AlmaLinux 9 : xorg-x11-server (ALSA-2022:8221)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8221 advisory. - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the...

AlmaLinux 9 : toolbox (ALSA-2022:8098)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8098 advisory. - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if...

AlmaLinux 9 : dovecot (ALSA-2022:8208)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8208 advisory. - An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the same driver and args...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Unbound vulnerability (USN-5732-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5732-1 advisory. It was discovered that Unbound incorrectly handled delegations with a large number of non-responsive nameservers. A remote attacker could...

MariaDB 10.0.0 < 10.0.7 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.7 advisory. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and...

MariaDB 10.1.0 < 10.1.36

The version of MariaDB installed on the remote host is prior to 10.1.36. It is, therefore, affected by a vulnerability as referenced in the 10.1.36 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Connection Handling. Supported versions that are affect...

MariaDB 5.5.0 < 5.5.40 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.40. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.40 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect...

Ubuntu 16.04 ESM : Git vulnerability (USN-5686-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5686-2 advisory. USN-5686-1 fixed several vulnerabilities in Git. This update provides the corresponding fix for CVE-2022-39260 on Ubuntu 16.04 ESM. Tenable has extracted the...

MariaDB 5.5.0 < 5.5.58 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.58 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affecte...

MariaDB 5.5.0 < 5.5.33 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.33. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.33 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.5.x through 5.5.32 and 5.6.x through 5.6.12 allows remote authenticated users t...

MariaDB 5.3.0 < 5.3.8

The version of MariaDB installed on the remote host is prior to 5.3.8. It is, therefore, affected by a vulnerability as referenced in the 5.3.8 advisory. - Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2....

MariaDB 10.0.0 < 10.0.12 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.12 advisory. - Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote...

MariaDB 10.0.0 < 10.0.11 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.11 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affecte...

Debian DSA-5283-1 : jackson-databind - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5283 advisory. - jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. CVE-2020-36518 - In FasterXML...

MariaDB 10.1.0 < 10.1.15 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.15. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.15 advisory. - Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before...

MariaDB 5.5.0 < 5.5.23 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.23. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.23 advisory. - Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a Security Fix, aka Bug...

AlmaLinux 9 : python3.9 (ALSA-2022:8353)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8353 advisory. - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : multipath-tools vulnerabilities (USN-5731-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5731-1 advisory. It was discovered that multipath-tools incorrectly handled symlinks. A local attacker could possibly use this issue, in combinati...

Rocky Linux 8 : bind9.16 (RLSA-2022:6781)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:6781 advisory. - By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to...

Rocky Linux 8 : php:8.0 (RLSA-2022:7624)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7624 advisory. - In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTERVALIDATEFLOAT filter and min/max limits, ...