NewStart CGSL MAIN 7.02 : libglvnd Vulnerability (NS-SA-2025-0112)

The remote NewStart CGSL host, running version MAIN 7.02, has libglvnd packages installed that are affected by a vulnerability: - libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen. NOTE: this is disputed because ther...

NewStart CGSL MAIN 7.02 : postfix Vulnerability (NS-SA-2025-0159)

The remote NewStart CGSL host, running version MAIN 7.02, has postfix packages installed that are affected by a vulnerability: - Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpddatarestrictions=rejectunauthpipelining and smtpddiscardehlokeywords=chunking or certain other...

NewStart CGSL MAIN 7.02 : xpdf Multiple Vulnerabilities (NS-SA-2025-0121)

The remote NewStart CGSL host, running version MAIN 7.02, has xpdf packages installed that are affected by multiple vulnerabilities: - XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. CVE-2022-38928 - There is a use-after-free issue in JBIG2Stream::close located in...

NewStart CGSL MAIN 7.02 : graphviz Vulnerability (NS-SA-2025-0120)

The remote NewStart CGSL host, running version MAIN 7.02, has graphviz packages installed that are affected by a vulnerability: - Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically...

NewStart CGSL MAIN 7.02 : bluez Vulnerability (NS-SA-2025-0149)

The remote NewStart CGSL host, running version MAIN 7.02, has bluez packages installed that are affected by a vulnerability: - Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports,...

NewStart CGSL MAIN 7.02 : gnutls Vulnerability (NS-SA-2025-0141)

The remote NewStart CGSL host, running version MAIN 7.02, has gnutls packages installed that are affected by a vulnerability: - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS1 v1.5...

NewStart CGSL MAIN 7.02 : glib2 Vulnerability (NS-SA-2025-0111)

The remote NewStart CGSL host, running version MAIN 7.02, has glib2 packages installed that are affected by a vulnerability: - An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus- based client subscribes to signals from a trusted system service...

NewStart CGSL MAIN 7.02 : webkitgtk Multiple Vulnerabilities (NS-SA-2025-0160)

The remote NewStart CGSL host, running version MAIN 7.02, has webkitgtk packages installed that are affected by multiple vulnerabilities: - The issue was addressed with improved memory handling. This issue is fixed in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7....

NewStart CGSL MAIN 7.02 : fapolicyd Vulnerability (NS-SA-2025-0139)

The remote NewStart CGSL host, running version MAIN 7.02, has fapolicyd packages installed that are affected by a vulnerability: - A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not...

NewStart CGSL MAIN 7.02 : pam Multiple Vulnerabilities (NS-SA-2025-0191)

The remote NewStart CGSL host, running version MAIN 7.02, has pam packages installed that are affected by multiple vulnerabilities: - linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for protectdir lacks...

NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)

"The remote NewStart CGSL host, running version MAIN 7.02, has kernel packages installed that are affected by multiple vulnerabilities: - In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of incoming...

NewStart CGSL MAIN 7.02 : libcap Vulnerability (NS-SA-2025-0190)

The remote NewStart CGSL host, running version MAIN 7.02, has libcap packages installed that are affected by a vulnerability: - A vulnerability was found in libcap. This issue occurs in the libcapstrdup function and can lead to an integer overflow if the input string is close to 4GiB. CVE-2023-26...

NewStart CGSL MAIN 7.02 : freeglut Vulnerability (NS-SA-2025-0168)

The remote NewStart CGSL host, running version MAIN 7.02, has freeglut packages installed that are affected by a vulnerability: - freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function. CVE-2024-24259 Note that Nessus has not...

NewStart CGSL MAIN 7.02 : python-urllib3 Multiple Vulnerabilities (NS-SA-2025-0157)

The remote NewStart CGSL host, running version MAIN 7.02, has python-urllib3 packages installed that are affected by multiple vulnerabilities: - urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cookie HTTP header special or provide any helpers for managing...

NewStart CGSL MAIN 7.02 : libmicrohttpd Vulnerability (NS-SA-2025-0190)

The remote NewStart CGSL host, running version MAIN 7.02, has libmicrohttpd packages installed that are affected by a vulnerability: - GNU libmicrohttpd before 0.9.76 allows remote DoS Denial of Service due to improper parsing of a multipart/form-data boundary in the postprocessor.c...

NewStart CGSL MAIN 7.02 : sssd Vulnerability (NS-SA-2025-0194)

The remote NewStart CGSL host, running version MAIN 7.02, has sssd packages installed that are affected by a vulnerability: - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting ...

NewStart CGSL MAIN 7.02 : xorg-x11-server Multiple Vulnerabilities (NS-SA-2025-0194)

The remote NewStart CGSL host, running version MAIN 7.02, has xorg-x11-server packages installed that are affected by multiple vulnerabilities: - A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits...

NewStart CGSL MAIN 7.02 : aspell Vulnerability (NS-SA-2025-0205)

The remote NewStart CGSL host, running version MAIN 7.02, has aspell packages installed that are affected by a vulnerability: - objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

NewStart CGSL MAIN 7.02 : libeconf Multiple Vulnerabilities (NS-SA-2025-0131)

The remote NewStart CGSL host, running version MAIN 7.02, has libeconf packages installed that are affected by multiple vulnerabilities: - A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in openSUSE libeconf allows for DoS via malformed configuration files Thi...

NewStart CGSL MAIN 7.02 : keepalived Vulnerability (NS-SA-2025-0171)

The remote NewStart CGSL host, running version MAIN 7.02, has keepalived packages installed that are affected by a vulnerability: - In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an...