GLSA-202007-21 : Libreswan: Denial of service

The remote host is affected by the vulnerability described in GLSA-202007-21 Libreswan: Denial of service As a result of a bug in handling certain bogus encrypted IKEv1, while building a log message that the packet has been dropped, a NULL pointer dereference causes Libreswan to crash and restart...

F5 Networks BIG-IP : FasterXML jackson-databind vulnerability (K15320518)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.2.7 / 15.0.1.4 / 15.1.0.5 / 16.0.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K15320518 advisory. - FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI...

NewStart CGSL MAIN 6.01 : memcached Vulnerability (NS-SA-2020-0033)

The remote NewStart CGSL host, running version MAIN 6.01, has memcached packages installed that are affected by a vulnerability: - In memcached before 1.5.14, a NULL pointer dereference was found in the lru mode and lru tempttl commands. This causes a denial of service when parsing crafted lru...

Amazon Linux 2 : advancecomp (ALAS-2020-1450)

The version of advancecomp installed on the remote host is prior to 1.15-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1450 advisory. In AdvanceCOMP 2.1, pngcompress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which...

Treck/Kasago Network Stack Detection With IP Option.

Binary data treckipopt7.nbin...

Oracle MySQL Connectors (Jul 2020 CPU)

The 8.0.20 and prior versions of MySQL Connectors installed on the remote host are affected by a vulnerability as referenced in the July 2020 CPU advisory. A vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++ OpenSSL. Supported versions that are affected are...

Oracle Primavera Gateway (Jul 2020 CPU)

The 16.2.0-16.2.11, 17.12.0-17.12.7, 18.8.0-18.8.9, and 19.12.0-19.12.4 versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and...

Oracle Enterprise Manager Cloud Control (Jul 2020 CPU)

The 13.3.0.0, 13.4.0.0, and 12.1.0.5 versions of Enterprise Manager Base Platform installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory. - Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager...

Oracle Coherence (July 2020 CPU)

The version of the Oracle Coherence installed on the remote host is missing a critical patch update. It is, therefore, affected by a vulnerability, as referenced in the July 2020 Oracle CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore...

MySQL Denial of Service (Jul 2020 CPU)

The version of MySQL running on the remote host is 5.7.29 and prior or 8.0.19 and prior. It is, therefore, affected by a vulnerability, as noted in the July 2020 Critical Patch Update advisory: A Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported...

Ubuntu: Security Advisory (USN-4422-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Improper Verification of Cryptographic Signature in Johnsoncontrols Exacqvision_Enterprise_Manager

Usage/Help Menu usage: CVE-2020-9047.py -h -p RPORT...

Debian: Security Advisory (DSA-4720-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samba 4.x < 4.10.17 / 4.11.x < 4.11.11 / 4.12.x < 4.12.4 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.x prior to 4.10.17, 4.11.x prior to 4.11.11, or 4.12.x prior to 4.12.4. It is, therefore, affected by multiple vulnerabilities, including the following: - The AD DC NBT server in Samba 4.0 will enter a CPU spin and not process further requests...

Ubuntu: Security Advisory (USN-4418-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MariaDB 10.1.0 < 10.1.45 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.45. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.45 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.47 and...

MariaDB 5.5.0 < 5.5.68 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.68. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.68 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affecte...

EulerOS Virtualization 3.0.6.0 : libxml2 (EulerOS-SA-2020-1768)

According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.CVE-2020-7595 Note...

Ubuntu: Security Advisory (USN-4406-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2020-1690)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...