Azure Linux 3.0 Security Update: kernel (CVE-2024-47695)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47695 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to connum - 1 t...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46819)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46819 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: the warning dereferencing ob...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50024)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50024 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: Fix an unsafe loop on the list The...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26951)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26951 advisory. - In the Linux kernel, the following vulnerability has been resolved: wireguard: netlink: check for...

Azure Linux 3.0 Security Update: libcxx / llvm / rust (CVE-2024-31852)

The version of libcxx / llvm / rust installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31852 advisory. - LLVM before 18.1.3 generates code in which the LR register can be overwritten without data bei...

Azure Linux 3.0 Security Update: boost / cloud-hypervisor-cvm / cmake / erlang / grpc / mariadb / nmap / qt5-qtbase / teckit (CVE-2018-25032)

The version of boost / cloud-hypervisor-cvm / cmake / erlang / grpc / mariadb / nmap / qt5-qtbase / teckit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-25032 advisory. - zlib before 1.2.12 allo...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46759)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46759 advisory. - In the Linux kernel, the following vulnerability has been resolved: hwmon: adc128d818 Fix underflows seen wh...

FreeBSD : nginx-devel -- SSL session reuse vulnerability (9761af78-e3e4-11ef-9f4a-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9761af78-e3e4-11ef-9f4a-589cfc10a551 advisory. The nginx development team reports: This update fixes the SSL session reuse vulnerability. Tenable has...

RHEL 9 : mariadb:10.11 (RHSA-2025:0912)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0912 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fixes: mysql: Client: mysqldump unspecifie...

Security Updates for Microsoft Outlook Products C2R (January 2025)

The Microsoft Outlook Products are missing a security update. It is, therefore, affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Ubuntu 24.10 : rsync vulnerabilities (USN-7206-3)

The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7206-3 advisory. USN-7206-1 fixed vulnerabilities in Ubuntu 14.04 LTS to Ubuntu 24.04 LTS. This update provides the corresponding updates for Ubuntu 24.10. Tenable has...

Fedora 40 : mediawiki (2025-11277f6779)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-11277f6779 advisory. https://lists.wikimedia.org/hyperkitty/list/wikitech- [email protected]/thread/PFTE5RHUERS6KTUGGRZO7XXV5THNJ77E/...

Fedora 41 : mediawiki (2025-25b16d6561)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-25b16d6561 advisory. https://lists.wikimedia.org/hyperkitty/list/wikitech- [email protected]/thread/PFTE5RHUERS6KTUGGRZO7XXV5THNJ77E/...

SAP NetWeaver AS ABAP Privilege Escalation (3537476)

SAP NetWeaver Application Server for ABAP is affected by privilege escalation vulnerability. SAP NetWeaver Application Server ABAP allows allows an authenticated attacker to obtain illegitimate access to the system by exploiting improper authentication checks, resulting in privilege escalation. O...

CBL Mariner 2.0 Security Update: kubernetes (CVE-2024-10220)

The version of kubernetes installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10220 advisory. - The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo...

Fedora 40 : rsync (2025-73c1f25730)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-73c1f25730 advisory. New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747. Tenable has...

Fortinet Fortigate Path traversal in csfd daemon (FG-IR-24-259)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-24-259 advisory. - A improper limitation of a pathname to a restricted directory 'path traversal' in Fortinet FortiRecorder versions...

CBL Mariner 2.0 Security Update: avahi (CVE-2023-38471)

The version of avahi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38471 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the dbussethostname function...

FreeBSD : chromium -- multiple security fixes (e18c5c8d-be01-11ef-8c1c-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e18c5c8d-be01-11ef-8c1c-a8a1599412c6 advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50019)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50019 advisory. - In the Linux kernel, the following vulnerability has been resolved: kthread: unpark only parked kthread...