RHEL 7 : kernel (RHSA-2021:2355)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2355 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Integer overflow in IntelR...

RHEL 7 : libldb (RHSA-2021:2331)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2331 advisory. The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. Securit...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2021:1843-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLES15 Security Update : avahi (SUSE-SU-2021:1845-1)

This update for avahi fixes the following issues : CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh bsc1180827 Update avahi-daemon-check-dns.sh from Debian. Our previous version relied on...

RHEL 8 : polkit (RHSA-2021:2238)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2238 advisory. The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privilege...

RHEL 8 : pki-core:10.6 (RHSA-2021:2235)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2235 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: pki-server: Dogtag...

EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2021-1922)

According to the version of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashe...

EulerOS 2.0 SP9 : nss (EulerOS-SA-2021-1931)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly...

EulerOS 2.0 SP9 : c-ares (EulerOS-SA-2021-1941)

According to the version of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions...

EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1955)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access o...

SUSE SLED15 / SLES15 Security Update : bind (SUSE-SU-2021:1826-1)

This update for bind fixes the following issues : CVE-2021-25214: Fixed a broken inbound incremental zone update IXFR which could have caused named to terminate unexpectedly bsc1185345. CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that...

SUSE SLES15 Security Update : ceph (SUSE-SU-2021:1835-1)

This update for ceph fixes the following issues : Update to 15.2.12-83-g528da226523 : CVE-2021-3509 fix cookie injection issue bsc1186021 CVE-2021-3531 RGWSwiftWebsiteHandler::iswebdir checks empty subdirname bsc1186020 CVE-2021-3524 sanitize \r in s3 CORSConfigurations ExposeHeader bsc1185619 No...

Tenable Log Correlation Engine (LCE) < 6.0.9 (TNS-2021-10)

The version of Tenable Log Correlation Engine LCE installed on the remote host is prior to 6.0.9. It is, therefore, affected by multiple vulnerabilities: - Multiple denial of service vulnerabilities in the included OpenSSL component. CVE-2019-1551, CVE-2020-1967, CVE-2020-1971, CVE-2021-3449,...

[R1] LCE 6.0.9 Fixes Multiple Third-party Vulnerabilities

Tenable Log Correlation Engine leverages third-party software to help provide underlying functionality. Two separate third-party components OpenSSL, jQuery were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with good...

RHEL 7 : kernel (RHSA-2021:2164)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2164 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Integer overflow in IntelR...

SUSE SLES12 Security Update : slurm_20_11 (SUSE-SU-2021:1791-1)

This update for slurm2011 fixes the following issues : Udpate to 20.11.7 : CVE-2021-31215: remote code execution as SlurmUser because of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling bsc1186024 Ship REST API version and auth plugins with slurmrestd. Add YAML support...

SUSE SLED15 / SLES15 Security Update : postgresql13 (SUSE-SU-2021:1785-1)

This update for postgresql13 fixes the following issues : Upgrade to version 13.3 : CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. CVE-2021-32029...

RHEL 7 / 8 : OpenShift Container Platform 4.7.12 (RHSA-2021:1562)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:1562 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

Ubuntu 18.04 LTS / 20.04 LTS : Apport vulnerabilities (USN-4965-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4965-1 advisory. Maik Mnch discovered that Apport incorrectly handled certain information gathering operations. A local attacker could use these issues to rea...

Debian DLA-2665-1 : ring security update

An issue has been found in ring, a secure and distributed voice, video and chat platform. Actually the embedded copy of pjproject is affected by this CVE. Due to bad handling of two consecutive crafted answers to an INVITE, the attacker is able to crash the server resulting in a denial of service...