Fedora: Security Advisory for perl (FEDORA-2020-fd73c08076)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Adobe Illustrator < 24.2.0 Multiple Vulnerabilities (APSB20-37)

The version of Adobe Illustrator installed on the remote Windows host is prior to 24.2.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-37 advisory. - Adobe Illustrator versions 24.1.2 and earlier have a buffer errors vulnerability. Successful exploitation cou...

EulerOS 2.0 SP2 : ruby (EulerOS-SA-2020-1686)

According to the version of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation...

EulerOS 2.0 SP2 : libvncserver (EulerOS-SA-2020-1683)

According to the version of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large heigh...

FreeBSD : libadplug -- Various vulnerabilities (329ecd60-aaf7-11ea-8659-10bf48e1088e)

Malvineous on Github reports : This release fixes the following security issues : - buffer overflow in .bmf - buffer overflow in .dtm - buffer overflow in .mkj - buffer overflow in .a2m - buffer overflow in .rad - buffer overflow in .mtk - double free and OOB reads in .u6m C Tenable Network...

RHEL 8 : microcode_ctl (RHSA-2020:2431)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2431 advisory. Security Fixes: hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 hw: L1D Cache Eviction Sampling CVE-2020-0549 hw: Vector...

RHEL 8 : bind (RHSA-2020:2345)

"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2345 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...

Mozilla Firefox < 77.0

The version of Firefox installed on the remote Windows host is prior to 77.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-20 advisory. - Mozilla developers :Gijs he/him, Randell Jesup reported memory safety bugs present in Firefox 76. Some of these bugs...

Debian: Security Advisory (DLA-2223-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Check_MK End of Life (EOL) Detection

The CheckMK version on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Photon OS 2.0: Linux PHSA-2020-2.0-0245

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0245. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136901...

CentOS 7 : firefox (RHSA-2020:2037)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2037 advisory. - A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash...

Fedora 30 : pure-ftpd (2020-fa83ea0492)

Fix CVE-2020-9365 and CVE-2020-9274 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : json-c vulnerability (USN-4360-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4360-1 advisory. It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to execute arbitrary code...

Ubuntu: Security Advisory (USN-4359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Updates for Microsoft .NET Framework (May 2020)

The Microsoft .NET Framework installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited th...

RHEL 7 : qemu-kvm-ma (RHSA-2020:2065)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2065 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-ma packages provide the...

Fedora: Security Advisory for mingw-gnutls (FEDORA-2020-d14280a6e8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 8 : thunderbird (RHSA-2020:2048)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2048 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 68.8.0. Security Fixes: Mozilla:...

Debian: Security Advisory (DLA-2205-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...