openSUSE 15 Security Update : nginx (openSUSE-SU-2021:1815-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1815-1 advisory. - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause...

openSUSE 15 Security Update : jetty-minimal (openSUSE-SU-2021:2005-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2005-1 advisory. - In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a...

openSUSE 15 Security Update : lz4 (openSUSE-SU-2021:1825-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1825-1 advisory. - There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leadin...

Ubuntu 20.04 LTS : libslirp vulnerabilities (USN-5009-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5009-1 advisory. Qiuhao Li discovered that libslirp incorrectly handled certain header data lengths. An attacker inside a guest could possibly use this issue to leak...

SUSE SLES15 Security Update : nodejs10 (SUSE-SU-2021:2353-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2353-1 advisory. Update nodejs10 to 10.24.1. Including fixes for - CVE-2021-22918: libuv upgrade - Out of bounds read bsc1187973 - CVE-2021-27290:...

Serv-U FTP Server <= 15.2.3 Hotfix 1 Memory Escape Vulnerability

According to its banner, the installed version of Serv-U is a version prior to 15.2.3 Hotfix 2. It is, therefore, affected memory escape vulnerability. An unauthenticated remote attacker who successfully exploited this vulnerability could run arbitrary code with privileges, which could then insta...

Debian DLA-2708-1 : php7.0 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2708 advisory. Several vulnerabilities were discovered in php5, a server-side, HTML-embedded scripting language. An attacker could cause denial of service DoS, memory corruption...

SUSE SLES11: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2021:14764-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:14764-1 advisory. The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were...

Wireshark 3.4.x < 3.4.7 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.4.7. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.4.7 advisory. - Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet...

Juniper Junos OS Multiple Vulnerabilities (JSA11207)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11207 advisory. - A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially ma...

Wireshark 3.2.x < 3.2.15 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.2.15. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.15 advisory. - Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or...

Juniper Junos OS Vulnerability (JSA11181)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11181 advisory. - An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon l2cpd of Juniper Networks Junos OS and Junos ...

Apple iOS < 13.1 Multiple Vulnerabilities (HT210603)

Binary data appleios131check.nbin...

Juniper Junos OS Vulnerability (JSA11179)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11179 advisory. - On Juniper Networks Junos OS Evolved devices where ntp is enabled a crafted malicious authenticated mode 6 packet from a permitted network address can trigger a NULL point...

Amazon Linux AMI : nss (ALAS-2021-1518)

The version of nss installed on the remote host is prior to 3.53.1-7.85. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1518 advisory. A flaw was found in the way NSS handled CCS ChangeCipherSpec messages in TLS 1.3. This flaw allows a remote attacker to send multipl...

Amazon Linux AMI : graphviz (ALAS-2021-1513)

The version of graphviz installed on the remote host is prior to 2.38.0-18.52. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1513 advisory. A flaw was found in graphviz. A wrong assumption in recordinit function leads to an off-by-one write in parsereclbl function,...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9351)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9351 advisory. - Bluetooth: verify AMP hcichan before ampdestroy Archie Pusaka Orabug: 32912101 CVE-2021-33034 - bluetooth: eliminate the potential race condition whe...

openSUSE 15 Security Update : gstreamer-plugins-bad (openSUSE-SU-2021:1012-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1012-1 advisory. - A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the...

Amazon Linux AMI : curl (ALAS-2021-1509)

The version of curl installed on the remote host is prior to 7.61.1-12.98. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1509 advisory. It was discovered that libcurl did not remove authentication credentials from URLs when automatically populating the...

Amazon Linux AMI : postgresql92 (ALAS-2021-1519)

The version of postgresql92 installed on the remote host is prior to 9.2.24-3.67. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1519 advisory. A flaw was discovered in postgresql where arbitrary SQL statements can be executed given a suitable SECURITY DEFIN...