CBL Mariner 2.0 Security Update: reaper (CVE-2024-37890)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37890 advisory. - ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding...

CBL Mariner 2.0 Security Update: reaper (CVE-2017-18214)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-18214 advisory. - The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted...

FreeBSD : electron29 -- multiple vulnerabilities (55d4a92f-c75f-43e8-ab1f-4a0efc9795c4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 55d4a92f-c75f-43e8-ab1f-4a0efc9795c4 advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

Fedora 39 : pgadmin4 (2024-9820d9491f)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9820d9491f advisory. Backport security fixes for CVE-2024-4216, CVE-2024-4068, CVE-2024-4067. Tenable has extracted the preceding description block directly from the...

CBL Mariner 2.0 Security Update: pytorch (CVE-2024-31584)

The version of pytorch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31584 advisory. - Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-6817)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6817 advisory. - A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achiev...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2024-26984)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26984 advisory. - In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race...

SUSE SLED15: libpython3_11-1_0 / libpython3_11-1_0-32bit / python311 / etc (SUSE-SU-2024:2414-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2414-1 advisory. - CVE-2024-4032: Rearranging definition of private v global IP. bsc1226448 Tenable has extracted the...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_108-default / etc (SUSE-SU-2024:2446-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2446-1 advisory. This update for the Linux Kernel 5.14.21-15040024108 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed...

SUSE SLES15 Security Update : kernel (Live Patch 26 for SLE 15 SP4) (SUSE-SU-2024:2449-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2449-1 advisory. This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-39291)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39291 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in...

CBL Mariner 2.0 Security Update: postgresql (CVE-2022-41862)

The version of postgresql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41862 advisory. - In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishme...

CBL Mariner 2.0 Security Update: glibc (CVE-2024-33602)

The version of glibc installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-33602 advisory. - nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's nscd netgrou...

SUSE SLES15 Security Update : kernel (Live Patch 12 for SLE 15 SP5) (SUSE-SU-2024:2473-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2473-1 advisory. This update for the Linux Kernel 5.14.21-1505005559 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed...

CBL Mariner 2.0 Security Update: kernel (CVE-2021-3847)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3847 advisory. - An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel Overlay...

CBL Mariner 2.0 Security Update: kernel (CVE-2023-52802)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52802 advisory. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2023-52802...

CBL Mariner 2.0 Security Update: postgresql (CVE-2023-2455)

The version of postgresql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2455 advisory. - Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policie...

SUSE SLES15 Security Update : kernel (Live Patch 11 for SLE 15 SP5) (SUSE-SU-2024:2472-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2472-1 advisory. This update for the Linux Kernel 5.14.21-1505005552 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-26933)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26933 advisory. - In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port disable...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-26978)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26978 advisory. - In the Linux kernel, the following vulnerability has been resolved: serial: max310x: fix NULL pointer...