RHEL 7 : kubernetes_api_server (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Kubernetes api server: build config to a strategy that isn't allowed by policy CVE-2016-1906 - The API...

RHEL 5 : xsa202_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xsa202 xen: x86 PV guests may be able to mask interrupts XSA-202 CVE-2016-10024 Note that Nessus has not tested for...

RHEL 5 : netpbm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - netpbm: Out-of-bounds write in writeRasterPbm function CVE-2017-2581 - A null pointer dereference...

RHEL 5 : xsa154_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xsa154 xen: inconsistent cachability flags on guest mappings XSA-154 CVE-2016-2270 Note that Nessus has not tested...

RHEL 7 : jbig2dec (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jbig2dec: Integer overflow in jbig2buildhuffmantable allows OOB write CVE-2017-7975 - Artifex jbig2dec 0....

RHEL 6 : jbig2dec (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jbig2dec: Integer overflow in jbig2decodesymboldict CVE-2017-7885 - libjbig2dec.a in Artifex jbig2dec 0.1...

RHEL 6 : cpio (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - cpio: improper input validation when writing tar header fields leads to unexpected tar generation...

RHEL 7 : tcpdump (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - tcpdump: Buffer overflow in the -F command line argument parser CVE-2018-16301 - tcpdump: Buffer over-rea...

RHEL 5 : pcre (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - pcre: stack-based buffer overflow write in pcre32copysubstring CVE-2017-7246 - In PCRE 8.41, the OPKETRMA...

RHEL 7 : libid3tag (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libid3tag: Out of memory in id3fieldparse function in field.c CVE-2017-11551 - The id3ucs4length function...

RHEL 7 : wawpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - wawpack: Infinite loop in WavpackPackInit function lead to DoS CVE-2018-19840 Note that Nessus has not tested for...

RHEL 8 : libvterm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libvterm: NULL pointer dereference in vtermscreensetcallbacks CVE-2018-20786 Note that Nessus has not tested for th...

RHEL 5 : xsa236_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xsa236 xen: pin count / page reference race in grant table code XSA-236 CVE-2017-15597 Note that Nessus has not...

RHEL 7 : gitpython (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - GitPython: Insecure non-multi options in clone and clonefrom is not blocked CVE-2023-40267 - GitPython is...

RHEL 5 : iproute (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - iproute: use-after-free in getnetnsidfromname in ip/ipnetns.c CVE-2019-20795 Note that Nessus has not tested for th...

RHEL 7 : procps (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - procps: ps buffer overflow CVE-2023-4016 Note that Nessus has not tested for this issue but has instead relied on t...

RHEL 5 : struts2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - struts2: possible RCE due to forced double OGNL evaluation when evaluated on raw user input in tag...

RHEL 8 : developer_environment (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Developer environment: Homoglyph characters can lead to trojan source attack CVE-2021-42694 - An issue wa...

RHEL 7 : containernetworking-cni (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - containernetworking-cni: Arbitrary path injection via type field in CNI configuration CVE-2021-20206 Note that Ness...

RHEL 6 : gmp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gmp: Integer overflow and resultant buffer overflow via crafted input CVE-2021-43618 Note that Nessus has not teste...