SUSE SLES12 Security Update : shadow (SUSE-SU-2023:2067-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2067-1 advisory. - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn bsc1210507. Tenable has extracted the preceding description block directl...

SUSE SLED15: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-devel-32bit / etc (SUSE-SU-2023:2053-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2053-1 advisory. - CVE-2023-29469: Fixed inconsistent result when hashing empty strings bsc1210412. -...

openSUSE 15 Security Update : liferea (openSUSE-SU-2023:0096-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0096-1 advisory. - A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function updatejobrun of the file src/update.c of th...

SUSE SLES15 / openSUSE 15 Security Update : libtpms (SUSE-SU-2023:2051-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2051-1 advisory. - CVE-2023-1017: Fixed out-of-bounds write in CryptParameterDecryption bsc1206022. - CVE-2023-1018: Fixed out-of-boun...

SUSE SLES12: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-doc / etc (SUSE-SU-2023:2054-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2054-1 advisory. - CVE-2023-29469: Fixed inconsistent result when hashing empty strings bsc1210412. - CVE-2023-28484: Fixed NULL pointer dereference...

Fedora 38 : xen (2023-d28433ead1)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-d28433ead1 advisory. x86 shadow paging arbitrary pointer dereference XSA-430, CVE-2022-42335 Tenable has extracted the preceding description block directly from the Fedora securi...

NVIDIA CUDA Toolkit < 12.1 Update 1 Multiple Vulnerabilities

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.1 Update 1. It is, therefore, affected by multiple vulnerabilities: - NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a use...

Adobe Illustrator 26.x < 26.1.0 A Vulnerability (APSB22-15)

The version of Adobe Illustrator installed on the remote Windows host is prior to 26.1.0. It is, therefore, affected by a vulnerability as referenced in the apsb22-15 advisory. - Adobe Illustrator version 26.0.3 and earlier is affected by a buffer overflow vulnerability due to insecure handling o...

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP4) (SUSE-SU-2023:2035-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2035-1 advisory. This update for the Linux Kernel 5.14.21-15040022 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race...

Microsoft Edge (Chromium) < 112.0.1722.58 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 112.0.1722.58. It is, therefore, affected by multiple vulnerabilities as referenced in the April 21, 2023 advisory. - Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a...

FreeBSD : element-web -- matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting (c676bb1b-e3f8-11ed-b37b-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c676bb1b-e3f8-11ed-b37b-901b0e9408dc advisory. - matrix-react-sdk is a react-based SDK for inserting a Matrix chat/VoIP client into a web page. Prior ...

Rocky Linux 8 : kernel-rt (RLSA-2023:1584)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:1584 advisory. - A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress usi...

openSUSE 15 Security Update : jettison (SUSE-SU-2023:1948-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:1948-1 advisory. Upgrade to version 1.5.4: - CVE-2023-1436: Fixed infinite recursion triggered when constructing a JSONArray from a Collection bsc1209605. Tenable has extract...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Apache Commons Net vulnerability (USN-6037-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6037-1 advisory. ZeddYu Lu discovered that the FTP client from Apache Commons Net trusted the host from PASV responses by default. A remote...

RHEL 9 : kernel-rt (RHSA-2023:1980)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1980 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

RHEL 9 : haproxy (RHSA-2023:1978)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1978 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy...

SUSE SLES15 Security Update : giflib (SUSE-SU-2023:1970-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1970-2 advisory. - CVE-2019-15133: Fixed a divide-by-zero exception in the decoder function DGifSlurp in dgiflib.c if the height field of the...

SUSE SLES12 Security Update : libmicrohttpd (SUSE-SU-2023:1944-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1944-1 advisory. - CVE-2023-27371: Fixed parser bug that could be used to crash servers using the MHDPostProcessor bsc1208745. Tenable has extracted the...

AlmaLinux 9 : webkit2gtk3 (ALSA-2023:1918)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:1918 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS...

Fedora 37 : mod_security (2023-09f0496e60)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-09f0496e60 advisory. - new version 2.9.7 - switch to PCRE2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...