CentOS 9 : libvirt-9.5.0-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libvirt-9.5.0-5.el9 build changelog. - A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and...

CentOS 9 : libtiff-4.4.0-10.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libtiff-4.4.0-10.el9 build changelog. - loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. CVE-2023-26965 - libtif...

CentOS 9 : microcode_ctl-20230214-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20230214-1.el9 build changelog. - Insufficient granularity of access control in out-of-band management in some IntelR Atom and Intel Xeon Scalable Processors may...

CentOS 9 : toolbox-0.0.99.3-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the toolbox-0.0.99.3-9.el9 build changelog. - An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP heade...

CentOS 9 : perl-CPAN-2.29-3.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the perl- CPAN-2.29-3.el9 build changelog. - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Note that Nessus has not tested f...

CentOS 9 : fence-agents-4.10.0-56.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the fence- agents-4.10.0-56.el9 build changelog. - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

CentOS 9 : haproxy-2.4.22-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the haproxy-2.4.22-1.el9 build changelog. - An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8,...

CentOS 9 : fribidi-1.0.10-6.el9.2

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the fribidi-1.0.10-6.el9.2 build changelog. - A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to...

Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6647-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6647-2 advisory. It was discovered that a race condition existed in the ATM Asynchronous Transfer Mode subsystem of the Linux kernel, leading to a use-after-free...

CentOS 9 : nodejs-nodemon-2.0.19-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the nodejs-nodemon-2.0.19-1.el9 build changelog. - This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing...

CentOS 9 : squid-5.5-2.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the squid-5.5-2.el9 build changelog. - DoS when processing gopher server responses CVE-2021-46784 Note that Nessus has not tested for this issue but has instead relied only on the...

Tenable Identity Exposure < 3.59.4 Multiple Vulnerabilities (TNS-2024-04)

The version of Tenable Identity Exposure formerly Tenable.ad installed on the remote host is prior to 3.59.4. It is, therefore, affected by multiple vulnerabilities in the bundled .NET core component as referenced in the TNS-2024-04 advisory. - .NET, .NET Framework, and Visual Studio Security...

CentOS 9 : yajl-2.1.0-21.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the yajl-2.1.0-21.el9 build changelog. - yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow whic...

CentOS 9 : libjpeg-turbo-2.0.90-6.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libjpeg- turbo-2.0.90-6.el9 build changelog. - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...

CentOS 9 : nss-3.79.0-14.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the nss-3.79.0-14.el9 build changelog. - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS...

FreeBSD : chromium -- multiple security fixes (31bb1b8d-d6dc-11ee-86bb-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 31bb1b8d-d6dc-11ee-86bb-a8a1599412c6 advisory. - Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to...

FreeBSD : electron{27,28} -- Use after free in Mojo (3567456a-6b17-41f7-ba7f-5cd3efb2b7c9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3567456a-6b17-41f7-ba7f-5cd3efb2b7c9 advisory. - Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potential...

CentOS 9 : libmicrohttpd-0.9.72-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libmicrohttpd-0.9.72-5.el9 build changelog. - GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a multipart/form-data boundary in the...

CentOS 9 : fence-agents-4.10.0-55.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the fence- agents-4.10.0-55.el9 build changelog. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...

CentOS 9 : glibc-2.34-83.el9.7

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glibc-2.34-83.el9.7 build changelog. - potential use-after-free in getaddrinfo RHEL-2426 CVE-2023-4806 - buffer overflow in ld.so leading to privilege escalation RHEL-3000...