AlmaLinux 8 : freetype (ALSA-2022:7745)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7745 advisory. - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface. CVE-2022-27404 ...

Debian dla-3184 : libjettison-java - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3184 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3184-1 [email protected] https://www.debian.org/lts/security/...

AlmaLinux 8 : nodejs:14 (ALSA-2022:7830)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7830 advisory. nodejs: Improper handling of URI Subject Alternative Names CVE-2021-44531 nodejs: Certificate Verification Bypass via String Injection CVE-2021-44532...

AlmaLinux 8 : unbound (ALSA-2022:7622)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7622 advisory. - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the ghost domain names attack. The vulnerability works by...

NewStart CGSL CORE 5.04 / MAIN 5.04 : openssl Vulnerability (NS-SA-2022-0079)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssl packages installed that are affected by a vulnerability: - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a...

Slackware Linux 15.0 / current php Multiple Vulnerabilities (SSA:2022-314-01)

The version of php installed on the remote host is prior to 7.4.33. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-314-01 advisory. - The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allo...

SAP NetWeaver AS ABAP Multiple Vulnerabilities (3256571)

Multiple vulnerabilities may be present in SAP NetWeaver Application Server ABAP, including the following: - Due to insufficient input validation, SAP NetWeaver Application Server ABAP and ABAP Platform allows an attacker with high level privileges to use a remote enabled function to delete a fil...

Debian DSA-5275-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5275 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

Security Updates for Microsoft Exchange Server (Nov 2022)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Nov, 2022 security bulletin. - Microsoft Exchange Server Spoofing Vulnerability CVE-2022-41078, CVE-2022-41079 - Microsoft Exchange...

Ubuntu 16.04 ESM : WavPack vulnerability (USN-5721-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5721-1 advisory. It was discovered that WavPack was not properly performing checks when dealing with memory. If a user were tricked into decompressing a specially crafted WavPack...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:7337)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7337-1 advisory. - a use-after-free in clsroute filter implementation may lead to privilege escalation CVE-2022-2588 - RetBleed Arbitrary Speculative Code Executi...

macOS 13.x < 13.0.1 Multiple Vulnerabilities (HT213504)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.0.1. It is, therefore, affected by multiple vulnerabilities: - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, several intege...

Scientific Linux Security Update : pcs on SL7.x x86_64 (2022:7343)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7343-1 advisory. - rubygem-rack: crafted requests can cause shell escape sequences CVE-2022-30123 - jquery: Prototype pollution in object's prototype leading to...

SUSE SLED15: libprotobuf-lite20 / libprotobuf-lite20-32bit / libprotobuf20 / etc (SUSE-SU-2022:3922-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3922-1 advisory. - CVE-2021-22569: Fixed Denial of Service in protobuf-java in the parsing procedure for binary...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : PHP vulnerabilities (USN-5717-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5717-1 advisory. It was discovered that PHP incorrectly handled certain gzip files. An attacker could possibly use this issue to cause a denial of...

RHEL 8 : container-tools:3.0 (RHSA-2022:7529)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7529 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang:...

Debian dla-3183 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3183 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3183-1 [email protected]...

Oracle Linux 7 : zlib (ELSA-2022-9987)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9987 advisory. 1.2.7-20.0.1 - Resolves: CVE-2022-37434 Orabug: 34752508 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Amazon Linux 2 : curl (ALAS-2022-1875)

The version of curl installed on the remote host is prior to 7.79.1-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1875 advisory. A vulnerability was found in curl. This issue occurs because a malicious server can serve excessive amounts of Set-Cookie:...

Amazon Linux 2 : dhcp (ALAS-2022-1874)

The version of dhcp installed on the remote host is prior to 4.2.5-79. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1874 advisory. An integer overflow vulnerability was found in the DHCP server. When the optioncodehashlookup function is called from...