CentOS 8 : gnutls (CESA-2020:5483)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5483 advisory. - gnutls: Heap buffer overflow in handshake with norenegotiation alert sent CVE-2020-24659 Note that Nessus has not tested for this issue but has instead relied...

CentOS 8 : unbound (CESA-2020:2416)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2416 advisory. - unbound: amplification of an incoming query into a large number of queries directed to a target CVE-2020-12662 - unbound: infinite loop via malformed...

CentOS 8 : unzip (CESA-2020:1787)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1787 advisory. - unzip: overlapping of files in ZIP container leads to denial of service CVE-2019-13232 Note that Nessus has not tested for this issue but has instead relied...

RHEL 8 : flatpak (RHSA-2021:0304)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0304 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: sandbox escape via spaw...

CentOS 8 : mod_auth_mellon (CESA-2020:1660)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1660 advisory. - modauthmellon: Open Redirect via the login?ReturnTo= substring which could facilitate information theft CVE-2019-13038 Note that Nessus has not tested for thi...

CentOS 8 : openwsman (CESA-2020:4689)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4689 advisory. - openwsman: Infinite loop in processconnection allows denial of service CVE-2019-3833 Note that Nessus has not tested for this issue but has instead relied onl...

CentOS 8 : openssl (CESA-2020:5476)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5476 advisory. - openssl: EDIPARTYNAME NULL pointer de-reference CVE-2020-1971 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 8 : flatpak (RHSA-2021:0306)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0306 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: sandbox escape via spaw...

CentOS 8 : dovecot (CESA-2020:4763)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4763 advisory. - dovecot: command followed by sufficient number of newlines leads to use-after-free CVE-2020-10958 - dovecot: sending mail with empty quoted localpart...

CentOS 8 : pcre2 (CESA-2020:4539)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory. - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode CVE-2019-20454 Note that Nessus has not tested for this issue but has instead relied only...

CentOS 8 : libarchive (CESA-2020:4443)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4443 advisory. - libarchive: out-of-bounds read in archivewstringappendfrommbs in archivestring.c CVE-2019-19221 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : httpd:2.4 (CESA-2020:3714)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3714 advisory. - httpd: Push diary crash on specifically crafted HTTP/2 header CVE-2020-9490 Note that Nessus has not tested for this issue but has instead relied only on the...

RHEL 7 : thunderbird (RHSA-2021:0297)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0297 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.7.0. Security Fixes: Mozilla:...

CentOS 8 : mod_auth_mellon (CESA-2019:3421)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3421 advisory. - modauthmellon: open redirect in logout url when using URLs with backslashes CVE-2019-3877 Note that Nessus has not tested for this issue but has instead relie...

RHEL 7 : firefox (RHSA-2021:0290)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0290 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CentOS 8 : kernel (CESA-2019:3871)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3871 advisory. - hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write CVE-2019-0155 Note that Nessus has not tested for this issue but has instead...

CentOS 8 : edk2 (CESA-2019:0968)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:0968 advisory. - edk2: Buffer Overflow in BlockIo service for RAM disk CVE-2018-12180 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : pki-deps:10.6 (CESA-2019:2720)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2720 advisory. - jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution CVE-2019-12384 Note that Nessus ha...

RHEL 6 : sudo (RHSA-2021:0227)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0227 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

RHEL 7 : sudo (RHSA-2021:0226)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0226 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...