9589 matches found
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2020-1907)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : python-httplib2 (ALAS-2020-1420)
It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1420 advisory. In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send additional hidden requests to same server. This...
Debian: Security Advisory (DSA-4754-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : squid (EulerOS-SA-2020-1884)
According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Squid through 4.7 and 5. When receiving a request, Squid checks its cache to see if it can serve up a response. It does...
EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2020-1877)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integ...
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200826)
Security Fixes : - kernel: NULL pointer dereference in searchkeyring CVE-2017-2647 - kernel: heap-based buffer overflow in lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c CVE-2019-14896 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...
Amazon Linux 2 : gnome-shell (ALAS-2020-1478)
The version of gnome-shell installed on the remote host is prior to 3.28.3-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1478 advisory. It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An...
Debian: Security Advisory (DLA-2333-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : Ark vulnerability (USN-4461-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4461-1 advisory. Dominik Penner discovered that Ark did not properly sanitize zip archive files before performing extraction. An attacker could use this to construct a...
RHEL 7 : bind (RHSA-2020:3471)
"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3471 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...
Fedora: Security Advisory for nodejs (FEDORA-2020-754b711a58)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 32 : hylafax+ (2020-01eb48bcce)
update to 7.0.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. T...
RHEL 7 : git (RHSA-2020:2337)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2337 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...
Debian: Security Advisory (DSA-4736-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : gd (EulerOS-SA-2020-1802)
According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the GD Graphics Library aka LibGD through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gdtiff.c. NOTE: the vendor says 'In my...
Ubuntu: Security Advisory (USN-4435-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Magento End of Life (EOL) Detection
The Magento version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
GLSA-202007-20 : fuseiso: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-20 fuseiso: Multiple vulnerabilities Multiple vulnerabilities have been discovered in fuseiso. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a special...
GLSA-202007-21 : Libreswan: Denial of service
The remote host is affected by the vulnerability described in GLSA-202007-21 Libreswan: Denial of service As a result of a bug in handling certain bogus encrypted IKEv1, while building a log message that the packet has been dropped, a NULL pointer dereference causes Libreswan to crash and restart...