Oracle Linux 7 : thunderbird (ELSA-2023-1806)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-1806 advisory. 102.10.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 102.10.0-2 - Update to...

Fedora 37 : openssh (2023-1176c8b10c)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1176c8b10c advisory. Avoid possible self-DoS attack Resolves: CVE-2023-25136 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...

Ubuntu 16.04 ESM : ImageMagick vulnerabilities (USN-5855-4)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5855-4 advisory. USN-5855-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

Debian dla-3392 : ruby-rack - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3392 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3392-1 [email protected]...

Fortinet Fortigate Header injection in proxy login page (FG-IR-22-362)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-362 advisory. - A improper neutralization of crlf sequences in http headers 'http response splitting' in Fortinet FortiOS versions 7.2.0...

Fedora 36 : golang (2023-ab5f0c32da)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-ab5f0c32da advisory. go1.19.8 released 2023-04-04 includes security fixes to the go/parser, html/template, mime/multipart, net/http, and net/textproto packages, as well as bug...

CentOS 8 : nodejs:18 (CESA-2023:1583)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:1583 advisory. - The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...

FreeBSD : chromium -- multiple vulnerabilities (6f0327d4-9902-4042-9b68-6fc2266944bc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6f0327d4-9902-4042-9b68-6fc2266944bc advisory. - Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentiall...

Fedora 38 : ghostscript (2023-fbf86d8916)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-fbf86d8916 advisory. Security fix for CVE-2023-28879 ---- set 'a4' as a default in gsinit.ps to fix unrecognized 'Letter' page size 2183166 Tenable has extracted the...

SUSE SLES15: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2023:1844-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1844-1 advisory. Update aws-nitro-enclaves-cli to version 1.2.2git0.4ccc639: CVE-2022-31394: Fixed DoS vulnerability in hyper crate...

FreeBSD : py39-setuptools58 -- denial of service vulnerability (24da150a-33e0-4fee-b4ee-2c6b377d3395)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 24da150a-33e0-4fee-b4ee-2c6b377d3395 advisory. - Python Packaging Authority PyPA setuptools before 65.5.1 allows remote attackers to cause a denial of...

FreeBSD : py39-sqlalchemy12 -- multiple SQL Injection vulnerabilities (d2293e22-4390-42c2-a323-34cca2066000)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d2293e22-4390-42c2-a323-34cca2066000 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Kamailio vulnerabilities (USN-6022-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6022-1 advisory. It was discovered that Kamailio did not properly sanitize SIP messages under certain circumstances. An attacker could use this...

Fedora 36 : xorg-x11-server-Xwayland (2023-239bae4b57)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-239bae4b57 advisory. xwayland 22.1.9 Security fx for CVE-2023-1393 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 36 : xorg-x11-server (2023-fe18ae3e85)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-fe18ae3e85 advisory. Security fix for CVE-2023-1393 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

FreeBSD : py39-redis -- can send response data to the client of an unrelated request (8aa6340d-e7c6-41e0-b2a3-3c9e9930312a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8aa6340d-e7c6-41e0-b2a3-3c9e9930312a advisory. - redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K76964818)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.8.2 / 16.1.3.4 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K76964818 advisory. A DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer.CVE-2023-2235...

RHEL 7 : firefox (RHSA-2023:1791)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1791 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

RHEL 8 : firefox (RHSA-2023:1788)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1788 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

RHEL 9 : firefox (RHSA-2023:1786)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1786 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...