Oracle Linux 8 : gstreamer1-plugins-base (ELSA-2024-11345)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-11345 advisory. 1.16.1-5.0.1 - Update origin URL Orabug: 36209826 1.16.1-5 - Fixes for CVE-2024-47538, CVE-2024-47607, CVE-2024-47615 Resolves: RHEL-70974, RHEL-71010...

CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-36621)

The version of moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36621 advisory. - moby v25.0.5 is affected by a Race Condition in builder/builder-next/adapters/snapshot/layer.go. The...

RockyLinux 8 : kernel (RLSA-2024:10943)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:10943 advisory. kernel: selinux,smack: don't bypass permissions check in inodesetsecctx hook CVE-2024-46695 kernel: net: avoid potential underflow in qdiscpktleninit wi...

Mattermost Server 9.5.x < 9.5.12, 9.11.x < 9.11.4, 10.0.x < 10.0.2, 10.1.x < 10.1.2, 10.2.0 (MMSA-2024-00386)

The version of Mattermost Server installed on the remote host is prior to 9.5.12, 9.11.4, 10.0.2, 10.1.2 or 10.2.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00386 advisory. - Mattermost versions 10.0.x = 10.0.1, 10.1.x = 10.1.1, 9.11.x = 9.11.3, 9.5.x = 9.5.11...

Google Chrome < 131.0.6778.204 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 131.0.6778.204. It is, therefore, affected by multiple vulnerabilities as referenced in the 202412stable-channel-update-for-desktop18 advisory. - Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowe...

Fedora 40 : golang-x-crypto (2024-8f83d0ed92)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8f83d0ed92 advisory. Fix CVE-2024-45337 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 40 : chromium (2024-162a4dfe4f)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-162a4dfe4f advisory. Update to 131.0.6778.139 High CVE-2024-12381: Type Confusion in V8 High CVE-2024-12382: Use after free in Translate Tenable has extracted the...

Ubuntu 20.04 LTS : PHP regression (USN-7157-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7157-2 advisory. USN-7157-1 fixed vulnerabilities in PHP. The patch for CVE-2024-8932 caused a regression in php7.4. This update fixes the problem. Tenable has extracted the...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49854)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49854 advisory. - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for accessing...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-49938)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49938 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Use skbsetlength for...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50237)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50237 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vi...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50167)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50167 advisory. - In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47710)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47710 advisory. - In the Linux kernel, the following vulnerability has been resolved: sockmap: Add a condresched in sockhashfr...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50131)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50131 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Consider the NULL character whe...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50179)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50179 advisory. - In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50282)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50282 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add missing size check in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50019)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50019 advisory. - In the Linux kernel, the following vulnerability has been resolved: kthread: unpark only parked kthread...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50209)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50209 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Add a check for memory...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50163)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50163 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Make sure internal and UAPI...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50185)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50185 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: handle consistently DSS corruptio...