Ubuntu 14.04 LTS / 16.04 LTS : ClamAV vulnerabilities (USN-3550-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3550-1 advisory. It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to...

pfSense < 2.2.3 Multiple Vulnerabilities (SA-15_07) (Logjam)

According to its self-reported version number, the remote pfSense install is prior to 2.2.3. It is, therefore, affected by multiple vulnerabilities as stated in the referenced vendor advisories. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106495;...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0276-1)

This update for the Linux Kernel 3.12.69-606432 fixes several issues. The following security issues were fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0266-1)

This update for the Linux Kernel 3.12.74-606457 fixes several issues. The following security issues were fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0267-1)

This update for the Linux Kernel 3.12.74-606466 fixes one issue. The following security issue was fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted...

Ubuntu 16.04 LTS : Linux kernel (KVM) vulnerabilities (USN-3549-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3549-1 advisory. Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel...

SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2018:0246-1)

This update for xorg-x11-libs fixes several issues. These security issues were fixed : - CVE-2017-16612: Heap overflows due to an integer overflow while parsing images and a signedness issue while parsing comments bsc1065386. - CVE-2017-13720: Improper check for end of string in PatterMatch cause...

Debian DLA-1257-1 : openssh security update

OpenSSH was found to be vulnerable to out of order NEWKEYS messages which could crash the daemon, resulting in a denial of service attack. For Debian 7 'Wheezy', these problems have been fixed in version 1:6.0p1-4+deb7u7. We recommend that you upgrade your openssh packages. NOTE: Tenable Network...

EulerOS 2.0 SP1 : ruby (EulerOS-SA-2018-1029)

According to the version of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The lazyinitialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernelopen, which might allow Command Injection attacks, as demonstrated by a...

Oracle Linux 7 : dhcp (ELSA-2018-0158)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0158 advisory. 12:4.2.5-58.0.1.1 - Added oracle-errwarn-message.patch 12:4.2.5-58.1 - Resolves: 1523475 - Fix omapi socket descriptors leak Tenable has extracted the preceding...

Ubuntu 17.10 : linux vulnerability (USN-3548-1)

Jay Vosburgh discovered a logic error in the x86-64 syscall entry implementation in the Linux kernel, introduced as part of the mitigations for the Spectre vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. Note that Tenable Network...

WordPress < 3.1.3 Multiple Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 3.1.3. It is, therefore, affected by multiple unspecified vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Ubuntu 14.04 LTS / 16.04 LTS : Libtasn1 vulnerabilities (USN-3547-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3547-1 advisory. It was discovered that Libtasn1 incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could...

Ubuntu 16.04 LTS : gcab vulnerability (USN-3546-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3546-1 advisory. Richard Hughes discovered that gcab incorrectly handled certain malformed cabinet files. If a user or automated system were tricked into opening a specially craft...

SUSE SLED12 / SLES12 Security Update : libexif (SUSE-SU-2018:0193-1)

This update for libexif fixes several issues. These security issues were fixed : - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file bsc1055857 - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

Fedora 27 : glibc (2018-7714b514e2)

This update addresses two security vulnerabilities : - CVE-2017-16997: Check for empty tokens before dynamic string token expansion in the dynamic linker, so that pre-existing privileged programs with $ORIGIN rpaths/runpaths do not cause the dynamic linker to search the current directory,...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-001) (Meltdown)

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - Audio - curl - IOHIDFamily - Kernel - LinkPresentation - QuartzCore - Sandbox - Security - WebKit - Wi-Fi ...

SUSE SLES11 Security Update : ncurses (SUSE-SU-2018:0178-1)

This update for ncurses fixes the following issues: Security issue fixed : - CVE-2017-13733: Fix illegal address access in the fmtentry function bsc1056127. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3540-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3540-2 advisory. USN-3540-1 addressed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware...

SUSE SLES11 Security Update : rsync (SUSE-SU-2018:0172-1)

This update for rsync fixes one issues. This security issue was fixed : - CVE-2018-5764: The parsearguments function in options.c did not prevent multiple --protect-args uses, which allowed remote attackers to bypass an argument-sanitization protection mechanism bsc1076503 Note that Tenable Netwo...