Fedora 19 : qt-4.8.5-15.fc19 (2013-22932)

Qt Project Security Advisory: XML Entity Expansion Denial of Service CVE-2013-4549 See also http://lists.qt-project.org/pipermail/announce/2013-December/000036.ht ml In addition, this update : - adds support for the aarch64 architecture, - fixes QTBUG-35459, a too low character limit for XML...

ColdFusion Extended Support Version Detection (credentialed check)

According to its version, there is at least one installation of ColdFusion that is potentially under Extended Support. Note that the Extended Support program requires a vendor contract. Extended Support provides upgrades and security fixes for two years after regular support ends. C Tenable Netwo...

Fedora 20 : kernel-3.12.8-300.fc20 (2014-1062)

The 3.12.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : kernel-3.12.8-200.fc19 (2014-1072)

The 3.12.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : graphviz vulnerabilities (USN-2083-1)

It was discovered that Graphviz incorrectly handled memory in the yyerror function. If a user were tricked into opening a specially crafted dot file, an attacker could cause Graphviz to crash, or possibly execute arbitrary code. CVE-2014-0978, CVE-2014-1235 It was discovered that Graphviz...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2014-0026)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0026 advisory. 1.7.0.51-2.4.4.1.0.1.el65 - Update DISTRONAME in specfile 1.7.0.51-2.4.4.1.el6 - restored java7 provides - bumped release builds exists - Resolves:...

Fedora 20 : java-1.7.0-openjdk-1.7.0.60-2.4.4.0.fc20 (2014-0885)

Security update to icedtea 2.4.4 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

Fedora 19 : java-1.7.0-openjdk-1.7.0.60-2.4.4.0.fc19 (2014-0945)

Security update to icedtea 2.4.4 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

Fedora 19 : kernel-3.12.7-200.fc19 (2014-0684)

The 3.12.7 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

MySQL 5.5 < 5.5.34 Multiple Vulnerabilities

The version of MySQL installed on the remote host is 5.5.x prior to 5.5.34. It is, therefore, potentially affected by vulnerabilities in the following components : - InnoDB - Locking - Partition - Optimizer C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71973;...

Fedora 18 : asterisk-11.7.0-1.fc18 (2013-24142)

Sat Dec 28 2013 Jeffrey Ollie - 11.7.0-1 : - The Asterisk Development Team has announced the release of Asterisk 11.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk Note that Tenable Network Security has extracted the preceding...

Fedora 20 : asterisk-11.7.0-1.fc20 (2013-24108)

Sat Dec 28 2013 Jeffrey Ollie - 11.7.0-1 : - The Asterisk Development Team has announced the release of Asterisk 11.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk Note that Tenable Network Security has extracted the preceding...

Solaris 10 (sparc) : 143749-02 (deprecated)

Messaging Server 7u2-12.01: core patch. Date this patch was last updated by Sun : Sep/21/10 This plugin has been deprecated and either replaced with individual 143749 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

Ubuntu 13.04 : linux vulnerabilities (USN-2073-1)

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload UFO. An unprivileged local user could exploit this flaw to cause a denial of service system crash or possibly gain administrative privileges. CVE-2013-4470 Multiple integer overflow flaws were discovered in the...

Fedora 20 : devscripts-2.13.9-1.fc20 (2013-23975)

Update to 2.13.9, see http://ftp-master.metadata.debian.org/changelogs//main/d /devscripts/devscripts2.13.9changelog for details - Fix CVE-2013-7085 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

Ubuntu 12.10 : linux vulnerabilities (USN-2071-1)

Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event subsystem that allows normal users to enable function tracing. An unprivileged local user could exploit this flaw to obtain potentially sensitive information from the kernel. CVE-2013-2930 Stephan Mueller reported an erro...

Ubuntu 13.10 : linux vulnerabilities (USN-2075-1)

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 Dave Jones and Vince Weaver reported a flaw in the Linux kernel's per event subsystem that allows...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-2064-1)

Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. CVE-2013-4345 A flaw was discovered in the Linux kernel's IP Virtual Server IPVS support. A local user with the CAPNETADMI...

Solaris 10 (x86) : 147694-99 (deprecated)

JavaSE 7x86: update 99 patch equivalent. Date this patch was last updated by Sun : Mar/23/16 This plugin has been deprecated and either replaced with individual 147694 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

Solaris 10 (sparc) : 124581-11 (deprecated)

commcli 7.0-11.00: core patch. Date this patch was last updated by Sun : Mar/12/15 This plugin has been deprecated and either replaced with individual 124581 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...