EulerOS 2.0 SP8 : dnsmasq (EulerOS-SA-2024-2461)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certain DNSSEC aspects of the DNS protocol in RFC 4033, 4034, 4035, 6840, and related RFCs allow remote attackers to cause a denial of service CP...

EulerOS 2.0 SP8 : sssd (EulerOS-SA-2024-2492)

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper...

EulerOS 2.0 SP8 : grpc (EulerOS-SA-2024-2470)

According to the versions of the grpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a...

SUSE SLES15 Security Update : kernel (Live Patch 27 for SLE 15 SP4) (SUSE-SU-2024:3365-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3365-1 advisory. This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent...

RHEL 8 : python3 (RHSA-2024:6975)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6975 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2024-2460)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowe...

Ubuntu 22.04 LTS : py7zr vulnerability (USN-7030-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7030-1 advisory. It was discovered that py7zr was vulnerable to path traversal attacks. If a user or automated system were tricked into extracting a specially crafted 7z archive, ...

RHEL 8 : gtk3 (RHSA-2024:6963)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:6963 advisory. The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3. Security Fixes:...

EulerOS 2.0 SP8 : python-pillow (EulerOS-SA-2024-2488)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than...

Oracle Linux 8 : python3 (ELSA-2024-6975)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6975 advisory. - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 Tenable has extracted the preceding...

EulerOS 2.0 SP8 : squid (EulerOS-SA-2024-2491)

According to the versions of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Squid is a caching proxy for the Web. Due to an expired pointer reference bug, Squid prior to version 6.6 is vulnerable to a Denial of Service attac...

EulerOS 2.0 SP8 : libgit2 (EulerOS-SA-2024-2477)

According to the versions of the libgit2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionalit...

EulerOS 2.0 SP8 : glibc (EulerOS-SA-2024-2466)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file...

EulerOS 2.0 SP8 : jose (EulerOS-SA-2024-2475)

According to the versions of the jose packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : latchset jose through version 11 allows attackers to cause a denial of service CPU consumption via a large p2c aka PBES2 Count value.CVE-2023-50967...

RHEL 8 : kernel (RHSA-2024:6998)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6998 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: fix possible store tearin...

RHEL 9 : kernel (RHSA-2024:6997)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6997 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: uio: Fix use-after-free in...

Oracle Linux 7 : kernel (ELSA-2024-12684)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12684 advisory. 3.10.0-1160.119.1.0.4.el7.OL7 - fuse: fix pipe buffer lifetime for directio Miklos Szeredi 3.10.0-1160.119.1.0.4.el7.OL7 Tenable has extracted the preceding...

EulerOS 2.0 SP8 : gnutls (EulerOS-SA-2024-2467)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of...

EulerOS 2.0 SP8 : freeglut (EulerOS-SA-2024-2464)

According to the versions of the freeglut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function.CVE-2024-24259 freegl...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2024:3384-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3384-1 advisory. - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. bsc1230227 - CVE-2024-7592: quadratic algorith...