CBL Mariner 2.0 Security Update: kernel (CVE-2024-23849)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23849 advisory. - In rdsrecvtracklatency in net/rds/afrds.c in the Linux kernel through 6.7.1, there is an off-by-one error fo...

CBL Mariner 2.0 Security Update: httpd / mod_http2 (CVE-2024-27316)

The version of httpd / modhttp2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27316 advisory. - HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to genera...

CBL Mariner 2.0 Security Update: kernel (CVE-2010-0309)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2010-0309 advisory. - The pitioportread function in the Programmable Interval Timer PIT emulation in i8254.c in KVM 83 does not...

CBL Mariner 2.0 Security Update: httpd (CVE-2023-38709)

The version of httpd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38709 advisory. - Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2024-36008)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36008 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv4: check for NULL id...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-0646)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0646 advisory. - An out-of-bounds memory write flaw was found in the Linux kernel's Transport Layer Security functionality in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-21803)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21803 advisory. - Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM bluetooth modules allows Local...

CBL Mariner 2.0 Security Update: kernel (CVE-2019-3819)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-3819 advisory. - A flaw was found in the Linux kernel in the function hiddebugeventsread in drivers/hid/hid-debug.c file which...

CBL Mariner 2.0 Security Update: kernel (CVE-2010-0298)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2010-0298 advisory. - The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in...

Intel VTune Profiler < 2024.1 Privilege Escalation

The version of Intel VTune Profiler installed on the remote host is prior to 2024.1. It is, therefore, affected by a privilege escalation vulnerability. - Uncontrolled search path in some IntelR VTuneTM Profiler software before versions 2024.1 may allow an authenticated user to potentially enable...

OpenTelemetry Collector < 0.107.0 Timing Discrepancy

The OpenTelemetry Collector running on the remote host is prior to 0.107.0. It is, therefore, affected by a timing discrepancy vulnerability, outlined below: The bearertokenauth extension's server authenticator performs a simple, non-constant time string comparison of the received & configured...

Fedora 40 : 389-ds-base (2024-ac07913be8)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ac07913be8 advisory. Changelog Tue Jul 30 2024 Viktor Ashirov - 3.0.4-2 - Replace lmdb with lmdb-libs in Requires Tue Jul 30 2024 Viktor Ashirov - 3.0.4-1 - Update to...

ManageEngine ADAudit Plus < Build 8003 Multiple Vulnerabilities

The version of ManageEngine ADAudit Plus installed on the remote host is prior to build 8003. It is, therefore, affected by multiple vulnerabilities. - Zohocorp ManageEngine ADAudit Plus versions below 8003 are vulnerable to authenticated SQL Injection in aggregate reports' search option...

Adobe Substance 3D Stager < 3.0.3 (apsb24-60.)

The version of Adobe Substance 3D Stager installed on the remote host is prior to 3.0.3. It is, therefore, affected by a vulnerability as referenced in the apsb24-60. advisory. Adobe has released an update for Adobe Substance 3D Stager.   This update addresses a critical vulnerabili...

RHEL 8 : grafana (RHSA-2024:5291)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5291 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang: net:...

RHEL 8 : krb5 (RHSA-2024:5312)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5312 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending...

Security Updates for Azure CycleCloud (August 2024)

The Azure CycleCloud product is missing security updates. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists due to a disclosure of the storage credentials. An authenticated, remote attacker can exploit this to bypass authentication and...

KB5041782: Windows 10 LTS 1507 Security Update (August 2024)

The remote Windows host is missing security update 5041782. It is, therefore, affected by multiple vulnerabilities - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value, allocating a smaller than neede...

Adobe Illustrator < 27.9.5 / 28.0 < 28.6 Multiple Vulnerabilities (APSB24-45)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.5, 28.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-45 advisory. - Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that...

KB5041828: Windows Server 2012 R2 Security Update (August 2024)

The remote Windows host is missing security update 5041828. It is, therefore, affected by multiple vulnerabilities - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value, allocating a smaller than neede...