CBL Mariner 2.0 Security Update: kernel (CVE-2022-34918)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-34918 advisory. - An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nftseteleminit leading t...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3111)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3111 advisory. - An issue was discovered in the Linux kernel through 5.16-rc6. freechargerirq in...

CBL Mariner 2.0 Security Update: nginx / vsftpd (CVE-2021-3618)

The version of nginx / vsftpd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3618 advisory. - ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing...

CBL Mariner 2.0 Security Update: kernel (CVE-2021-4135)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-4135 advisory. - A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver i...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-0266)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0266 advisory. - A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel...

CBL Mariner 2.0 Security Update: curl (CVE-2022-32208)

The version of curl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-32208 advisory. - When curl 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This fl...

CBL Mariner 2.0 Security Update: apr-util (CVE-2022-25147)

The version of apr-util installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-25147 advisory. - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility...

CBL Mariner 2.0 Security Update: pixman (CVE-2022-44638)

The version of pixman installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-44638 advisory. - In libpixman in Pixman before 0.42.2, there is an out-of-bounds write aka heap-based buffer overflow in...

CBL Mariner 2.0 Security Update: libtiff (CVE-2023-0801)

The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0801 advisory. - LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tifunix.c:368, invoked by...

Fedora 37 : vim (2023-d4ebe53978)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d4ebe53978 advisory. The newest upstream commit Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264. Tenable has extracted the preceding description block...

SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2023:0796-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0796-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. -...

Fedora 36 : gnutls / guile-gnutls (2023-4fc4c33f2b)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-4fc4c33f2b advisory. Release of gnutls 3.8.0 fixes CVE-2023-0361 Release of gnutls guile bingings as standalone package. Tenable has extracted the preceding description block...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2023:0781-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0781-1 advisory. - CVE-2023-0512: Fixed a divide By Zero bsc1207780. - CVE-2023-1175: vim: an incorrect calculati...

Fedora 38 : libtpms (2023-64f2a84db1)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-64f2a84db1 advisory. Build of libtpms 0.9.6 with fixes for CVE-2023-1017 & CVE-2023-1018 Tenable has extracted the preceding description block directly from the Fedora...

Ubuntu 20.04 LTS / 22.04 LTS : ImageMagick vulnerabilities (USN-5855-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5855-2 advisory. USN-5855-1 fixed a vulnerability in ImageMagick. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and...

SUSE SLES15 Security Update : python-cryptography (SUSE-SU-2023:0737-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0737-1 advisory. - CVE-2023-23931: Fixed a memory corruption inside Cipher.updateinto via immutable objects bsc1208036. Tenable has extracted the preceding...

Foxit PhantomPDF < 10.1.11 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.11. It is, therefore affected by multiple vulnerabilities: - Addressed a potential issue where the application could be exposed to Use-after-Free vulnerabilit...

SUSE SLES15 / openSUSE 15 Security Update : nodejs18 (SUSE-SU-2023:0738-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0738-1 advisory. Update to NodeJS 18.14.2 LTS: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via...

Fedora 37 : tkimg (2023-f5d075f7f2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f5d075f7f2 advisory. Apply upstream libtiff fix for CVE-2022-4645 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : perl-Net-Server (SUSE-SU-2023:0746-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0746-1 advisory. - CVE-2013-1841: Fixed insufficient hostname access checking bsc808830. Tenable has extracted the precedi...