Tenable Nessus Agent < 10.4.4 (TNS-2023-41)

According to its self-reported version, the Tenable Nessus Agent running on the remote host is prior to 10.4.4. It is, therefore, affected by a vulnerability as referenced in the TNS-2023-41 advisory. - An arbitrary file write vulnerability exists where an authenticated attacker with privileges o...

Tenable Nessus Agent < 10.4.4 DoS Vulnerability (TNS-2023-41)

Tenable Nessus Agent is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 37 : tigervnc (2023-4708733ccc)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4708733ccc advisory. Fixes CVEs reported against Xserver. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 37 : dotnet7.0 (2023-1458e23c3d)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1458e23c3d advisory. This is the October 24, 2023 release for .NET 7. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.13/7.0.13.md Tenable has...

[R1] Nessus Agent Version 10.4.4 Fixes One Vulnerability

R1 Nessus Agent Version 10.4.4 Fixes One Vulnerability Arnie Cabral Thu, 11/16/2023 - 10:53 An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host,...

Oracle Linux 9 : buildah (ELSA-2023-6473)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6473 advisory. - rebuild for following CVEs: CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539...

Tenable Nessus End of Life (EOL) Detection

The Tenable Nessus version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Amazon Linux 2 : containerd (ALASNITRO-ENCLAVES-2023-034)

The version of containerd installed on the remote host is prior to 1.6.6-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2023-034 advisory. In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2...

Amazon Linux 2 : thunderbird (ALAS-2023-2334)

The version of thunderbird installed on the remote host is prior to 115.4.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2334 advisory. The Mozilla Foundation Security Advisory describes this flaw as: It was possible for certain browser prompts and...

Wireshark 3.6.x < 3.6.19 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.6.19. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.19 advisory. - The NetScreen file parser could crash. It may be possible to make Wireshark crash by injecting a malformed packet onto...

SUSE SLES12 Security Update : postgresql12 (SUSE-SU-2023:4433-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4433-1 advisory. - PostgreSQL Project reports: Certain aggregate function calls receiving unknown-type arguments could disclose bytes of server memo...

MariaDB 10.11.0 < 10.11.6

The version of MariaDB installed on the remote host is prior to 10.11.6. It is, therefore, affected by a vulnerability as referenced in the 10.11.6 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23047)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23047 advisory. - Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow a...

RHEL 8 : qt5-qtsvg (RHSA-2023:6961)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6961 advisory. Scalable Vector Graphics SVG is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displayin...

MariaDB 11.1.0 < 11.1.3

The version of MariaDB installed on the remote host is prior to 11.1.3. It is, therefore, affected by a vulnerability as referenced in the 11.1.3 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior,...

CentOS 8 : libreswan (CESA-2023:7052)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:7052 advisory. - An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1, an erro...

Debian dla-3651 : libecpg-compat3 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3651 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3651-1 [email protected]...

CentOS 8 : libfastjson (CESA-2023:6976)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:6976 advisory. - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-12762 Note that Ness...

Fedora 39 : roundcubemail (2023-cf584ed77a)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-cf584ed77a advisory. Release 1.6.5 - Fix PHP8 fatal error when parsing a malformed BODYSTRUCTURE 9171 - Fix duplicated Inbox folder on IMAP servers that do not use Inbox...

Fedora 37 : roundcubemail (2023-70578c5599)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-70578c5599 advisory. Release 1.6.5 - Fix PHP8 fatal error when parsing a malformed BODYSTRUCTURE 9171 - Fix duplicated Inbox folder on IMAP servers that do not use Inbox...