FreeBSD : chromium -- multiple security fixes (15d398ea-4f73-11ef-8a0f-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 15d398ea-4f73-11ef-8a0f-a8a1599412c6 advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

Ubuntu 24.04 LTS : Python vulnerability (USN-6941-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6941-1 advisory. It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered private or globally reachable. Th...

Fedora 39 : xen (2024-58c950d8d8)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-58c950d8d8 advisory. x86: Native Branch History Injection XSA-456 version 3, CVE-2024-2201 double unlock in x86 guest IRQ handling XSA-458, CVE-2024-31143 Tenable has...

Fedora 40 : obs-cef (2024-47dbf2a4de)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-47dbf2a4de advisory. Security fix for CVE-2023-6349 & FTBFS fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 40 : xen (2024-169a1cc589)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-169a1cc589 advisory. double unlock in x86 guest IRQ handling XSA-458, CVE-2024-31143 x86: Native Branch History Injection XSA-456 version 3, CVE-2024-2201 Tenable has...

Microsoft Edge (Chromium) < 127.0.2651.86 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.86. It is, therefore, affected by multiple vulnerabilities as referenced in the August 1, 2024 advisory. - Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attack...

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2024:2654-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2654-1 advisory. - CVE-2023-46842: Fixed x86 HVM hypercalls may trigger Xen bug check XSA-454, bsc1221984. -...

RHEL 7 : freeradius (RHSA-2024:4911)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4911 advisory. For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page...

SUSE SLED15: gettext-its-gtk3 / gtk3-branding-upstream / gtk3-data / gtk3-devel / etc (SUSE-SU-2024:2633-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2633-1 advisory. - CVE-2024-6655: Fixed library injection from current working directory bsc1228120 Tenable has extracted...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2024-041)

The version of docker installed on the remote host is prior to 25.0.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2024-041 advisory. 2025-01-04: CVE-2024-36620 was added to this advisory. 2025-01-04: CVE-2024-36623 was added to this advisory...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libgit2 (SUSE-SU-2024:2619-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2619-1 advisory. - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in gitindexadd bsc1219660 Tenable...

RHEL 7 : httpd (RHSA-2024:4938)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4938 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Substitution...

SUSE SLED15: gtk2-branding-upstream / gtk2-data / gtk2-devel / gtk2-devel-32bit / etc (SUSE-SU-2024:2634-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2634-1 advisory. - CVE-2024-6655: Fixed library injection from current working directory bsc1228120 Tenable has extracted...

RHEL 7 : httpd (RHSA-2024:4943)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4943 advisory. For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the...

Tenable Nessus Network Monitor < 6.4.0 Multiple Vulnerabilities (TNS-2024-07)

Tenable Nessus Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

libexiv2 0.28.x < 0.28.3 (GHSA-38rv-8x93-pvrh)

The version of libexiv2 installed on the remote host is prior to 0.28.3. It is, therefore, affected by a vulnerability as referenced in the GHSA-38rv-8x93-pvrh advisory. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An...

SUSE SLED15: gettext-its-gtk3 / gtk3-branding-upstream / gtk3-data / gtk3-devel / etc (SUSE-SU-2024:2661-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2661-1 advisory. - CVE-2024-6655: Fixed library injection from current working directory bsc1228120 Tenable has extracted...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6923-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6923-1 advisory. Benedict Schlter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC...

SUSE SLED15: gnome-extensions / gnome-shell / gnome-shell-calendar / etc (SUSE-SU-2024:2618-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2618-1 advisory. - CVE-2024-36472: Fixed portal helper automatically launched without user confirmation bsc1225567 Tenable...

Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6922-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6922-1 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A...