Oracle Linux 8 : dmidecode (ELSA-2023-5252)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-5252 advisory. 1:3.3-4.1 - Resolves: CVE-2023-30630 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 8 : libwebp (ELSA-2023-5309)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5309 advisory. 1.0.0-8.1 - Added fix for CVE-2023-4863 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Oracle Linux 8 : frr (ELSA-2023-5219)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5219 advisory. 7.5.1-7.0.1.2 - Fix BFD crash in FRR running in MetalLB BZ2231829 - Fix for CVE-2023-38802 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : postgresql:15 (ELSA-2023-5269)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5269 advisory. - Fixes: CVE-2023-2454 CVE-2023-2455 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : ncurses (ELSA-2023-5249)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5249 advisory. 6.1-9.20180224.1 - fix buffer overflow on terminfo with too many capabilities CVE-2023-29491 Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : firefox (ELSA-2023-5184)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-5184 advisory. 102.15.1-1.0.1 - Update to 102.15.1 build2 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : thunderbird (ELSA-2023-5201)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-5201 advisory. 102.15.1-1.0.1 - Update to 102.15.1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : thunderbird (ELSA-2023-4954)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-4954 advisory. 102.15.0-1.0.1 - Update to 102.15.0 build1 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12801)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12801 advisory. 5.4.17-2136.323.8.1.el8 - rds: Fix lack of reentrancy for connection reset with dst addr zero Haakon Bugge Orabug: 35713696 CVE-2023-22024 Tenable has extracte...

Oracle Linux 8 : flac (ELSA-2023-5046)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5046 advisory. 1.3.2-9.el88.1 - don't free memory that is still used after realloc error CVE-2020-22219 Tenable has extracted the preceding description block directly from the...

Oracle Linux 8 / 9 : gcc (ELSA-2023-12788)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12788 advisory. - CVE-2023-4039 GCC mitigation. Orabug 35751743. Includes removal of aarch64-preserve-args.patch. - CVE-2022-40982 'Intel Downfall' mitigation...

Oracle Linux 8 : cross-gcc (ELSA-2023-28766)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-28766 advisory. - CVE-2023-4039 mitigation. Orabug 35752004. Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 8 : httpd:2.4 (ELSA-2023-5050)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5050 advisory. - Resolves: 2176723 - CVE-2023-27522 httpd:2.4/httpd: modproxyuwsgi HTTP response splitting - Resolves: 2190133 - modrewrite regression with CVE-2023-25690 -...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2023-12782)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12782 advisory. - x86/pkeys: Revert a5eff7259790 'x86/pkeys: Add PKRU value to initfpstate' Thomas Gleixner Orabug: 35714800 CVE-2022-40982 - Documentation/x86: Fix...

Oracle Linux 8 : olcne (ELSA-2023-12772)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12772 advisory. - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 -...

Oracle Linux 8 : Unbreakable Enterprise kernel-container (ELSA-2023-12786)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12786 advisory. - x86/pkeys: Revert a5eff7259790 'x86/pkeys: Add PKRU value to initfpstate' Thomas Gleixner Orabug: 35714800 CVE-2022-40982 - Documentation/x86: Fix backwards...

Oracle Linux 8 : istio (ELSA-2023-12780)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12780 advisory. - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. olcne - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 Tenable has...

Oracle Linux 8 : icu (ELSA-2020-0902)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0902 advisory. 60.3-2 - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch - Apply ICU-20958-Prevent-SEGVMAPERR-in-append.patch - Resolves: rhbz1808238 Tenable h...

Oracle Linux 8 : openjpeg2 (ELSA-2020-0570)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0570 advisory. 2.3.1-3 - Fix CVE-2020-8112 1801033 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 8 : httpd:2.4 (ELSA-2019-3436)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3436 advisory. - In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in modauthdigest when running in a threaded server could allow a user with valid...