Fedora 36 : trafficserver (2022-489ea47e69)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-489ea47e69 advisory. Update to 9.1.4, resolves CVE-2022-32749, CVE-2022-37392, CVE-2022-40743 Tenable has extracted the preceding description block directly from the...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : vim (SUSE-SU-2022:4631-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4631-1 advisory. Updated to version 9.0.1040: - CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742...

SUSE SLES15: freeradius-server / freeradius-server-devel / freeradius-server-doc / etc (SUSE-SU-2022:4622-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4622-1 advisory. - CVE-2022-41859: Fixes an information leakage in EAP-PWD bsc1206204. - CVE-2022-41860: Fixes a crash on unknown opti...

FreeBSD : netdata -- multiple vulnerabilities with streaming (4b60c3d9-8640-11ed-a762-482ae324f959)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4b60c3d9-8640-11ed-a762-482ae324f959 advisory. - Netdata reports: GHSA-xg38-3vmw-2978: Netdata Streaming Alert Command Injection GHSA-jx85-39cw-66f2:...

GLSA-202212-06 : OpenSSH: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202212-06 OpenSSH: Multiple Vulnerabilities - DISPUTED scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor...

openSUSE 15 Security Update : vlc (openSUSE-SU-2022:10252-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10252-1 advisory. - In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This could lea...

Fedora 36 : libtar (2022-ccc68b06cc)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ccc68b06cc advisory. - fix use-after-free bugs introduced by incorrect memleak fixes CVE-2021-33640 Tenable has extracted the preceding description block directly from t...

Fedora 36 : xorg-x11-server (2022-dd3eb7e0a8)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-dd3eb7e0a8 advisory. Fix buggy patch to CVE-2022-46340 ---- CVE fix for: CVE-2022-4283, CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343, CVE-2022-46344...

Fedora 36 : mod_auth_openidc (2022-6beaa3bd0c)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6beaa3bd0c advisory. CVE-2022-23527 modauthopenidc: Open Redirect in oidcvalidateredirecturl using tab character Tenable has extracted the preceding description block...

Fedora 36 : python3-docs / python3.10 (2022-e699dd5247)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-e699dd5247 advisory. Update to 3.10.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 35 : pypy3.7 (2022-01d5789c08)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-01d5789c08 advisory. Backport fix for CVE-2021-28861 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2022-355-01)

The version of mozilla-thunderbird installed on the remote host is prior to 102.6.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-355-01 advisory. - A file with a long filename could have had its filename truncated to remove the valid extension, leaving a malicious...

Fedora 36 : mingw-binutils (2022-19538a3732)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-19538a3732 advisory. Backport fixes for CVE-2021-3826 and CVE-2022-38533. Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 35 : advancecomp (2022-99c00af79f)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-99c00af79f advisory. Security fix for CVE-2022-35014, CVE-2022-35015, CVE-2022-35016, CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020 Tenable has extracte...

Fedora 36 : glances (2022-e016e6f445)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e016e6f445 advisory. Update to 3.3.0.1 and CVE-2022-25844 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

Fedora 36 : booth (2022-6744980220)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6744980220 advisory. Remove Alias directive from [email protected] unit file ---- Security fix for CVE-2022-2553 Tenable has extracted the preceding description block...

Fedora 36 : python3.8 (2022-6d51289820)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-6d51289820 advisory. Update 3.8.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issu...

Fedora 36 : pypy3.8 (2022-15f1aa7dc7)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-15f1aa7dc7 advisory. Backport fix for CVE-2021-28861 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 36 : drupal7 (2022-9d655503ea)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-9d655503ea advisory. - 7.92 - 7.91 - SA-CORE-2022-012 / CVE-2022-25275 - 7.90 - 7.89 - 7.88 - SA-CORE-2022-003 / CVE-2022-25271 - 7.87 - 7.86 - SA-CORE-2022-001 /...

Fedora 35 : python3.8 (2022-e1ce71ff40)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e1ce71ff40 advisory. Update to 3.8.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...