RHEL 9 : galera, mariadb, and mysql-selinux (RHSA-2022:5948)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5948 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded ...

VMware Workspace One Access / VMware Identity Manager Multiple Vulnerabilities (VMSA-2022-0021)

The VMware Workspace One Access formerly VMware Identity Manager application running on the remote host is affected by the following vulnerabilities: - An authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain...

KB5016627: Windows Server 2022 Security Update (August 2022)

The remote Windows host is missing security update 5016627. It is, therefore, affected by multiple vulnerabilities - Windows Point-to-Point Protocol PPP Denial of Service Vulnerability CVE-2022-35747, CVE-2022-35769 - Windows Point-to-Point Protocol PPP Remote Code Execution Vulnerability...

SUSE SLES12 Security Update : kernel (Live Patch 27 for SLE 12 SP4) (SUSE-SU-2022:2697-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2697-1 advisory. This update for the Linux Kernel 4.12.14-9599 fixes several issues. The following security issues were fixed: - CVE-2022-1679: Fixed a...

Debian DSA-5202-1 : unzip - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5202 advisory. Sandipan Roy discovered two vulnerabilities in InfoZIP's unzip program, a de-archiver for .zip files, which could result in denial of service or potentially the...

Adobe Illustrator < 25.4.7 / 26.0.0 < 26.4.0 Multiple Vulnerabilities (APSB22-41)

The version of Adobe Illustrator installed on the remote Windows host is prior to 25.4.7, 26.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-41 advisory. - Adobe Illustrator versions 26.3.1 and earlier and 25.4.6 and earlier are affected by a Use After Free...

MariaDB 10.5.0 < 10.5.17 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.5.17. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.5.17 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a...

Oracle Linux 8 : vim (ELSA-2022-5813)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5813 advisory. - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vimregsubboth in regexp.c Tenable has extracted the preceding...

SUSE SLES15 / openSUSE 15 Security Update : buildah (SUSE-SU-2022:2680-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2680-1 advisory. - CVE-2022-27651: Fixed incorrect default inheritable capabilities for linux container bsc1197870. Update to version 1.25.1...

SUSE SLES12 Security Update : wavpack (SUSE-SU-2022:2682-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2682-1 advisory. - CVE-2022-2476: Fixed a Null pointer dereference in wvunpack bsc1201716. Tenable has extracted the preceding description block directly fro...

SUSE SLES12 Security Update : dpkg (SUSE-SU-2022:2689-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2689-1 advisory. - CVE-2022-1664: Fixed directory traversal vulnerability in Dpkg::Source::Archive bsc1199944. Tenable has extracted the preceding descriptio...

Amazon Linux AMI : openssl (ALAS-2022-1626)

The version of openssl installed on the remote host is prior to 1.0.2k-16.159. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1626 advisory. A flaw was found in OpenSSL. The issue in CVE-2022-1292 did not find other places in the crehash script where it possibly pass...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (August 2022)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability that allows the guest VM to allocate resources for which the guest is not authorized, leading to a loss of...

Oracle Linux 8 : 389-ds:1.4 (ELSA-2022-5823)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5823 advisory. - Resolves: Bug 2081008 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database Tenable has extracted the...

SUSE SLED15: libpcre2-16-0 / libpcre2-16-0-32bit / libpcre2-32-0 / etc (SUSE-SU-2022:2649-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2649-1 advisory. - CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode bsc116438...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : NVIDIA graphics drivers vulnerabilities (USN-5547-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5547-1 advisory. Le Wu discovered that the NVIDIA graphics drivers did not properly perform input validation in some situations. A local user coul...

SUSE SLES15 / openSUSE 15 Security Update : postgresql-jdbc (SUSE-SU-2022:2655-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2655-1 advisory. - CVE-2022-26520: Fixed arbitrary File Write Vulnerability bsc1197356 Tenable has extracted the preceding description block...

F5 Networks BIG-IP : BIG-IP APM and F5 SSL Orchestrator vulnerability (K52534925)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5 / 15.1.6.1 / 16.1.3 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K52534925 advisory. - In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when ...

F5 Networks BIG-IP : TMM vulnerability (K16852653)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5 / 15.1.6.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K16852653 advisory. - In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and a...

F5 Networks BIG-IP : BIG-IP HTTP MRF vulnerability (K90024104)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.3.1 / 17.0.0.1 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K90024104 advisory. - In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict ...