RHEL 7 : microcode_ctl (RHSA-2021:2302)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2302 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 7 : microcode_ctl (RHSA-2021:2304)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2304 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

RHEL 8 : microcode_ctl (RHSA-2021:2307)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2307 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-devel / etc (SUSE-SU-2021:1904-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1904-1 advisory. - CVE-2021-3185: h264parser: guard against refpicmarkings overflow bsc1181255 Tenable has extracted the preceding description block directly...

RHEL 7 : microcode_ctl (RHSA-2021:2301)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2301 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

SUSE SLED12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2021:1886-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1886-1 advisory. Firefox Extended Support Release 78.11.0 ESR bsc1186696 CVE-2021-29964: Out of bounds-read when parsing a WMCOPYDATA messa...

RHEL 7 : kernel-rt (RHSA-2021:2316)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2316 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

SUSE SLES15 Security Update : pam_radius (SUSE-SU-2021:1896-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:1896-1 advisory. - CVE-2015-9542: pamradius: buffer overflow in password field bsc1163933 Tenable has extracted the preceding description block directly from...

SUSE SLED15: libX11-6 / libX11-6-32bit / libX11-data / libX11-devel / etc (SUSE-SU-2021:1897-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:1897-1 advisory. - Regression in the fix for CVE-2021-31535, causing segfaults for xforms applications like fdesign bsc1186643 Tenable has extracted...

Oracle Linux 7 : samba (ELSA-2021-2313)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2313 advisory. - resolves: 1949444 - Fix CVE-2021-20254 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Adobe Reader < 2017.011.30197 / 2020.004.30005 / 2021.005.20048 Multiple Vulnerabilities (APSB21-37)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2017.011.30197, 2020.004.30005, or 2021.005.20048. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2021.001.20155 and earlier, 2020.001.30025 and earlier and...

Oracle Linux 8 : nginx:1.18 (ELSA-2021-2259)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2259 advisory. 1.18.0-3.1.0.1 - Remove Red Hat references Orabug: 29498217 1:1.18.0-3.1 - Resolves: 1963178 - CVE-2021-23017 nginx:1.18/nginx: Off-by-one in ngxresolvercopy wh...

Adobe Acrobat < 2017.011.30197 / 2020.004.30005 / 2021.005.20048 Multiple Vulnerabilities (APSB21-37)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2017.011.30197, 2020.004.30005, or 2021.005.20048. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2021.001.20155 and earlier, 2020.001.30025 and earlier and...

Adobe Reader < 2017.011.30197 / 2020.004.30005 / 2021.005.20048 Multiple Vulnerabilities (APSB21-37) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2017.011.30197, 2020.004.30005, or 2021.005.20048. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions versions 2021.001.20155 and earlier, 2020.001.30025 and earlier and...

Security Updates for Microsoft Office Products (June 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - Microsoft Excel remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-31939 - Microsoft...

Oracle Linux 7 : thunderbird (ELSA-2021-2263)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-2263 advisory. 78.11.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.11.0-1 - Update to 78.11.0 build1 Tenable has...

RHEL 7 : libwebp (RHSA-2021:2260)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2260 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...

SUSE SLES12 Security Update : kernel (Live Patch 36 for SLE 12 SP3) (SUSE-SU-2021:1865-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1865-1 advisory. This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed: - Fix a kernel warni...

RHEL 7 : thunderbird (RHSA-2021:2263)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2263 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.11.0. Security Fixes: Mozilla:...

Apache 2.4.x < 2.4.47 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is prior to 2.4.47. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.47 changelog: - Unexpected section matching with 'MergeSlashes OFF' CVE-2021-30641 - modauthdigest: possible stack overflow by one nul byte...