CentOS 8 : libvorbis (CESA-2019:3703)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3703 advisory. - libvorbis: heap buffer overflow in mapping0forward function CVE-2018-10392 - libvorbis: stack buffer overflow in barknoisehybridmp function...

CentOS 8 : yum (CESA-2019:3583)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3583 advisory. - libsolv: illegal address access in poolwhatprovides in src/pool.h CVE-2018-20534 - libcomps: use after free when merging two objmrtrees CVE-2019-3817...

CentOS 8 : httpd:2.4 (CESA-2019:0980)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0980 advisory. - httpd: privilege escalation from modules scripts CVE-2019-0211 - httpd: modssl: access control bypass when using per-location client certification...

CentOS 8 : qt5-qtbase (CESA-2019:3390)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3390 advisory. - qt5-qtbase: Double free in QXmlStreamReader CVE-2018-15518 - qt5-qtbase: QImage allocation failure in qgifhandler CVE-2018-19870 - qt5-qtbase:...

CentOS 8 : libreswan (CESA-2019:3391)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3391 advisory. - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check CVE-2019-10155 - libreswan: null-pointer...

CentOS 8 : container-tools:1.0 (CESA-2019:4273)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:4273 advisory. - HTTP/2: flood using PING frames results in unbounded memory growth CVE-2019-9512 - HTTP/2: flood using HEADERS frames results in unbounded memory...

CentOS 8 : python36:3.6 (CESA-2019:0984)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0984 advisory. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 - python-sqlalchemy: SQL Injection when the groupby...

Fedora 33 : erlang (2021-06cbd73fba)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-06cbd73fba advisory. - An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root...

Photon OS 3.0: Glibc PHSA-2021-3.0-0189

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0189. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145696...

CentOS 8 : gnutls (CESA-2019:3600)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3600 advisory. - gnutls: use-after-free/double-free in certificate verification CVE-2019-3829 - gnutls: invalid pointer access upon receiving async handshake messages...

CentOS 8 : httpd:2.4 (CESA-2019:3436)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3436 advisory. - httpd: modauthdigest: access control bypass due to race condition CVE-2019-0217 - httpd: URL normalization inconsistency CVE-2019-0220 Note that Ness...

Apple iCloud Security Updates (HT212145)

Apple iCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:icloud"; ifdescription...

Fedora 32 : firefox / nss (2021-48ff299b05)

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-48ff299b05 advisory. - New Firefox version 85.0 with various Wayland fixes. New NSS version 3.60. FEDORA-2021-48ff299b05 Note that Nessus has not tested for this issue but has...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users to review the Apple security pages for the following products and apply the necessary...

Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Mozilla Security Advisories for Firefox 85,...

Fedora 32 : 1:php-pear (2021-02996612f6)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-02996612f6 advisory. - Tar.php in ArchiveTar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to...

About the security content of Xcode 12.4

About the security content of Xcode 12.4 This document describes the security content of Xcode 12.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Photon OS 2.0: Atftp PHSA-2021-2.0-0313

An update of the atftp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0313. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145417...

About the security content of iOS 14.4 and iPadOS 14.4

About the security content of iOS 14.4 and iPadOS 14.4 This document describes the security content of iOS 14.4 and iPadOS 14.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

Photon OS 1.0: Dnsmasq PHSA-2021-1.0-0356

An update of the dnsmasq package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0356. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...