PT-2024-16805

Name of the Vulnerable Software and Affected Versions MDaemon Email Server versions prior to 24.5.1c Description An XSS issue was discovered in MDaemon Email Server, allowing a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window by sending an HTML...

Fedora 41 : unbound (2024-a5d6cd9f0a)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a5d6cd9f0a advisory. Fixed builds on F41. Fixes CVE-2024-8508 - https://github.com/NLnetLabs/unbound/releases/tag/release-1.21.1 Tenable has extracted the preceding...

Fedora 37 : moodle (2022-74a9c8e95f)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-74a9c8e95f advisory. Fixes for multiple CVEs Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : golang-opentelemetry-contrib / golang-opentelemetry-otel (2024-971a3a4ef7)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-971a3a4ef7 advisory. Update opentelemetry stack to 1.17 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : krb5 (2022-a1747aca80)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-a1747aca80 advisory. Security fix for CVE-2022-42898 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time. CVE-2024-36484 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."...

Medium: python-pillow

Issue Overview: In imagingcms.c, two strcpy calls were able to copy too much data into fixed length strings. This has been fixed by using strncpy instead. CVE-2024-28219 Affected Packages: python-pillow Issue Correction: Run dnf update python-pillow --releasever 2023.6.20241111 to update your...

PT-2024-8140

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 17.1 PostgreSQL versions prior to 16.5 PostgreSQL versions prior to 15.9 PostgreSQL versions prior to 14.14 PostgreSQL versions prior to 13.17 PostgreSQL versions prior to 12.21 Description: The issue arises from...

Medium: python3.11-pip

Issue Overview: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode CVE-2024-3651 Affected Packages: python3.11-pip Issue Correction: Run dnf update python3.11-pip --releasever 2023.6.20241111 to update your system. New Packages: noarch: ...

Fedora 41 : osc (2024-3d2a146701)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3d2a146701 advisory. New upstream release 1.9.1, fixes CVE-2024-22034 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 37 : nbd (2022-e1ce6f6d88)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e1ce6f6d88 advisory. Automatic update for nbd-3.24-1.fc37. Changelog Tue Mar 8 2022 Robin Lee 3.24-1 - Update to 3.24: fix CVE-2022-26495RHBZ2061541,...

Fedora 41 : yarnpkg (2024-362915851c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-362915851c advisory. Update bundled ws CVE-2024-37890 ---- Update bundled elliptic to fix CVE-2024-48949. Tenable has extracted the preceding description block directly...

Important: xorg-x11-server

Issue Overview: A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions wher...

Fedora 41 : mingw-expat (2024-c5d55d5845)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c5d55d5845 advisory. Update to expat-2.6.3. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 41 : chromium (2024-aad3597d9e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-aad3597d9e advisory. Update to 130.0.6723.91 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 37 : bash (2022-bf387ff344)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-bf387ff344 advisory. Add a null check in parameterbracetransform function Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

Fedora 37 : grafana (2022-047d3845db)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-047d3845db advisory. Automatic update for grafana-9.0.5-1.fc37. Changelog Wed Jul 27 2022 Andreas Gerstmayr 9.0.5-1 - update to 9.0.5 tagged upstream community sources,...

Fedora 37 : binwalk (2022-a36ba48049)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-a36ba48049 advisory. Security fix for CVE-2021-4287 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

Fedora 37 : mingw-pixman (2022-f3a939e960)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f3a939e960 advisory. Update to 0.42.2, fixes CVE-2022-44638 and CVE-2022-43680. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 38 : python-nbclient / python-nbconvert (2022-b910e3473f)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-b910e3473f advisory. New versions of nbclient and nbconvert. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...