Photon OS 3.0: Linux PHSA-2024-3.0-0795

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0795. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2024-26979)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26979 advisory. - NIST NVD Details CVE-2024-26979 Note that Nessus has not tested for this issue but has...

Fedora 39 : frr (2024-0c063be1cc)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-0c063be1cc advisory. New version 8.5.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

Oracle Linux 8 : python-pillow (ELSA-2024-4227)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4227 advisory. 5.1.1-21 - Security fix for CVE-2024-28219 Resolves: RHEL-31071 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 39 : crosswords / libipuz (2024-4d785e16a2)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-4d785e16a2 advisory. crosswords 0.3.13 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RHEL 6 : libproxy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libproxy: uncontrolled recursion via an infinite stream response leading to stack exhaustion CVE-2020-25219 Note th...

Fedora 40 : rclone (2023-ff1e594f3d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ff1e594f3d advisory. Automatic update for rclone-1.64.0-1.fc40. Changelog Thu Oct 12 2023 Mikel Olasagasti Uranga - 1.64.0-1 - Update to 1.64.0 - Closes rhbz2238581...

Fedora 40 : iperf3 (2023-6edfbd5d17)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6edfbd5d17 advisory. Automatic update for iperf3-3.15-1.fc40. Changelog Tue Oct 17 2023 Jonathan Wright - 3.15-1 - Update to 3.15 rhbz2239199 rhbz2244708 Tenable has extracted th...

Fedora 38 : rust-routinator (2024-28a151028a)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-28a151028a advisory. from changelog: Fix the RTR listener so that Routinator wont exit if an incoming RTR connection is closed again too quickly. 937, reported by Yohei Nishimura...

Fedora 38 : dotnet6.0 (2024-b0e165ded6)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b0e165ded6 advisory. This is the February 2024 security update for .NET 6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 38 : dhcpcd (2024-2bb2bb2467)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2bb2bb2467 advisory. Finished security issue handling broken DHCP packets. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

SUSE SLES15 Security Update : xen (SUSE-SU-2024:0269-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0269-1 advisory. - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts XSA-449 bsc1218851 Tenable has extracted the preceding description...

Fedora 38 : filezilla / libfilezilla (2023-7934efb5e3)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-7934efb5e3 advisory. Fix for terrapin vulnerability Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

NewStart CGSL MAIN 6.06 : dnsmasq Vulnerability (NS-SA-2023-0141)

The remote NewStart CGSL host, running version MAIN 6.06, has dnsmasq packages installed that are affected by a vulnerability: - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dnsmasq, potentially...

Fedora 39 : bind9-next (2023-1c069009b8)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1c069009b8 advisory. - Upstream release notes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora 39 : python3.11 (2023-4953fc03b9)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4953fc03b9 advisory. Update to 3.11.5 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Rocky Linux 8 : qt5 (RLSA-2022:7482)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7482 advisory. - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not...

Fedora 37 : attract-mode (2023-e58495988e)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e58495988e advisory. Ensure stbimage contains the latest CVE patches Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 38 : bind9-next (2023-a48c162033)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a48c162033 advisory. - Upstream release notes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

openSUSE 15 Security Update : python-Django (openSUSE-SU-2023:0310-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0310-1 advisory. - Denial-of-service possibility in django.utils.text.Truncator fedora-all CVE-2023-43665 Note that Nessus has not tested for this issue but has instead...