpdump-4.9.2-4.el7.1 (AXSA:2020-040:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-040:01 advisory. tcpdump: Stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap CVE-2018-19519 Tenable has extracted the preceding description block direct...

MiracleLinux 7 : python3-3.6.8-17.el7 (AXSA:2020-630:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-630:02 advisory. python: XSS vulnerability in the documentation XML-RPC server in servertitle field CVE-2019-16935 python: wrong backtracking in...

MiracleLinux 4 : libxml2-2.7.6-21.1.0.2.AXS4 (AXSA:2021-2481:04)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2481:04 advisory. libxml2: Use after free via namespace node in XPointer ranges CVE-2016-4658 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : gfbgraph-0.2.4-1.el8.ML.1 (AXSA:2022-3332:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-3332:02 advisory. gfbgraph: missing TLS certificate verification CVE-2021-39358 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : socat-1.7.3.2-2.el7 (AXBA:2017-1813:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXBA:2017-1813:01 advisory. - The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or crash...

MiracleLinux 4 : expat-2.0.1-11.AXS4 (AXSA:2012-577:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-577:01 advisory. This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers wi...

MiracleLinux 4 : bind-9.8.2-0.68.8.0.2.rc1.AXS4 (AXBA:2021-1480:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2021-1480:02 advisory. - In BIND 9.0.0 - 9.11.21, 9.12.0 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.9.3-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the...

MiracleLinux 3 : apr-1.2.7-11.AXS3.4 (AXSA:2011-195:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-195:01 advisory. The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many...

MiracleLinux 8 : nodejs:10 (AXSA:2021-1558:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1558:01 advisory. nodejs: HTTP2 'unknownProtocol' cause DoS by resource exhaustion CVE-2021-22883 nodejs: DNS rebinding in --inspect CVE-2021-22884 Tenable has...

MiracleLinux 7 : firefox-78.9.0-1.0.1.el7.AXS7 (AXSA:2021-1622:09)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1622:09 advisory. Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read CVE-2021-23981 Mozilla: Memory safety bugs fixed in Firefox ...

MiracleLinux 8 : libreswan-3.29-7.el8 (AXSA:2020-374:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-374:02 advisory. libreswan: DoS attack via malicious IKEv1 informational exchange message CVE-2020-1763 Tenable has extracted the preceding description block directly from the...

MiracleLinux 4 : vino-2.28.1-9.AXS4 (AXSA:2014-070:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2014-070:01 advisory. Vino is a VNC server for GNOME. It allows remote users to connect to a running GNOME session using VNC. Security issues fixed with this release: CVE-2013-5745...

MiracleLinux 4 : libexif-0.6.21-6.AXS4 (AXSA:2020-137:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-137:01 advisory. libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS CVE-2020-13112 Tenable has extracted the preceding...

MiracleLinux 3 : geronimo-tomcat6-jee5-2.2-1.AXS3 (AXSA:2010-309:01)

The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2010-309:01 advisory. The goal of the Geronimo project is to produce a server runtime framework that pulls together the best Open Source alternatives to create runtimes th...

MiracleLinux 7 : java-1.8.0-openjdk-1.8.0.322.b06-1.el7 (AXSA:2022-3022:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3022:01 advisory. OpenJDK: Incomplete deserialization class filtering in ObjectInputStream Serialization, 8264934 CVE-2022-21248 OpenJDK: Insufficient URI checks in t...

MiracleLinux 3 : freetype-2.2.1-28.1.0.1.AXS3 (AXSA:2010-498:04)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2010-498:04 advisory. The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments...

MiracleLinux 8 : ghostscript-9.27-1.el8 (AXSA:2021-1898:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1898:02 advisory. ghostscript: use-after-free vulnerability in igcrelocstructptr could result in DoS CVE-2020-14373 ghostscript: buffer overflow in lprnisblack in...

MiracleLinux 7 : httpd24-httpd-2.4.34-22.el7.1 (AXSA:2021-2460:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2460:01 advisory. httpd: modproxy: SSRF via a crafted request uri-path containing unix: CVE-2021-40438 Tenable has extracted the preceding description block directly from the...