RHEL 8 : subversion (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - subversion: malicious SVN clients can crash moddavsvn CVE-2018-11803 Note that Nessus has not tested for this issue...

RHEL 5 : zsh (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - zsh: buffer overrun in symlinks CVE-2017-18206 - In builtin.c in zsh before 5.4, when sh compatibility mo...

RHEL 7 : hw_amd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - hw amd: Return Address Predictor vulnerability leading to information disclosure CVE-2023-20569 Note that Nessus ha...

RHEL 5 : imagemagick,_graphicsmagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ImageMagick, GraphicsMagick: Heap based buffer over-write in DescribeImage function of the...

RHEL 6 : hunspell (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring in suggestmgr.cxx CVE-2019-16707 Note that Nessus h...

RHEL 8 : lz4 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - lz4: heap-based buffer overflow in LZ4write32 CVE-2019-17543 Note that Nessus has not tested for this issue but has...

RHEL 9 : sdl2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - SDL2: memory leak in GLESCreateTexture in render/opengles/SDLrendergles.c CVE-2022-4743 Note that Nessus has not...

RHEL 8 : mdadm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mdadm: Buffer overflow CVE-2023-28736 Note that Nessus has not tested for this issue but has instead relied on the...

RHEL 5 : mesa (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mesa: security bypass in 3D library graphics CVE-2019-5068 Note that Nessus has not tested for this issue but has...

RHEL 8 : nettle (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nettle: Leaky data conversion exposing a manager oracle CVE-2018-16869 Note that Nessus has not tested for this iss...

RHEL 7 : libzip (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libzip: Memory allocation failure in zipcdirgrow function CVE-2017-14107 Note that Nessus has not tested for this...

RHEL 7 : python-crypto (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - python-crypto: Weak ElGamal key parameters in PublicKey/ElGamal.py allow attackers to obtain sensitive information ...

RHEL 5 : xsa174_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xsa174 xen: hugetlbfs use may crash PV Linux guests XSA-174 CVE-2016-3961 Note that Nessus has not tested for this...

RHEL 5 : nautilus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - nautilus: Insufficient validation of trust of .desktop files with execute permission CVE-2017-14604 Note that Nessu...

RHEL 7 : pyopenssl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - pyOpenSSL: Failure to release memory before removing last reference in PKCS 12 Store CVE-2018-1000808 Note that...

RHEL 6 : hivex (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - hivex: Buffer overflow when provided invalid node key length CVE-2021-3504 - A flaw was found in the hive...

RHEL 6 : json5 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json5: Prototype Pollution in JSON5 via Parse Method CVE-2022-46175 Note that Nessus has not tested for this issue...

RHEL 7 : json5 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json5: Prototype Pollution in JSON5 via Parse Method CVE-2022-46175 Note that Nessus has not tested for this issue...

RHEL 6 : pki (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - pki: Dogtag's python client does not validate certificates CVE-2020-15720 Note that Nessus has not tested for this...

RHEL 8 : libbpf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libbpf: heap-based buffer overflow 8 bytes in bpfobjectopen CVE-2021-45941 - libbpf 0.6.0 and 0.6.1 has a...