Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9621)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9621 advisory. - bpf: Fix integer overflow in preallocelemsandfreelist Tatsuhiko Yasumatsu Orabug: 33431722 CVE-2021-41864 Tenable has extracted the preceding description...

openSUSE 15 Security Update : python (openSUSE-SU-2021:3489-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3489-1 advisory. - Denial of service when identifying crafted invalid RFCs fedora-all CVE-2021-3733 - client can enter an infinite loop on a 100 Continue...

Photon OS 2.0: Linux PHSA-2021-2.0-0399

An update of the linux package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0399. The text itself is copyright C VMware, Inc...

Photon OS 2.0: Apache PHSA-2021-2.0-0401

An update of the apache package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0401. The text itself is copyright C VMware, Inc...

Photon OS 1.0: Kubernetes PHSA-2021-1.0-0413

An update of the kubernetes package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0413. The text itself is copyright C VMware, Inc...

Photon OS 3.0: Linux PHSA-2021-3.0-0254

An update of the linux package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0254. The text itself is copyright C VMware, Inc...

Photon OS 4.0: Linux PHSA-2021-4.0-0041

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0041. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

CentOS 8 : linux-firmware (CESA-2021:1620)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1620 advisory. - kernel: Integer overflow in IntelR Graphics Drivers CVE-2020-12362 Note that Nessus has not tested for this issue but has instead relied only on the...

NewStart CGSL MAIN 6.02 : libsolv Vulnerability (NS-SA-2021-0060)

The remote NewStart CGSL host, running version MAIN 6.02, has libsolv packages installed that are affected by a vulnerability: - repodataschema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a last schema whose length is less than the length of the input schema...

Photon OS 1.0: Openldap PHSA-2021-1.0-0366

An update of the openldap package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0366. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Open vSwitch vulnerability (USN-4729-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4729-1 advisory. Joakim Hindersson discovered that Open vSwitch incorrectly parsed certain network packets. A remote attacker could use this issue to cause...

CVE-2021-0321

In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...

RHEL 8 : libpq (RHSA-2021:0057)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0057 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. The following...

Fedora 32 : libslirp (2020-331e1318dd)

Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 32 : pngcheck (2020-23432b7b72)

Fix buffer overflow RHBZ 1897485 A global buffer overflow was discovered in the checkchunkname function via a crafted png file. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically...

Photon OS 3.0: Elasticsearch PHSA-2020-3.0-0135

An update of the elasticsearch package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140410;...

Fedora 32 : systemd (2020-2faf839786)

Contains a bunch of patches for the assorted linked bugzillas. Handling of user names that resemble numerical uids is tightened CVE-2020-13776. The hardware database is updated to the upstream version. Note that Tenable Network Security has extracted the preceding description block directly from...

Photon OS 1.0: Libtasn1 PHSA-2020-1.0-0292

An update of the libtasn1 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0292. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Libmspack PHSA-2020-3.0-0085

An update of the libmspack package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0085. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136346;...

Photon OS 3.0: Postgresql PHSA-2020-3.0-0080

An update of the postgresql package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0080. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135793;...