The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1677 advisory.

  - git: gitattributes parsing integer overflow (CVE-2022-23521)

  - git: Heap overflow in `git archive`, `git log --format` leading to RCE (CVE-2022-41903)

  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266)

  - kernel: FUSE filesystem low-privileged user privileges escalation (CVE-2023-0386)

  - nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 8 : Red Hat Virtualization Host 4.4.z SP 1 security update batch#5 (oVirt-4.5.3-5) (Important) (RHSA-2023:1677)

critical Nessus Plugin ID 174389

Version 1.1