RHEL 7 : autotrace (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact CVE-2019-19005 -...

RHEL 5 : gnupg2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gnupg2: OpenPGP Key Certification Forgeries with SHA-1 CVE-2019-14855 - mainproc.c in GnuPG before 2.2.8...

RHEL 7 : libxrender (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libXrender: Insufficient validation of server responses results out-of-bounds write in XRenderQueryFilter...

RHEL 7 : gcc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gcc: Exploitable buffer overflow CVE-2016-2226 - Use-after-free vulnerability in libiberty allows remote...

RHEL 6 : libguestfs (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libguestfs: Buffer overflow in getkeys leads to DoS CVE-2022-2211 Note that Nessus has not tested for this issue bu...

RHEL 5 : xsa213_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xsa213 xen: x86: 64bit PV guest breakout via pagetable use-after-mode-change XSA-213 CVE-2017-8903 Note that Nessus...

RHEL 6 : nss (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nss: Check length of inputs for cryptographic primitives CVE-2019-17006 - An existing mitigation of timin...

RHEL 7 : libraw (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libraw: Memory corruption in the parsetiffifd CVE-2017-6886 - There is a floating point exception in the...

RHEL 6 : busybox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - busybox: heap-based buffer overflow in OPTION6RD parsing CVE-2016-2148 - Integer overflow in the DHCP...

RHEL 7 : openldap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openldap: OpenLDAP SQL injection CVE-2022-29155 - A flaw was found in OpenLDAP. This flaw allows an...

RHEL 5 : gnuplot (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gnuplot: double free when executing printsetoutput may lead to arbitrary code execution CVE-2020-25559 Note that...

RHEL 6 : screen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - screen: crash when processing combining chars CVE-2021-26937 - socket.c in GNU Screen through 4.9.0, when...

RHEL 6 : speex (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - speex: stack-based buffer overflow in speexenc.c via a crafted WAV file CVE-2020-23904 - A Divide by Zero...

RHEL 7 : spice-vdagent (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - spice-vdagent: Improper validation of xfers-savedir in vdagentfilexfersdata CVE-2017-15108 - spice-vdagen...

RHEL 7 : systemd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary file...

RHEL 5 : trousers (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root...

RHEL 5 : chromium-browser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - chromium-browser: Use after free in ANGLE CVE-2020-6463 - numbers.c in libxslt before 1.1.29, as used in...

RHEL 7 : perl-cpan (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - perl-CPAN: Bypass of verification of signatures in CHECKSUMS files CVE-2020-16156 Note that Nessus has not tested f...

RHEL 5 : dbus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour CVE-2020-35512...

RHEL 7 : linux-firmware (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - linux-firmware: Transmission of data encrypted with an all-zero session key after disassociation CVE-2019-15126 Not...