Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6192-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6192-1 advisory. Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of- bounds write vulnerability. An attacker could us...

Amazon Linux 2 : qemu, --advisory ALAS2-2023-2148 (ALAS-2023-2148)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2148 advisory. A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including...

RHEL 8 : java-11-openjdk (RHSA-2023:4163)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4163 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel regression (USN-6191-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6191-1 advisory. USN-6081-1, USN-6084-1, USN-6092-1 and USN-6095-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a spurious warning ...

AlmaLinux 9 : bind (ALSA-2023:4099)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4099 advisory. - Every named instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to...

EulerOS 2.0 SP10 : libxml2 (EulerOS-SA-2023-2386)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occur...

SUSE: Security Advisory (SUSE-SU-2023:2835-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : firefox (ELSA-2023-4071)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4071 advisory. 102.13.0-2.0.1 - Updated homepages to use https Orabug: 34648274 102.13.0-2 - Update to 102.13.0 build2 102.13.0-1 - Update to 102.13.0 build1 Tenable...

The vulnerability of the Good plugin (gst-plugins-good) in the Gstreamer multimedia framework allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Good gst-plugins-good plugin of the Gstreamer multimedia framework is related to insufficient protection of sensitive data due to the absence of security updates on the remote host. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protect...

F5 Networks BIG-IP : SSL 3.0/TLS 1.0 vulnerability (K13400)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K13400 advisory. - The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozil...

SUSE SLED12: install-initrd-SLES / tftpboot-installation-SLED-12-SP5-x86_64 / etc (SUSE-SU-2023:2819-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2819-1 advisory. - rebuild the package with the new secure boot key bsc1209188. Tenable has extracted the preceding description block...

SUSE SLES12: libQt5Bootstrap-devel-static / libQt5Concurrent-devel / etc (SUSE-SU-2023:2816-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2816-1 advisory. - CVE-2020-24741: Fixed a bug that allow QLibrary to load libraries relative to CWD which could result in arbitrary code execution...

AlmaLinux 8 : thunderbird (ALSA-2023:4063)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2023:4063 advisory. - An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox 115, Firefo...

Ubuntu: Security Advisory (USN-6219-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Juniper Junos OS Vulnerability (JSA71640)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71640 advisory. - A Use After Free vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202...

Slackware Linux 15.0 / current krb5 Vulnerability (SSA:2023-193-01)

The version of krb5 installed on the remote host is prior to 1.19.2 / 1.21.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-193-01 advisory. - lib/kadm5/kadmrpcxdr.c in MIT Kerberos 5 aka krb5 before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A...

Juniper Junos OS Vulnerability (JSA71661)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71661 advisory. - An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault ManagementCFM module of Juniper Networks Junos OS on MX...

Fortinet Fortigate Existing websocket connection persists after deleting API admin (FG-IR-23-028)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-028 advisory. - An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute...

Debian dla-3491 : erlang - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3491 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3491-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM : Gerbv vulnerabilities (USN-6209-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6209-1 advisory. Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this...