Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : curl vulnerability (USN-7012-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7012-1 advisory. Hiroki Kurosawa discovered that curl incorrectly handled certain OCSP responses. This could result in bad certificates not being checked...

Rocky Linux 9 : dovecot (RLSA-2024:6529)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:6529 advisory. dovecot: using a large number of address headers may trigger a denial of service CVE-2024-23184 dovecot: very large headers can cause resource exhaustio...

Photon OS 4.0: Linux PHSA-2024-4.0-0691

An update of the linux package has been released. File data PhotonOSPHSA-2024-40-0691linux.nasl...

Slackware Linux 15.0 / current libarchive Multiple Vulnerabilities (SSA:2024-258-01)

The version of libarchive installed on the remote host is prior to 3.7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-258-01 advisory. New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Fedora 40 : chromium (2024-0a4a65f805)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-0a4a65f805 advisory. update to 128.0.6613.137 High CVE-2024-8636: Heap buffer overflow in Skia High CVE-2024-8637: Use after free in Media Router High CVE-2024-8638: Typ...

SUSE SLES15: libprotobuf-lite25_1_0 / libprotobuf25_1_0 / libprotoc25_1_0 / etc (SUSE-SU-SUSE-RU-2024:1637-3)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2024:1637-3 advisory. - Add python311 cloud services packages and dependencies jscPED-7987, jscPED-6697 - Bellow 5 binaries Obsolete the python3.6...

FreeBSD : chromium -- multiple security fixes (e464f777-719e-11ef-8a0f-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e464f777-719e-11ef-8a0f-a8a1599412c6 advisory. Chrome Releases reports: This update includes 4 security fixes: Tenable has extracted the...

RHEL 7 : python-setuptools (RHSA-2024:6662)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:6662 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

SUSE SLED15: libpcap-devel / libpcap-devel-32bit / libpcap-devel-static / etc (SUSE-SU-2024:3217-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3217-1 advisory. - CVE-2024-8006: NULL pointer dereference in function pcapfindalldevsex. bsc1230034 -...

RHEL 8 : kpatch-patch-4_18_0-305_120_1 and kpatch-patch-4_18_0-305_138_1 (RHSA-2024:6663)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6663 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch...

FreeBSD : Gitlab -- vulnerabilities (bcc8b21e-7122-11ef-bece-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bcc8b21e-7122-11ef-bece-2cf05da270f3 advisory. Gitlab reports: Execute environment stop actions as the owner of the stop action job Prevent...

RHEL 7 : python3-setuptools (RHSA-2024:6661)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:6661 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-2388)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2024-2431)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1.CVE-2023-42363 Tenable has extracted...

EulerOS 2.0 SP10 : python-lxml (EulerOS-SA-2024-2450)

According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An XML External Entity XXE vulnerability in the ebookmeta.getmetadata function of lxml before v4.9.1 allows attackers to access sensitive...

EulerOS 2.0 SP10 : ruby (EulerOS-SA-2024-2452)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract...

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2024-2378)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.CVE-2024-28219 Tenable has...

EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-2363)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat through 2.5.0 allows a denial of service resource consumption because many full reparsings are required in the case of a large token for...

EulerOS 2.0 SP9 : httpd (EulerOS-SA-2024-2393)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services,...

EulerOS 2.0 SP10 : libndp (EulerOS-SA-2024-2445)

According to the versions of the libndp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a...