365954 matches found
RHEL 8 : freerdp (RHSA-2026:73027)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73027 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...
RHEL 10 : kernel (RHSA-2026:73187)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73187 advisory. A special build of the kernel packages for Red Hat Enterprise Linux for NVIDIA. For more details about the security issues, including the...
Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3139)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3139 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers CVE-2026-68082 In the Linux kernel, the following vulnerability has be...
Debian dsa-6524 : flatpak - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6524 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6524-1 [email protected] https://www.debian.org/securit...
Fedora 43 : NetworkManager-l2tp (2026-1b63888725)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1b63888725 advisory. Updated to 1.52.6 Includes fixes for CVE-2026-75131 & CVE-2026-93337 Tenable has extracted the preceding description block directly from the Fedora...
Amazon Linux 2023 : nodejs24, nodejs24-devel, nodejs24-full-i18n (ALAS2023-2026-3107)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3107 advisory. undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and...
Amazon Linux 2 : firefox (ALASFIREFOX-2026-065)
The version of firefox installed on the remote host is prior to 140.16.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-065 advisory. Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 15...
RHEL 9 : kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, kpatch-patch-5_14_0-284_172_1, and kpatch-patch-5_14_0-284_188_1 (RHSA-2026:72628)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72628 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
RHEL 9 : kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 (RHSA-2026:72630)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72630 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Erlang vulnerabilities (USN-8827-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8827-1 advisory. It was discovered that the Erlang Port Mapper Daemon did not properly handle slow...
RHEL 8 : kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_158_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 (RHSA-2026:72629)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72629 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
RHEL 10 : kernel (RHSA-2026:72624)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72624 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: nSVM: Raise UD if...
Amazon Linux 2 : rclone (ALAS-2026-3947)
The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3947 advisory. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the...
Amazon Linux 2023 : network-flow-monitor-agent (ALAS2023-2026-3116)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3116 advisory. libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a fixed-size strncmp smartpkt.c:239 against the...
RHEL 8 : acl (RHSA-2026:72820)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72820 advisory. Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfac...
RHEL 8 : acl (RHSA-2026:72819)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72819 advisory. Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfac...
SUSE SLES15 Security Update : kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4359-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4359-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: -...
Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-116)
The version of kernel installed on the remote host is prior to 5.15.220-153.252. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-116 advisory. In the Linux kernel, the following vulnerability has been resolved: futex: Prevent lockup in requeue-PI...
SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:4376-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4376-1 advisory. - CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided bsc1272575. - CVE-2026-62363:...
Amazon Linux 2 : curl (ALAS-2026-3953)
The version of curl installed on the remote host is prior to 8.3.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3953 advisory. When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the to...
Amazon Linux 2023 : python3.13-tornado (ALAS2023-2026-3092)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3092 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py...
Fedora 44 : NetworkManager-iodine (2026-5463db437e)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5463db437e advisory. Fix CVE-2026-91837 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Amazon Linux 2023 : composer (ALAS2023-2026-3136)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3136 advisory. Package bin path can escape the package directory, bypassing the GHSA-gjfg-22fp-rrxx fix. A malicious or compromised Composer package could, when installed as a dependency, cause Composer to...
Amazon Linux 2023 : squid (ALAS2023-2026-3145)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3145 advisory. Due to a CWE-841 Improper Enforcement of Behavioral Workflowbug Squid is vulnerable to a Request Smuggling attack againstHTTP/1.1 Transfer-Encoding. This problem allows a trusted client to perform an...
Amazon Linux 2 : libpcap (ALAS-2026-3927)
The version of libpcap installed on the remote host is prior to 1.5.3-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3927 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit...
SUSE SLES15 Security Update : redis7 (SUSE-SU-2026:4375-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4375-1 advisory. This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...
Fedora 44 : vlc (2026-ad90eab763)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ad90eab763 advisory. VLC 3.0.24: https://code.videolan.org/videolan/vlc/-/tags/3.0.24 Switch GUI to Qt6 Re-enable AS-DCP plugin Disable RDP plugin Disable Real RTSP plug...
RHEL 9 : cjose (RHSA-2026:73128)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73128 advisory. CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: cjose: Heap buffer overflow in AES Key Wra...
RHEL 9 : expat (RHSA-2026:72663)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72663 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: Expat: Denial of Service via quadratic complexity in attribute...
Amazon Linux 2 : 389-ds-base (ALAS-2026-3926)
The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3926 advisory. A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into t...
Amazon Linux 2 : 389-ds-base (ALAS-2026-3957)
The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3957 advisory. A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In...
AlmaLinux 10 : cockpit-image-builder (ALSA-2026:71543)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:71543 advisory. fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding CVE-2026-75899 fast-uri: fast-uri: Server-side request forgery vi...
Amazon Linux 2 : unbound (ALAS-2026-3941)
The version of unbound installed on the remote host is prior to 1.7.3-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3941 advisory. In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap...
Slackware Linux 15.0 / current groff Vulnerability (SSA:2026-271-01)
The version of groff installed on the remote host is prior to 1.24.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-271-01 advisory. New groff packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding descripti...
RHCOS 4 : OpenShift Container Platform 4.22.16 (RHSA-2026:71445)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71445 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - net/http: golang...
Linux Distros Unpatched Vulnerability : CVE-2026-97027
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry .desktop and D-Bus Service .service files, inste...
Fedora 45 : NetworkManager-iodine (2026-ccf41b012c)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ccf41b012c advisory. Fix CVE-2026-91837 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-3137)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3137 advisory. For a secondary zone with transfers restricted by TSIG, named may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow...
Amazon Linux 2023 : environment-modules, environment-modules-compat (ALAS2023-2026-3135)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3135 advisory. modulecomgenwordsandfiles fed untrusted text module names readoff disk, LOADEDMODULES, MODULEPATH straight into compgen -W, whichperforms a full unquoted-word expansion on its wordlist --...
Amazon Linux 2023 : bubblewrap (ALAS2023-2026-3105)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3105 advisory. A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : PyJWT vulnerabilities (USN-8823-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8823-1 advisory. It was discovered that PyJWT incorrectly handled certain URIs when using PyJWKClient. A remot...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : LXC vulnerabilities (USN-8826-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8826-1 advisory. Maher Azzouzi discovered that LXC did not correctly handle logging certain failure messages. ...
Linux Distros Unpatched Vulnerability : CVE-2026-101911
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address6 constructor, Address6.isValid, and par...
Linux Distros Unpatched Vulnerability : CVE-2026-97399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may cras...
Amazon Linux 2 : exiv2 (ALAS-2026-3946)
The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3946 advisory. Heap out-of-bounds write in RemoteIo when reading from a malicious remote server WebReady/Curl builds CVE-2026-68546 Tenable has...
Amazon Linux 2023 : nodejs22, nodejs22-devel, nodejs22-full-i18n (ALAS2023-2026-3123)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3123 advisory. undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connecti...
Amazon Linux 2 : environment-modules (ALAS-2026-3942)
The version of environment-modules installed on the remote host is prior to 3.2.10-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3942 advisory. modulecomgenwordsandfiles fed untrusted text module names readoff disk, LOADEDMODULES, MODULEPATH straight into compg...
Amazon Linux 2023 : libpcap, libpcap-devel (ALAS2023-2026-3100)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3100 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not...
Fedora 45 : grub2 (2026-72dbe745c7)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-72dbe745c7 advisory. security fix on the GRUB serial cmd Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...
Amazon Linux 2023 : corosync, corosync-vqsim, corosynclib (ALAS2023-2026-3138)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3138 advisory. A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runti...