Azure Linux 3.0 Security Update: kernel (CVE-2024-56606)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56606 advisory. - In the Linux kernel, the following vulnerability has been resolved: afpacket: avoid erroring out after...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56634)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56634 advisory. - In the Linux kernel, the following vulnerability has been resolved: gpio: grgpio: Add NULL check in...

CBL Mariner 2.0 Security Update: clang16 / llvm16 / tensorflow (CVE-2023-29941)

The version of clang16 / llvm16 / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29941 advisory. - llvm-project commit a0138390 was discovered to contain a segmentation fault via the...

Azure Linux 3.0 Security Update: python3 (CVE-2024-4032)

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4032 advisory. - The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56602)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56602 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: do not leave a dangling...

CBL Mariner 2.0 Security Update: qt5-qtbase (CVE-2023-34410)

The version of qt5-qtbase installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-34410 advisory. - An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56781)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56781 advisory. - In the Linux kernel, the following vulnerability has been resolved: powerpc/prominit: Fixup missing powermac...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56626)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56626 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Out-of-Bounds Write in...

Azure Linux 3.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26594)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26594 advisory. - A use-after-free flaw was found in X.Org and Xwayland. The root cursor i...

AIX : Multiple Vulnerabilities (IJ53757) (deprecated)

The vendor has closed the APAR as a program error. %NASLMINLEVEL 80900 C Tenable, Inc. Disabled on 2026/02/12. Advisory states "Closed as program error" and "Removed security issue." include'compat.inc'; if description scriptid232951; scriptversion"1.5";...

Jenkins plugins Multiple Vulnerabilities (2025-03-19)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2025-096)

The version of kernel installed on the remote host is prior to 5.4.290-205.405. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2025-096 advisory. Insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters may allow an...

GitLab 12.3 < 17.7.7 / 17.8 < 17.8.5 / 17.9 < 17.9.2 (CVE-2025-1257)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was discovered in GitLab EE affecting all versions starting with 12.3 before 17.7.7, 17.8 prior to 17.8.5, and 17.9 prior to 17.9.2. A vulnerability in certain GitLab instances could allow an...

openSUSE 15 Security Update : chromium (openSUSE-SU-2025:0089-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0089-1 advisory. Chromium 134.0.6998.88 stable released 2025-03-11 boo1239216 CVE-2025-1920: Type Confusion in V8 CVE-2025-2135: Type Confusion in V8 CVE-2025-213...

Fedora 41 : ffmpeg (2025-ab5fe60520)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ab5fe60520 advisory. Latest maintenance release from 7.1 branch. Changelog: https://github.com/FFmpeg/FFmpeg/blob/n7.1.1/Changelog . Contains backported fix for...

FreeBSD : chromium -- multiple security fixes (a02a6d94-fe53-11ef-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a02a6d94-fe53-11ef-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 5 security fixes: Tenable has extracted the...

Fedora 41 : thunderbird (2025-bd6664e83b)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bd6664e83b advisory. Update to 128.8.0 https://www.mozilla.org/en-US/security/advisories/mfsa2025-18/...

AlmaLinux 8 : kernel-rt (ALSA-2025:2474)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:2474 advisory. kernel: HID: core: zero-initialize the report buffer CVE-2024-50302 kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devic...

Oracle Linux 8 : kernel (ELSA-2025-2473)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2473 advisory. - HID: core: zero-initialize the report buffer CKI Backport Bot RHEL-81825 CVE-2024-50302 - ALSA: usb-audio: Fix potential out-of-bound accesses for...

KB5053886: Windows Server 2012 Security Update (March 2025)

The remote Windows host is missing security update 5053886. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...