Apple iTunes < 12.13.3 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.13.3. It is, therefore, affected by multiple vulnerabilities as referenced in the 121328 advisory. - A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 f...

SUSE SLES12: libpython3_6m1_0 / libpython3_6m1_0-32bit / python36 / etc (SUSE-SU-2024:3430-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3430-1 advisory. - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. bsc1230227 Tenable has extracted the preceding...

Fedora 39 : ruby (2024-2fb325d068)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2fb325d068 advisory. Upgrade to Ruby 3.2.5. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

ClamAV < 0.103.12, 1.0.0 < 1.0.7, 1.1.0 < 1.3.2, 1.4.0 < 1.4.1 System File Corruption

The ClamAV reported version is 103.12, 1.0.x 1.0.7, 1.1.0 x 1.3.2, or 1.4.0 1.4.1 It is, therefore, affected by a vulnerability in the ClamD service module, where an attacker could to corrupt a critical system file by appending ClamD log messages after restart. Note that Nessus has not tested for...

EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2024-2433)

According to the versions of the dnsmasq package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery.CVE-2023-49441 Tenable has extracted the preceding description block directly from...

openSUSE 15 Security Update : ntpd-rs (openSUSE-SU-2024:0300-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0300-1 advisory. - Introducing ntpd-rs version 1.2.3 Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that Nessus has...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-42461)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42461 advisory. - In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signature...

Oracle Linux 9 : bubblewrap / and / flatpak (ELSA-2024-6356)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6356 advisory. - Add support for --bind-fd and --ro-bind-fd CVE-2024-42472 flatpak - Backport upstream patches for CVE-2024-42472 Tenable has extracted the preceding descripti...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-devel-32bit / libopenssl3 / etc (SUSE-SU-2024:3105-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3105-1 advisory. - CVE-2024-6119: Fixed denial of service in X.509 name checks bsc1229465 Tenable has extracted the...

AlmaLinux 9 : python3.9 (ALSA-2024:6163)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6163 advisory. cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection CVE-2024-6923 Tenable has extracted the preceding...

AlmaLinux 9 : gvisor-tap-vsock (ALSA-2024:6187)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:6187 advisory. golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm CVE-2024-24783 Tenable has extracted the preceding description block direct...

Fedora 40 : vim (2024-bb4b6da0b6)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bb4b6da0b6 advisory. patchlevel 703 Security fixes for CVE-2024-43374, CVE-2024-43802 Tenable has extracted the preceding description block directly from the Fedora...

AlmaLinux 8 : postgresql:13 (ALSA-2024:6018)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6018 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 Tenable has extracted the preceding description block directly from...

AlmaLinux 8 : postgresql:12 (ALSA-2024:6000)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6000 advisory. postgresql: PostgreSQL relation replacement during pgdump executes arbitrary SQL CVE-2024-7348 Tenable has extracted the preceding description block directly from...

Slackware Linux 15.0 kcron Vulnerability (SSA:2024-240-01)

The version of kcron installed on the remote host is prior to 21.12.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-240-01 advisory. New kcron packages are available for Slackware 15.0 to fix a security issue. Tenable has extracted the preceding description block...

Fedora 40 : iaito / radare2 (2024-a562addefa)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-a562addefa advisory. Bump to version 5.9.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

AlmaLinux 9 : python3.12-setuptools (ALSA-2024:5533)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:5533 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...

AlmaLinux 9 : libreoffice (ALSA-2024:5583)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:5583 advisory. libreoffice: bility to trust not validated macro signatures removed in high security mode CVE-2024-6472 Tenable has extracted the preceding description block...

Rocky Linux 8 : httpd:2.4 (RLSA-2024:5193)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:5193 advisory. httpd: Security issues via?backend applications whose response headers are malicious or exploitable CVE-2024-38476 Tenable has extracted the preceding descriptio...

AlmaLinux 9 : python-setuptools (ALSA-2024:5534)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:5534 advisory. pypa/setuptools: Remote code execution via download functions in the packageindex module in pypa/setuptools CVE-2024-6345 Tenable has extracted the preceding...