Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current zlib Vulnerability (SSA:2022-288-01)

The version of zlib installed on the remote host is prior to 1.2.13. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-288-01 advisory. - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field...

Slackware Linux 15.0 / current python3 Vulnerability (SSA:2022-286-01)

The version of python3 installed on the remote host is prior to 3.9.15. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-286-01 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested...

Slackware Linux 15.0 / current php Multiple Vulnerabilities (SSA:2022-273-02)

The version of php installed on the remote host is prior to 7.4.32. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-273-02 advisory. - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files,...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current dnsmasq Vulnerability (SSA:2022-269-01)

The version of dnsmasq installed on the remote host is prior to 2.87. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-269-01 advisory. - A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet...

Slackware: Security Advisory (SSA:2022-266-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current bind Multiple Vulnerabilities (SSA:2022-264-01)

The version of bind installed on the remote host is prior to 9.16.33 / 9.18.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-264-01 advisory. - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current expat Vulnerability (SSA:2022-263-01)

The version of expat installed on the remote host is prior to 2.4.3 / 2.4.9. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-263-01 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not...

Slackware: Security Advisory (SSA:2022-252-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current python3 Vulnerability (SSA:2022-250-01)

The version of python3 installed on the remote host is prior to 3.9.14. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-250-01 advisory. - A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system coul...

Slackware Linux 15.0 mozilla-firefox Multiple Vulnerabilities (SSA:2022-249-01)

The version of mozilla-firefox installed on the remote host is prior to 102.2.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-249-01 advisory. - Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions CVE-2022-38473 - A data ra...

Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-237-02)

The version of kernel-generic installed on the remote host is prior to 5.15.63 / 5.15.63smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-237-02 advisory. New kernel packages are available for Slackware 15.0 to fix security issues. Tenable has extracted the...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2022-229-01)

The version of vim installed on the remote host is prior to 8.2.4649 / 9.0.0223. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-229-01 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.0211. CVE-2022-2816 - Use After Free in GitHub...

Slackware Linux 15.0 / current mariadb Multiple Vulnerabilities (SSA:2022-228-01)

The version of mariadb installed on the remote host is prior to 10.5.17 / 10.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-228-01 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current rsync Vulnerability (SSA:2022-227-01)

The version of rsync installed on the remote host is prior to 3.2.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-227-01 advisory. - An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of...

Siemens JT2Go < 13.3.0.5 RCE (SSA-829738)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.3.0.5. It is, therefore, affected by a heap-based buffer overflow flaw that could cause a denial of service DoS condition or remote code execution if exploited by an attacker. Note that Nessus has not tested for thi...

Fedora: Security Advisory for golang-x-tools (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current wavpack Multiple Vulnerabilities (SSA:2022-191-01)

The version of wavpack installed on the remote host is prior to 5.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-191-01 advisory. - An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function...

Slackware Linux 15.0 / current gnupg2 Vulnerability (SSA:2022-188-01)

The version of gnupg2 installed on the remote host is prior to 2.2.36. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-188-01 advisory. - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2022-181-01)

The version of mozilla-thunderbird installed on the remote host is prior to 102.0 / 91.11.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-181-01 advisory. - The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of...

Slackware Linux 14.2 openssl Multiple Vulnerabilities (SSA:2022-179-03)

The version of openssl installed on the remote host is prior to 1.0.2u. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-179-03 advisory. - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distribut...