Amazon Linux 2023 : pcre2, pcre2-devel, pcre2-static (ALAS2023-2023-045)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-045 advisory. An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the pcre2jitcompile.c file. This involves a unicode property matching issue ...

Amazon Linux 2023 : ncurses, ncurses-base, ncurses-c++-libs (ALAS2023-2023-023)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-023 advisory. The ncurses package tic is susceptible to a heap overflow on crafted input. When the terminfo entry- description compiler processes input, proper bounds checking was not enforced leading to thi...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1055)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1055 advisory. - A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privile...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-47519)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47519 advisory. - An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTROPERCHANNEL...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-0394)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0394 advisory. - A NULL pointer dereference flaw was found in rawv6pushpendingframes in net/ipv6/raw.c in the...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41891)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41891 advisory. - TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListConcat is given...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27449)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27449 advisory. - MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41901)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41901 advisory. - TensorFlow is an open source platform for machine learning. An input sparsematrix that is not a matrix...

CBL Mariner 2.0 Security Update: hyperv-daemons (CVE-2022-4379)

The version of hyperv-daemons installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4379 advisory. - A use-after-free vulnerability was found in nfs42sscopen in fs/nfs/nfs4file.c in the Linux kernel. Th...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-33744)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-33744 advisory. - Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42376)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42376 advisory. - A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted...

Fedora 36 : pack (2023-0c354a3f9a)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0c354a3f9a advisory. Security fix for CVE-2022-41717 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 36 : pypy3.7 (2023-930077c742)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-930077c742 advisory. CVE-2022-37454: Fix buffer overflows in sha3 module Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Debian DSA-5375-1 : thunderbird - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5375 advisory. - Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially...

Fedora 36 : tkimg (2023-40b675d7ae)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-40b675d7ae advisory. Apply upstream libtiff fix for CVE-2022-4645 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 37 : mingw-python-werkzeug (2023-af75e27098)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-af75e27098 advisory. Update to python-werkzeug-2.2.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Mozilla Thunderbird < 102.9

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 102.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-11 advisory. - Mozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory safety...

Atlassian Jira 7.0.6 < 8.5.4 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 7.0.6 prior to 8.5.4 or 8.6.x prior to 8.7.1. It is, therefore, affected by multiple vulnerabilities: - A flaw which permits remote attackers to achieve Denial of Service via a...

Fedora 37 : strongswan (2023-25800591ef)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-25800591ef advisory. Update to 5.9.10 for CVE-2023-26463 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2023:0653-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:0653-1 advisory. - Fixed a regression introduced with security update for CVE-2022-46340 bsc1205874. Tenable has extracted the preceding description block directly from...