Fedora 40 : libreoffice (2024-5f94556a31)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5f94556a31 advisory. Patch for kf6/Qt6 scaling ---- Updated conditionals for kf subpackages ---- 24.2.1.2, include kf6. Tenable has extracted the preceding description block...

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2024:1444-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1444-1 advisory. - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies...

Fedora 40 : python3.8 (2023-c69d73674a)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c69d73674a advisory. Automatic update for python3.8-3.8.18-3.fc40. Changelog Mon Dec 18 2023 Lumr Balhar - 3.8.18-3 - Security fix for CVE-2023-27043 rhbz2196193 Tenable has...

Fedora 40 : pgadmin4 (2024-db558f6fb2)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-db558f6fb2 advisory. Fix CVE-2024-28849. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Ubuntu 24.04 LTS. : curl vulnerabilities (USN-6718-3)

The remote Ubuntu 24.04 LTS. host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6718-3 advisory. USN-6718-1 fixed vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 24.04 LTS. Tenable has extracted the preceding...

Fedora 38 : python2.7 (2023-01b481a31e)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-01b481a31e advisory. Automatic update for python2.7-2.7.18-28.fc38. Changelog Mon Dec 19 2022 Charalampos Stratakis - 2.7.18-28 - Security fix for CVE-2022-45061: CPU denial of...

AlmaLinux 8 : libreswan (ALSA-2024:1998)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:1998 advisory. - The Libreswan Project was notified of an issue causing libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use...

Fedora 40 : pgadmin4 / python-jsonformatter (2024-15df3b6d95)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-15df3b6d95 advisory. Update to pgadmin4-8.4. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 40 : cockpit (2024-4e95f130fc)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4e95f130fc advisory. Automatic update for cockpit-314-1.fc40. Changelog for cockpit Thu Mar 28 2024 Packit - 314-1 - Diagnostic reports: Fix command injection...

Fedora 40 : python-cbor2 (2024-619ac47ce9)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-619ac47ce9 advisory. Update to latest upstream release closes rhbz2261550, closes rhbz2245361 Tenable has extracted the preceding description block directly from the Fedora...

Fedora 40 : sudo (2024-57eebd0963)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-57eebd0963 advisory. Automatic update for sudo-1.9.15-1.p5.fc40. Changelog Wed Jan 24 2024 Radovan Sroka - 1.9.15-1 - Rabase to 1.9.15p5 - sudo-1915p5 is available Resolves:...

Amazon Linux AMI : squid (ALAS-2024-1933)

The version of squid installed on the remote host is prior to 3.5.20-17.55. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1933 advisory. Due to chunked decoder lenience Squid is vulnerable to Request/Response smuggling attacks when parsing HTTP/1.1 and ICAP messages...

Fedora 40 : python-reportlab (2024-dc844d0669)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-dc844d0669 advisory. - Release 4.2.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Facade Ignition < 1.16.14 / 2.x < 2.4.2 / 2.5.x < 2.5.2 RCE

The version of Facade Ignition installed of the remote host is prior to 1.16.14, or 2.x prior to 2.4.2, or 2.5.x prior to 2.5.2. It is, therefore, affected by a remote code execution vulnerability. Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attacke...

Fedora 40 : openvswitch (2024-1f26ce7731)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-1f26ce7731 advisory. Update to 3.3.0 Remove network-scripts subpackage starting from Fedora 40 Backport a simple fix to avoid SSL db: implementation test to fail It also...

Fedora 40 : xq (2024-e9ca3462aa)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e9ca3462aa advisory. Automatic update for xq-1.2.4-2.fc40. Changelog Sun Feb 11 2024 Maxwell G - 1.2.4-2 - Rebuild for golang 1.22.0 Sun Feb 11 2024 Mikel Olasagasti...

Fedora 40 : mingw-python-idna (2024-1230cb2cd6)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1230cb2cd6 advisory. Update to idna-3.7. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

Fedora 40 : php-tcpdf (2024-bc7d40eb2e)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-bc7d40eb2e advisory. Version 6.7.4 2024-03-21 - Upgrade tcpdf tag encryption algorithm. ---- Version 6.7.3 2024-03-20 - Fix regression issue 699. ---- Version 6.7.2 2024-03-18 -...

NextChat < 2.11.3 SSRF

The remote host contains a torchserve version that is prior to 2.11.3. It is, therefore, affected by a Server Side Request Forgery vulnerability in the api/cors endpoint. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Fedora 39 : python-cryptography (2023-51706f88e3)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-51706f88e3 advisory. Automatic update for python-cryptography-37.0.2-8.fc39. Changelog Wed Feb 22 2023 Christian Heimes - 37.0.2-8 - Fix CVE-2023-23931: Don't allow updateinto to...