CBL Mariner 2.0 Security Update: postgresql (CVE-2024-7348)

The version of postgresql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-7348 advisory. - Time-of-check Time-of-use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execu...

CBL Mariner 2.0 Security Update: frr (CVE-2024-31950)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31950 advisory. - In FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseri for OSPF LSA...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-41073)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41073 advisory. - In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload ...

CBL Mariner 2.0 Security Update: libxml2 (CVE-2024-34459)

The version of libxml2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-34459 advisory. - An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error...

GitLab 11.2 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-4660)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was...

CBL Mariner 2.0 Security Update: python3 / tensorflow (CVE-2024-7592)

The version of python3 / tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-7592 advisory. - There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standa...

CBL Mariner 2.0 Security Update: frr (CVE-2024-31951)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31951 advisory. - In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon...

EulerOS 2.0 SP10 : dnsmasq (EulerOS-SA-2024-2433)

According to the versions of the dnsmasq package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery.CVE-2023-49441 Tenable has extracted the preceding description block directly from...

EulerOS 2.0 SP9 : gtk2 (EulerOS-SA-2024-2392)

According to the versions of the gtk2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current...

openSUSE 15 Security Update : ntpd-rs (openSUSE-SU-2024:0300-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0300-1 advisory. - Introducing ntpd-rs version 1.2.3 Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that Nessus has...

Fedora 40 : wolfssl (2024-ed1a50aa61)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ed1a50aa61 advisory. RHBZ2308628 RHBZ2308629 RHBZ2308630 RHBZ2308631 fixed in 5.7.2 release Tenable has extracted the preceding description block directly from the Fedor...

GitLab 16.5 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-4472)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Adobe Acrobat < 20.005.30680 / 24.001.30187 / 24.003.20112 Multiple Vulnerabilities (APSB24-70) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30680, 24.001.30187, or 24.003.20112. It is, therefore, affected by multiple vulnerabilities. - Access of Resource Using Incompatible Type 'Type Confusion' potentially leading to Arbitrary code execution...

GitLab 15.10 < 17.1.7 / 17.2 < 17.2.5 / 17.3 < 17.3.2 (CVE-2024-5435)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before...

Security Updates for Microsoft SQL Server (September 2024) (Remote)

The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Fedora 40 : nextcloud (2024-296a0db958)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-296a0db958 advisory. 29.0.6 release RHBZ2305125 RHBZ2309499 fixes CVE-2024-39338 Tenable has extracted the preceding description block directly from the Fedora security advisory...

EulerOS 2.0 SP9 : libldb (EulerOS-SA-2024-2371)

According to the versions of the libldb package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : MaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670 Tenable has extracted the preceding description block directly from the EulerOS libl...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2023-33976)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-33976 advisory. - TensorFlow is an end-to-end open source platform for machine learning. arrayops.upperbound causes a...

SUSE SLED15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2024:3204-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3204-1 advisory. - CVE-2024-8096: OCSP stapling bypass with GnuTLS. bsc1230093 Tenable has extracted the preceding...

CBL Mariner 2.0 Security Update: libsndfile (CVE-2022-33065)

The version of libsndfile installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-33065 advisory. - Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and...