aioHTTP 3.10.6 < 3.10.11 Memory Leak

The version of aioHTTP installed on the remote host is prior to 3.10.11. It is, therefore, affected by a memory leak vulnerability. aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In versions starting with 3.10.6 and prior to 3.10.11, a memory leak can occur when a...

Oracle Linux 9 : containernetworking-plugins (ELSA-2024-9089)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-9089 advisory. - rebuild for CVE-2024-24791 - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723...

Oracle Linux 9 : .NET / 9.0 (ELSA-2024-9543)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9543 advisory. 9.0.100-1.0.1 - Add support for Oracle Linux 9.0.100-1 - Update to .NET SDK 9.0.100 and Runtime 9.0.0 - Resolves: RHEL-65539 9.0.100rc.2.24474.1-0.7 -...

Oracle Linux 9 : libgcrypt (ELSA-2024-9404)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-9404 advisory. 1.10.0-11 - Fix CVE-2024-2236 RHEL-34579 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

Oracle Linux 9 : xorg-x11-server (ELSA-2024-9122)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9122 advisory. - Fix regression caused by the fix for CVE-2024-31083 - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083 Tenable has...

Fedora 41 : python-mechanicalsoup (2024-45b02f63e4)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-45b02f63e4 advisory. Automatic update for python-mechanicalsoup-1.3.0-1.fc41. Changelog Sun Apr 7 2024 Fabian Affolter - 1.3.0-1 - Update to latest upstream version 1.3.0 closes...

Fedora 37 : freerdp (2022-076b1c9978)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-076b1c9978 advisory. Update to 2.9.0 CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319, CVE-2022-39320, CVE-2022-41877 and CVE-2022-39347. Tenable has...

Python Improper Validation SSRF (CVE-2024-11168)

The version of Python installed on the remote Windows host is improper validation vulnerability. The urllib.parse.urlsplit and urlparse functions improperly validated bracketed hosts , allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially...

Fedora 38 : azure-cli (2022-ea9c1a9b20)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-ea9c1a9b20 advisory. Automatic update for azure-cli-2.41.0-2.fc38. Changelog Thu Oct 27 2022 Major Hayden 2.41.0-2 - Fix az local dir import bug rhbz2053193 Tenable has extracted...

Fedora 41 : chromium (2024-e109b67926)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e109b67926 advisory. update to 128.0.6613.119 High CVE-2024-8362: Use after free in WebAudio High CVE-2024-7970: Out of bounds write in V8 Tenable has extracted the...

Fedora 41 : chromium (2024-8008ddbd4e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8008ddbd4e advisory. Update to 129.0.6668.70 High CVE-2024-9120: Use after free in Dawn High CVE-2024-9121: Inappropriate implementation in V8 High CVE-2024-9122: Type...

Fedora 41 : golang-uber-mock (2024-ec60f79b80)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ec60f79b80 advisory. Automatic update for golang-uber-mock-0.4.0-1.fc41. Changelog Sat Mar 23 2024 Mikel Olasagasti Uranga - 0.4.0-1 - Update to 0.4.0 - Closes rhbz2271191...

Fedora 37 : python3.8 (2022-94bee848e6)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-94bee848e6 advisory. The release you're looking at is Python 3.8.15, a security bugfix release for the legacy 3.8 series...

Fedora 37 : golang (2022-3b4c68d85d)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-3b4c68d85d advisory. go1.19.4 released 2022-12-06 includes security fixes to the net/http and os packages, as well as bug fixes to the compiler, the runtime, and the crypto/x509,...

Fedora 38 : python-engineio (2022-8ca9330e57)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8ca9330e57 advisory. Automatic update for python-engineio-4.3.4-2.fc38. Changelog Thu Sep 15 2022 Benjamin A. Beasley 4.3.4-2 - Dont ship package-lock.json files with the example...

Fedora 37 : python3.10 (2022-8c3ae3e363)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8c3ae3e363 advisory. Python 3.10.8 is the newest major release of the Python programming language, and it contains many new features and optimizations...

Fedora 37 : grafana (2022-8f60426b65)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8f60426b65 advisory. Automatic update for grafana-9.0.2-2.fc37. Changelog Wed Jul 13 2022 Andreas Gerstmayr 9.0.2-2 - use systemd-sysusers to create the Grafana user and group...

Fedora 37 : mediawiki / php-oojs-oojs-ui / php-wikimedia-assert / etc (2022-ea159a2ec4)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-ea159a2ec4 advisory. https://lists.wikimedia.org/hyperkitty/list/mediawiki- [email protected]/thread/DMQKMFSH4K7KLBXWZTDBGI2PWLLHJHJZ/...

Fedora 37 : mod_auth_openidc (2022-e139408490)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e139408490 advisory. CVE-2022-23527 modauthopenidc: Open Redirect in oidcvalidateredirecturl using tab character Tenable has extracted the preceding description block...

Fedora 37 : qemu (2022-920db25f88)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-920db25f88 advisory. Automatic update for qemu-6.2.0-5.fc37. Changelog Thu Feb 10 2022 Cole Robinson - 6.2.0-5 - Split out qemu-virtiofsd subpackage Wed Feb 9 2022 Eduar...