Oracle Linux 8 : nano (ELSA-2024-6986)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-6986 advisory. 2.9.8-3 - fix incomplete backport of the fix for the emergency file replacement vulnerability RHEL-35236 2.9.8-2 - fix emergency file replacement vulnerability...

Apache Struts 2.0.0 < 2.3.18 RCE (S2-008)

The version of Apache Struts installed on the remote host is prior to 2.3.18. It is, therefore, affected by a vulnerability as referenced in the S2-008 advisory. - The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute...

EulerOS 2.0 SP8 : gnutls (EulerOS-SA-2024-2467)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of...

EulerOS 2.0 SP8 : grpc (EulerOS-SA-2024-2470)

According to the versions of the grpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a...

EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2024-2488)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than...

EulerOS 2.0 SP8 : freerdp (EulerOS-SA-2024-2465)

According to the versions of the freerdp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in...

RHEL 8 : python3 (RHSA-2024:6975)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6975 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

SUSE SLES15 Security Update : kernel (Live Patch 27 for SLE 15 SP4) (SUSE-SU-2024:3365-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3365-1 advisory. This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2024:3384-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3384-1 advisory. - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. bsc1230227 - CVE-2024-7592: quadratic algorith...

Ubuntu 20.04 LTS : Firefox regressions (USN-6992-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6992-2 advisory. USN-6992-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience...

Oracle Linux 9 : golang (ELSA-2024-6913)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6913 advisory. - Rebase to Go1.21.13 to pick the fix for CVE-2024-24791 Tenable has extracted the preceding description block directly from the Oracle Linux security...

GLSA-202409-01 : Portage: Unverified PGP Signatures

The remote host is affected by the vulnerability described in GLSA-202409-01 Portage: Unverified PGP Signatures Multiple vulnerabilities have been discovered in Portage. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Fedora 39 : less (2024-c94f884440)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c94f884440 advisory. Security fix for CVE-2024-32487 - less with LESSOPEN mishandles \n in paths Tenable has extracted the preceding description block directly from the...

Oracle Linux 9 : libreoffice (ELSA-2024-5583)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-5583 advisory. 7.1.8.1-14.0.1 - Replace colors with Oracle colors Orabug: 32120093 - Added the --with-hamcrest option to configure. 7.1.8.1 - Remove Red Hat branding - Change...

FreeBSD : FreeBSD -- bhyve(8) out-of-bounds read access via XHCI emulation (1febd09b-7716-11ef-9a62-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1febd09b-7716-11ef-9a62-002590c1f29c advisory. bhyve can be configured to emulate devices on a virtual USB controller XHCI, such as USB tablet devices...

CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2024-21886)

The version of xorg-x11-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21886 advisory. - A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue...

CBL Mariner 2.0 Security Update: xorg-x11-server (CVE-2024-0409)

The version of xorg-x11-server installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0409 advisory. - A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong typ...

Fedora 39 : expat (2024-527052ab76)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-527052ab76 advisory. Rebase to version 2.6.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 39 : python3-docs / python3.12 (2024-e453a209e9)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-e453a209e9 advisory. This is the sixth maintenance release of Python 3.12 ==================================================== Python 3.12 is the newest major release of...

PDF-XChange Editor < 10.4.0.388 Multiple Vulnerabilities

The version of PDF-XChange Editor installed on the remote Windows host is prior to 10.4.0.388. It is, therefore, affected by multiple vulnerabilities: - A specific flaw exists within the handling of Doc objects. The issue results from the lack of proper validation of user-supplied data, which can...