Azure Linux 3.0 Security Update: emacs (CVE-2024-30202)

The version of emacs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-30202 advisory. - In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode...

SUSE SLES15 Security Update : openssl-1_1 (SUSE-SU-2025:0349-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0349-1 advisory. - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136 Tenable has extracted the preceding description...

Azure Linux 3.0 Security Update: gdb (CVE-2023-39130)

The version of gdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39130 advisory. - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at...

openSUSE 15 Security Update : python39 (SUSE-SU-2025:0386-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0386-1 advisory. - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705 Tenable has extracted the preceding...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32622)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32622 advisory. - HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from...

Azure Linux 3.0 Security Update: lua / nmap / ntopng (CVE-2022-33099)

The version of lua / nmap / ntopng installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-33099 advisory. - An issue in the component luaGrunerror of Lua v5.4.4 and below leads to a heap-buffer overflow...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32610)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32610 advisory. - HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

EulerOS 2.0 SP12 : iptraf-ng (EulerOS-SA-2025-1191)

According to the versions of the iptraf-ng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : VUL-0: CVE-2024-52949: iptraf-ng: limit interface name lengths to IFNAMSIZCVE-2024-52949 Tenable has extracted the preceding description block...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32618)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32618 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tgetnativetype in H5Tnative.c, resultin...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-33874)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-33874 advisory. - HDF5 Library through 1.14.3 has a heap buffer overflow in H5Omtimenewencode in H5Omtime.c. CVE-2024-33874 Note...

Updated chromium-browser-stable packages fix security vulnerability

Use after free in DevTools. CVE-2025-0762...

SUSE SLES12: libxml2-2 / libxml2-2-32bit / libxml2-devel / libxml2-doc / etc (SUSE-SU-2025:0300-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0300-1 advisory. - CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. bsc1236460 Tenable has extracted the preceding description block directly from the SUSE...

Oracle Linux 9 : redis:7 (ELSA-2025-0692)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0692 advisory. 7.2.7-1 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 Tenable has extracted the preceding description block directly from the Oracle Linux...

CBL Mariner 2.0 Security Update: packer / terraform (CVE-2023-0475)

The version of packer / terraform installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0475 advisory. - HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 an...

Photon OS 4.0: Chromium PHSA-2025-4.0-0734

An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0734. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CBL Mariner 2.0 Security Update: socat (CVE-2024-54661)

The version of socat installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-54661 advisory. - readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file. CVE-2024-54661 Note that Nessus has...

Photon OS 4.0: Gtk3 PHSA-2025-4.0-0733

An update of the gtk3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0733. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AlmaLinux 9 : dpdk (ALSA-2025:0210)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:0210 advisory. dpdk: Denial Of Service from malicious guest on hypervisors using DPDK Vhost library CVE-2024-11614 Tenable has extracted the preceding description block directly...

CBL Mariner 2.0 Security Update: avahi (CVE-2023-38470)

The version of avahi installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38470 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the avahiescapelabel function...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2024-27532)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27532 advisory. - wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR 06df58f is vulnerable to NULL Pointer Dereferen...