openSUSE 15 Security Update : jetty-minimal (openSUSE-SU-2021:2005-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2005-1 advisory. - In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a...

openSUSE 15 Security Update : libwebp (openSUSE-SU-2021:1860-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1860-1 advisory. - A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest thre...

Siemens JT2Go < 13.2 Multiple Vulnerabilities (SSA-483182)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2. It is, therefore, affected by multiple vulnerabilities, including the following: - The Gifloader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This cou...

SUSE SLES12: kernel-livepatch-4_12_14-197_83-default / etc (SUSE-SU-2021:2332-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2332-1 advisory. This update for the Linux Kernel 4.12.14-12263 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed ...

Juniper Junos OS Vulnerability (JSA11191)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11191 advisory. - When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet AE interface units, a Time-of-check Time-of-use TOCTOU Race Condition...

Adobe Acrobat < 2017.011.30199 / 2020.004.30006 / 2021.005.20058 Multiple Vulnerabilities (APSB21-51)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2017.011.30199, 2020.004.30006, or 2021.005.20058. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197...

F5 Networks BIG-IP : Linux kernel vulnerability (K04337834)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5 / 15.1.5.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K04337834 advisory. Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or...

PHP 7.3.x < 7.3.29 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 7.3.x prior to 7.3.29, 7.4.x prior to 7.4.21, or 8.x prior to 8.0.8. It is, therefore, affected by multiple vulnerabilities: - Server-Side Request Forgery SSRF bypass in FILTERVALIDATEURL...

PHP 8.x < 8.0.8 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 7.3.x prior to 7.3.29, 7.4.x prior to 7.4.21, or 8.x prior to 8.0.8. It is, therefore, affected by multiple vulnerabilities: - Server-Side Request Forgery SSRF bypass in FILTERVALIDATEURL...

SUSE SLES11 Security Update : djvulibre (SUSE-SU-2021:14761-1)

The remote SUSE Linux SLES11 / SLESSAP11 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:14761-1 advisory. - CVE-2021-3630: out-of-bounds write in DJVU:DjVuTXT:decode in DjVuText.cpp bsc1187869 Tenable has extracted the preceding description bloc...

Atlassian Jira 8.6.x < 8.12.2 Information Disclosure

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.18, 8.x 8.5.9 or 8.6.x 8.12.2. It is, therefore, affected by an information disclosure vulnerability due to a missing permissions check in the ActionsAndOperations resour...

Debian DLA-2700-1 : htmldoc - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2700 advisory. A buffer overflow was discovered in HTMLDOC, a HTML processor that generates indexed HTML, PS, and PDF, which could potentially result in the execution of arbitrar...

SUSE SLED15 / SLES15 Security Update : arpwatch (SUSE-SU-2021:2177-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2021:2177-1 advisory. - CVE-2021-25321: Fixed local privilege escalation from runtime user to root bsc1186240. Tenable has extracted the preceding...

openSUSE 15 Security Update : gupnp (openSUSE-SU-2021:0917-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:0917-1 advisory. - An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this...

Ubuntu 18.04 LTS : OpenEXR vulnerabilities (USN-4996-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4996-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a...

SUSE SLES12: kernel-livepatch-5_3_18-24_61-default / etc (SUSE-SU-2021:2067-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2067-1 advisory. This update for the Linux Kernel 4.12.14-12266 fixes several issues. The following issues were fixed: - CVE-2021-33034: Fixed a...

Ubuntu 18.04 LTS / 20.04 LTS : BlueZ vulnerabilities (USN-4989-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4989-1 advisory. It was discovered that BlueZ incorrectly checked certain permissions when pairing. A local attacker could possibly use this issue to...

RHEL 8 : microcode_ctl (RHSA-2021:2308)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2308 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: vt-d related privilege escalation CVE-2020-24489 hw:...

CentOS 7 : qemu-kvm (RHSA-2021:2322)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2322 advisory. - ideatapicmdreplyend in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated. CVE-2020-29443 Note that Nessus...

Oracle Linux 8 : container-tools:ol8 (ELSA-2021-2371)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2371 advisory. - fix CVE-2021-30465 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...