Debian DLA-2871-1 : lxml - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2871 advisory. - lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass...

Debian DLA-2869-1 : xorg-server - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2869 advisory. Jan-Niklas Sohn discovered that multiple input validation failures in X server extensions of the X.org X server may result in privilege escalation if the X server ...

Debian DLA-2865-1 : resiprocate - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2865 advisory. - The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory...

Slackware Linux 14.0 / 14.1 / 14.2 / current wpa_supplicant Multiple Vulnerabilities (SSA:2021-362-01)

The version of wpasupplicant installed on the remote host is prior to 2.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2021-362-01 advisory. - hostapd before 2.10 and wpasupplicant before 2.10 allow an incorrect indication of disconnection in certain situations...

Debian DLA-2857-1 : postgis - LTS security update

"The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2857 advisory. - PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted STAsX3D function input, as demonstrated by an abnorma...

openSUSE 15 Security Update : xorg-x11-server (openSUSE-SU-2021:1606-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1606-1 advisory. - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the...

SUSE SLES11 Security Update : openssh-openssl1 (SUSE-SU-2021:14870-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:14870-1 advisory. - CVE-2021-41617: Fixed privilege escalation when AuthorizedKeysCommand/AuthorizedPrincipalsCommand are configured bsc1190975. Tenable has extracted t...

openSUSE 15 Security Update : openssh (openSUSE-SU-2021:4153-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:4153-1 advisory. - ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access o...

openSUSE 15 Security Update : log4j (openSUSE-SU-2021:1605-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1605-1 advisory. - Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 did not protect from uncontrolled recursion from self-referential lookups. This...

openSUSE 15 Security Update : logback (openSUSE-SU-2021:1613-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1613-1 advisory. - Apache Log4j2 2.0-beta9 through 2.12.1 and 2.13.0 through 2.15.0 JNDI features used in configuration, log messages, and parameters do not protect...

Adobe Media Encoder < 15.4.3 / 22.0.0 < 22.1.1 Multiple Vulnerabilities (APSB21-118)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 15.4.3, 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-118 advisory. - Adobe Media Encoder versions 22.0, 15.4.2 and earlier are affected by an out-of-bounds read...

Apache 2.4.x >= 2.4.7 / < 2.4.52 Forward Proxy DoS / SSRF

The version of Apache httpd installed on the remote host is equal to or greater than 2.4.7 and prior to 2.4.52. It is, therefore, affected by a flaw related to acting as a forward proxy. A crafted URI sent to httpd configured as a forward proxy ProxyRequests on can cause a crash NULL pointer...

Amazon Linux 2 : aws-kinesis-agent (ALAS-2021-1733)

The version of aws-kinesis-agent installed on the remote host is prior to 2.0.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1733 advisory. A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non- default Pattern Layo...

Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2021-1732)

The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.1-13. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1732 advisory. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-13 will now explicitly mimic...

Adobe Premiere Pro < 15.4.3 / 22.0.0 < 22.1.1 Multiple Vulnerabilities (APSB21-117)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 15.4.3, 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-117 advisory. - Adobe Premiere Pro versions 22.0 and earlier and 15.4.2 and earlier are affected by an out-of-bound...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2021:4120-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4120-1 advisory. - CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request...

Adobe Prelude < 22.1.1 Multiple Vulnerabilities (APSB21-114)

The version of Adobe Prelude installed on the remote Windows host is prior to 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-114 advisory. - Adobe Prelude version 22.1.1 and earlier is affected by an Out-of-bounds Write vulnerability due to insecure...

Adobe Premiere Rush <= 1.5.16 Multiple Vulnerabilities (APSB21-101)

The version of Adobe Premiere Rush installed on the remote Windows host is version less than or equal to 1.5.16. It is, therefore, affected by multiple vulnerabilities, including the following: - Arbitrary code execution vulnerabilities caused by accessing memory locations after the end of a...

Adobe After Effects < 18.4.3 / 22.0.0 < 22.1.1 Multiple Vulnerabilities (APSB21-115)

The version of Adobe After Effects installed on the remote Windows host is prior to 18.4.3, 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-115 advisory. - Adobe After Effects versions 22.0 and earlier and 18.4.2 and earlier are affected by an...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2021:4124-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4124-1 advisory. - CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request...