SUSE SLED12 / SLES12 Security Update : wpa_supplicant (SUSE-SU-2017:2745-1) (KRACK)

This update for wpasupplicant fixes the security issues : - Several vulnerabilities in standard conforming implementations of the WPA2 protocol have been discovered and published under the code name KRACK. This update remedies those issues in a backwards compatible manner, i.e. the updated...

Microsoft Windows 10 Version 1511 Unsupported Version Detection (deprecated)

This plugin has been replaced by Windows Security-End-of-Life plugins. C Tenable Network Security, Inc. @DEPRECATED@ Deprecated on 2024 Mar 14. Replaced by Windows SEoL plugins. include"compat.inc"; if description scriptid103877; scriptversion"1.10";...

Microsoft Windows Network Adapters

Using the supplied credentials, this plugin enumerates and reports the installed network adapters on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103871; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Ubuntu 14.04 LTS / 16.04 LTS : wpa_supplicant and hostapd vulnerabilities (USN-3455-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3455-1 advisory. Mathy Vanhoef discovered that wpasupplicant and hostapd incorrectly handled WPA2. A remote attacker could use this issue with key...

Ubuntu 14.04 LTS / 16.04 LTS : X.Org X server vulnerabilities (USN-3453-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3453-1 advisory. Michal Srb discovered that the X.Org X server incorrectly handled shared memory segments. An attacker able to connect to an X server, either...

Oracle Linux 6 / 7 : thunderbird (ELSA-2017-2885)

The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2885 advisory. 52.4.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.4.0-2 - Update to 52.4.0 b2 Tenable has...

SUSE SLES11 Security Update : samba (SUSE-SU-2017:2715-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624 - CVE-2017-12150: Always enforce smb signing when it is configured...

Ubuntu 14.04 LTS : Ceph vulnerabilities (USN-3452-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3452-1 advisory. It was discovered that Ceph incorrectly handled the handlecommand function. A remote authenticated user could use this issue to cause Ceph to crash,...

Ubuntu 16.04 LTS : Open vSwitch vulnerabilities (USN-3450-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3450-1 advisory. Bhargava Shastry discovered that Open vSwitch incorrectly handled certain OFP messages. A remote attacker could possibly use this issue to cause Open...

Ubuntu 14.04 LTS : OpenStack Horizon vulnerability (USN-3447-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3447-1 advisory. Beth Lancaster and Brandon Sawyers discovered that OpenStack Horizon was incorrect protected against cross-site scripting XSS attacks. A remote authenticated user...

Ubuntu 14.04 LTS / 16.04 LTS : libXfont vulnerabilities (USN-3442-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3442-1 advisory. It was discovered that libXfont incorrectly handled certain patterns in PatternMatch. A local attacker could use this issue to cause libXfont...

Ubuntu 16.04 LTS : Linux kernel (GCP) vulnerability (USN-3443-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3443-3 advisory. Andrey Konovalov discovered that a divide-by-zero error existed in the TCP stack implementation in the Linux kernel. A local attacker could use this to cause a...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3629)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3629 advisory. - brcmfmac: fix possible buffer overflow in brcmfcfg80211mgmttx Tim Tianyang Chen Orabug: 26943541 CVE-2017-7541 Tenable has extracted the preceding...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3444-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3444-1 advisory. Jan H. Schnherr discovered that the Xen subsystem did not properly handle block IO merges correctly in some situations. An attacker in a guest vm could u...

SUSE SLES11 Security Update : salt (SUSE-SU-2017:2666-1)

This update for salt fixes one security issue and bugs. The following security issue has been fixed : - CVE-2017-12791: Directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via a crafted minion ID bsc1053955. The...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2017:2695-1)

This update for samba fixes several issues. These security issues were fixed : - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client bsc1058624 - CVE-2017-12150: Always enforce smb signing when it is configured...

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3443-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3443-2 advisory. USN-3443-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement H...

EulerOS 2.0 SP2 : samba (EulerOS-SA-2017-1234)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a...

SUSE SLED12 / SLES12 Security Update : krb5 (SUSE-SU-2017:2659-1)

This update for krb5 fixes several issues. This security issue was fixed : - CVE-2017-11462: Prevent automatic security context deletion to prevent double-free bsc1056995 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracte...

Debian DLA-1127-1 : sam2p security update

Several vulnerabilites, like heap-based buffer overflows, integer signedness or overflow errors have been found by fpbibi and have been fixed by upstream. For Debian 7 'Wheezy', these problems have been fixed in version 0.49.1-1+deb7u1. We recommend that you upgrade your sam2p packages. NOTE:...