RHEL 8 : gimp:2.8 (RHSA-2024:0862)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0862 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

Amazon Linux AMI : php72 (ALAS-2024-1921)

The version of php72 installed on the remote host is prior to 7.2.26-1.19. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1921 advisory. 2024-02-28: CVE-2019-11045 was added to this advisory. 2024-02-28: CVE-2019-11049 was added to this advisory. 2024-02-28:...

Fedora 38 : hugin (2024-60cefb07e8)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-60cefb07e8 advisory. Security fix for CVE-2024-25442 CVE-2024-25443 CVE-2024-25445 CVE-2024-25446 Tenable has extracted the preceding description block directly from the...

Amazon Linux AMI : kernel (ALAS-2024-1919)

The version of kernel installed on the remote host is prior to 4.14.336-179.559. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1919 advisory. A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privile...

GLSA-202402-12 : GNU Tar: Out of Bounds Read

The remote host is affected by the vulnerability described in GLSA-202402-12 GNU Tar: Out of Bounds Read - GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrate...

GLSA-202402-13 : TACACS+: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202402-13 TACACS+: Remote Code Execution - A lack of input validation exists in tacplus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC...

Fedora 39 : unbound (2024-2e26eccfcb)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2e26eccfcb advisory. - https://nlnetlabs.nl/projects/unbound/security-advisories/ - Secure again control channel. Tenable has extracted the preceding description block...

Debian dsa-5626 : pdns-recursor - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5626 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5626-1...

GLSA-202402-20 : Thunar: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202402-20 Thunar: Arbitrary Code Execution - An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program based on the fi...

Fedora 38 : sudo (2024-6fa5af9ea8)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-6fa5af9ea8 advisory. Rabase to 1.9.15p5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 39 : libgit2_1.6 (2024-605004a28e)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-605004a28e advisory. Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575 Tenable has extracted the preceding description block directly from the Fedora...

SUSE SLED15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2024:0509-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0509-1 advisory. Security issues fixed: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master...

SUSE SLES15: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2024:0472-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0472-1 advisory. Updated to Tomcat 9.0.85: - CVE-2023-45648: Improve trailer header parsing bsc1216118. - CVE-2023-42794: FileUpload:...

SUSE SLES15: libjavascriptcoregtk-4_0-18 / libwebkit2gtk-4_0-37 / etc (SUSE-SU-2024:0519-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0519-1 advisory. Update to version 2.42.5 bsc1219604: - CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to...

SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2024:0508-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0508-1 advisory. Security issues fixed: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master bsc1219430 ...

Fedora 38 : libgit2 (2024-a7a3c8ccdd)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a7a3c8ccdd advisory. Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575 Tenable has extracted the preceding description block directly from the Fedora...

Fedora 39 : freerdp (2024-01689e51e5)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-01689e51e5 advisory. Update to 2.11.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

openSUSE 15 Security Update : bitcoin (openSUSE-SU-2024:0052-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0052-1 advisory. - Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote...

openSUSE 15 Security Update : hugin (openSUSE-SU-2024:0047-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0047-1 advisory. - An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsi...

SUSE SLES15: postgresql12 / postgresql12-contrib / postgresql12-devel / etc (SUSE-SU-2024:0523-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0523-1 advisory. Upgrade to 12.18: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY bsc1219679...