SUSE SLES15: libostree / libostree-1-1 / libostree-devel / etc (SUSE-SU-2022:3455-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3455-1 advisory. - CVE-2014-9862: Fixed arbitrary write on heap vulnerability bsc1201770. Tenable has extracted the preceding description block directly from...

PHP 7.4.x < 7.4.32 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 7.4.32. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 7.4.32 advisory. - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files,...

Slackware Linux 15.0 xorg-server-xwayland Multiple Vulnerabilities (SSA:2022-271-01)

The version of xorg-server-xwayland installed on the remote host is prior to 21.1.4. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-271-01 advisory. - A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry...

Oracle Linux 9 : firefox (ELSA-2022-6700)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-6700 advisory. 102.3.0-6.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 102.3.0-6 - Update to 102.3...

Apache Tomcat 10.1.0.M1 < 10.1.0.M14

The version of Tomcat installed on the remote host is prior to 10.1.0.M14. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.1.0-m14security-10 advisory. - The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to...

SolarWinds Orion Platform < 2022.3 Multiple Vulnerabilities

The version of SolarWinds Orion Platform installed on the remote host is prior to 2022.3. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20223 advisory. - A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated...

SUSE SLES12: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2022:3401-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3401-1 advisory. Security issues fixed: - CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C A...

FreeBSD : chromium -- multiple vulnerabilities (18529cb0-3e9c-11ed-9bc7-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 18529cb0-3e9c-11ed-9bc7-3065ec8fd3ec advisory. - Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior t...

SUSE SLES12 Security Update : unzip (SUSE-SU-2022:3386-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3386-1 advisory. - CVE-2022-0530: Fixed SIGSEGV during the conversion of an utf-8 string to a local string bsc1196177. - CVE-2022-0529: Fixed heap...

SUSE SLES12 Security Update : vsftpd (SUSE-SU-2022:3383-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3383-1 advisory. - CVE-2021-3618: Enforced security checks against ALPACA attack PM-3322, bsc1187686, bsc1187678. Bugfixes: - Fixed a seccomp failure in FIPS...

openSUSE 15 Security Update : opera (openSUSE-SU-2022:10130-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10130-1 advisory. - Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a...

Google Chrome < 106.0.5249.61 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 106.0.5249.61. It is, therefore, affected by multiple vulnerabilities as referenced in the 202209stable-channel-update-for-desktop27 advisory. - Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prio...

SUSE SLES15: kernel-livepatch-4_12_14-150000_150_95-default / etc (SUSE-SU-2022:3406-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:3406-1 advisory. This update for the Linux Kernel 4.12.14-15000015095 fixes one issue. The following security issue was fixed: - CVE-2022-39188: Fixed a race condition...

RHEL 8 : thunderbird (RHSA-2022:6716)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6716 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.3.0. Security Fixes: Mozilla:...

GLSA-202209-11 : HarfBuzz: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-11 HarfBuzz: Multiple vulnerabilities - HarfBuzz 2.9.0 has an out-of-bounds write in hbbitsetinvertiblet::set called from hbsparsesett::set and hbsetcopy. CVE-2021-45931 - An integer overflow in the component...

SUSE SLES12: kernel-livepatch-4_12_14-150100_197_111-default / etc (SUSE-SU-2022:3359-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3359-1 advisory. This update for the Linux Kernel 4.12.14-122113 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixe...

GLSA-202209-12 : GRUB: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-12 GRUB: Multiple Vulnerabilities - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or eventually arbitrary code...

SUSE SLED15: libjavascriptcoregtk-4_0-18 / libjavascriptcoregtk-4_0-18-32bit / etc (SUSE-SU-2022:3351-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3351-1 advisory. - CVE-2022-32893: Fixed several crashes and rendering issues bsc1202807. - Fixed WebKitGTK not allow to b...

SUSE SLES12: kgraft-patch-4_12_14-95_105-default / etc (SUSE-SU-2022:3346-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:3346-1 advisory. This update for the Linux Kernel 4.12.14-95105 fixes one issue. The following security issue was fixed: - CVE-2022-39188: Fixed a race condition betwee...

SUSE SLES15 Security Update : freetype2 (SUSE-SU-2022:3252-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3252-2 advisory. - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface bsc1198830. - CVE-2022-27405 Fixed a buffer overflow via a craft...