Fedora 20 : kernel-3.13.3-201.fc20 (2014-2576)

The 3.13.3 stable update contains a number of important fixes across the tree. The 3.13.2 rebase contains support for additional hardware, some new features and a number of important bug fixes across the tree. Fixes CVE-2014-0069 cifs: incorrect handling of bogus user pointers Note that Tenable...

Microsoft Windows SMB Registry : Windows 8.1 / Server 2012 R2 Service Pack Detection

It was possible to determine the service pack version of the Windows 8.1 / Server 2012 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72543; scriptversion"1.5";...

Fedora 20 : python-2.7.5-10.fc20 (2014-2394)

Buffer overflow fix. See upstream issue: http://bugs.python.org/issue20246 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Oracle Linux 5 : piranha (ELSA-2014-0174)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-0174 advisory. 0.8.4-26.1.0.1 - Replace web/web/RedHat.gif with updated image in tarball 0.8.4-26.1 - Resolves: 1061903 - require authentication for all HTTP methods 0.8.4-26 ...

Fedora 19 : firefox-27.0-1.fc19 / xulrunner-27.0-1.fc19 (2014-2051)

See following page for changes: http://www.mozilla.org/en-US/firefox/27.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2014-3002)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3002 advisory. - ipoutput: do skb ufo init for peeked non ufo skb as well Jiri Pirko Orabug: 17951078 CVE-2013-4470 - ip6output: do skb ufo init for peeked non ufo sk...

Fedora 20 : libpng10-1.0.60-6.fc20 (2014-1778)

This update fixes an issue in which an image with a missing or empty palette could cause a crash of a libpng10-using application CVE-2013-6954. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Microsoft Internet Explorer Version Detection

The remote Windows host contains Internet Explorer, a web browser created by Microsoft. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72367; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01"; scriptxrefname:"IAVT",...

Oracle Linux 6 : openldap (ELSA-2014-0126)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0126 advisory. 2.4.23-34.1 - fix: segfault on certain queries with rwm overlay 1058250 2.4.23-34 - fix: deadlock during SSLForceHandshake 996373 + revert...

Fedora 19 : mingw-openssl-1.0.1e-5.fc19 (2014-1560)

Synced patches with native openssl-1.0.1e-38.fc21 which fixes various CVE's and also enables ECC support Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Fedora 19 : nss-3.15.4-1.fc19 / nss-softokn-3.15.4-1.fc19 / nss-util-3.15.4-1.fc19 (2014-1100)

Update of the nss, nss-softokn, and nss-util packages to nss-3.15.4, a patch release for NSS 3.15 which includes the following security-relevant bug : CVE-2013-1740 When false start is enabled, libssl will sometimes return unencrypted, unauthenticated data from PRRecv For further details refer to...

Flash Player for Mac <= 11.7.700.260 / 12.0.0.43 Unspecified Remote Code Execution (APSB14-04)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is equal or prior to 11.7.700.260 / 11.8.x / 11.9.x / 12.0.0.43. It is, therefore, potentially affected by an unspecified vulnerability that could lead to arbitrary code execution. C Tenable Network...

Fedora 20 : perl-MARC-XML-1.0.2-1.fc20 (2014-1341)

Bump to 1.0.2 to address XML external entity exploit CVE-2014-1626 per https://metacpan.org/source/GMCHARLT/MARC-XML-1.0.2/ChangesL3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Ubuntu 12.04 LTS : libotr vulnerabilities (USN-2091-1)

This update disables the OTR v1 protocol to prevent protocol downgrade attacks. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Oracle Linux 5 : kernel (ELSA-2014-0108)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0108 advisory. kernel 2.6.18-371.4.1 - char ipmi: fix message handling during panics Tony Camuso 1049731 995293 - net igb: Use 32bit mask calculating the flow control watermar...

Oracle Linux 6 : libvirt (ELSA-2014-0103)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0103 advisory. - qemu: Do not access stale data in virDomainBlockStats CVE-2013-6458 - qemu: Avoid using stale data in virDomainGetBlockInfo CVE-2013-6458 - qemu: Fix...

Fedora 19 : libXfont-1.4.5-5.fc19 (2014-0467)

Fix CVE-2013-6462, potential stack overflow, see http://lists.x.org/archives/xorg/2014-January/056265.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...

Fedora 20 : drupal7-7.26-1.fc20 (2014-1015)

Fix for SA-CORE-2014-001 : https://drupal.org/drupal-7.26-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 19 : drupal7-7.26-1.fc19 (2014-0983)

Fix for SA-CORE-2014-001 : https://drupal.org/drupal-7.26-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Note that Tenable Network Security has extracted the preceding description block directly from the...

Ubuntu 12.10 / 13.04 / 13.10 : openjdk-7 vulnerabilities (USN-2089-1)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. CVE-2013-3829, CVE-2013-5783, CVE-2013-5804, CVE-2014-0411 Several vulnerabilities were discovered in the...