CBL Mariner 2.0 Security Update: ansible (CVE-2024-0690)

The version of ansible installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0690 advisory. - An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLENOLOG...

CBL Mariner 2.0 Security Update: nodejs18 / nodejs (CVE-2024-27983)

The version of nodejs18 / nodejs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27983 advisory. - An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount o...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-32610)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32610 advisory. - HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

Oracle Linux 8 : go-toolset (ELSA-2024-4237)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4237 advisory. - Update to Go1.21.11 to address CVE-2024-24789 and CVE-2024-24790 - Rebase to Go1.21.11 that includes fixes for CVE-2024-24789 and CVE-2024-24790...

AlmaLinux 9 : golang (ALSA-2024:4212)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4212 advisory. golang: archive/zip: Incorrect handling of certain ZIP files CVE-2024-24789 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-1086)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1086 advisory. - A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achiev...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-26455)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26455 advisory. - fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-...

CBL Mariner 2.0 Security Update: moby-containerd / moby-engine (CVE-2023-25153)

The version of moby-containerd / moby-engine installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-25153 advisory. - containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, wh...

CBL Mariner 2.0 Security Update: unzip (CVE-2014-8141)

The version of unzip installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2014-8141 advisory. - Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows remote...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2022-36764)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36764 advisory. - EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage function, allowing a user to trigg...

CBL Mariner 2.0 Security Update: etcd / kubernetes (CVE-2022-34038)

The version of etcd / kubernetes installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-34038 advisory. - Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-29164)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29164 advisory. - HDF5 through 1.14.3 contains a stack buffer overflow in H5Rdecodeheap, resulting in the corruption of the...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-29162)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29162 advisory. - HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HGread, resulting in denial of service...

CBL Mariner 2.0 Security Update: patch (CVE-2019-13636)

The version of patch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-13636 advisory. - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files...

AlmaLinux 8 : python-jinja2 (ALSA-2024:4231)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:4231 advisory. jinja2: accepts keys containing non-attribute characters CVE-2024-34064 Tenable has extracted the preceding description block directly from the AlmaLinux security...

CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2023-45230)

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45230 advisory. - EDK2's Network Package is susceptible to a buffer overflow vulnerability via a long server ID optio...

CBL Mariner 2.0 Security Update: clamav (CVE-2024-20328)

The version of clamav installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20328 advisory. - A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary command...

CBL Mariner 2.0 Security Update: rust / netavark / kata-containers / rpm-ostree (CVE-2023-22466)

The version of rust / netavark / kata-containers / rpm-ostree installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-22466 advisory. - Tokio is a runtime for writing applications with Rust. Starting with...

CBL Mariner 2.0 Security Update: grub2 (CVE-2021-3696)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3696 advisory. - A heap out-of-bounds write May heppen during the handling of Huffman tables in the PNG reader. This may lead t...

CBL Mariner 2.0 Security Update: hdf5 (CVE-2024-29166)

The version of hdf5 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29166 advisory. - HDF5 through 1.14.3 contains a buffer overflow in H5Olinfodecode, resulting in the corruption of the instructi...