The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4593 advisory.

  - Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks     (CVE-2021-42574)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4368 advisory.

  - openssh: Observable discrepancy leading to an information leak in the algorithm negotiation     (CVE-2020-14145)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4587 advisory.

  - Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks     (CVE-2021-42574)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4226 advisory.

  - grafana: snapshot feature allow an unauthenticated remote attacker to trigger a DoS via a remote API call     (CVE-2021-27358)

  - golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)

  - golang: net: lookup functions may return invalid host names (CVE-2021-33195)

  - golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)

  - golang: crypto/tls: certificate of wrong type is causing TLS client to panic (CVE-2021-34558)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4135 advisory.

  - OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167) (CVE-2021-35556)

  - OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580) (CVE-2021-35559)

  - OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097) (CVE-2021-35561)

  - OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)     (CVE-2021-35564)

  - OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)     (CVE-2021-35567)

  - OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729) (CVE-2021-35578)

  - OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735) (CVE-2021-35586)

  - OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618) (CVE-2021-35603)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4231 advisory.

  - libwebp: out-of-bounds read in WebPMuxCreateInternal (CVE-2018-25009)

  - libwebp: out-of-bounds read in ApplyFilter() (CVE-2018-25010)

  - libwebp: out-of-bounds read in WebPMuxCreateInternal() (CVE-2018-25012)

  - libwebp: out-of-bounds read in ShiftBytes() (CVE-2018-25013)

  - libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014)

  - libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c (CVE-2020-36330)

  - libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c (CVE-2020-36331)

  - libwebp: excessive memory allocation when reading a file (CVE-2020-36332)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4413 advisory.

  - tpm2-tools: fixed AES wrapping key in tpm2_import (CVE-2021-3565)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4364 advisory.

  - binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not     validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c (CVE-2020-35448)

  - binutils: Race window allows users to own arbitrary files (CVE-2021-20197)

  - binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c (CVE-2021-20284)

  - binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c     read_section() (CVE-2021-3487)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4396 advisory.

  - sqlite: dropping of shadow tables not restricted in defensive mode (CVE-2019-13750)

  - sqlite: fts3: improve detection of corrupted records (CVE-2019-13751)

  - sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS (CVE-2019-19603)

  - sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces (CVE-2019-5827)

  - sqlite: NULL pointer dereference in sqlite3ExprCodeTarget() (CVE-2020-13435)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4201 advisory.

  - python-babel: Relative path traversal allows attacker to load arbitrary locale files and     execute arbitrary code (CVE-2021-42771)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4198 advisory.

  - openssl: integer overflow in CipherUpdate (CVE-2021-23840)

  - openssl: NULL pointer dereference in X509_issuer_and_serial_hash() (CVE-2021-23841)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4256 advisory.

  - graphviz: off-by-one in parse_reclbl() in lib/common/shapes.c (CVE-2020-18032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4222 advisory.

  - buildah: Host environment variables leaked in build container when using chroot isolation (CVE-2021-3602)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4251 advisory.

  - openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c     (CVE-2018-20845)

  - openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847)

  - openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727)

  - openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785)

  - openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973)

  - openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on     by the decompressor (CVE-2020-15389)

  - openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814)

  - openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823)

  - openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824)

  - openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842)

  - openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843)

  - openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp     in openjp2/pi.c (CVE-2020-27845)

  - openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c (CVE-2021-29338)

  - openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4404 advisory.

  - kexec-tools: incorrect permissions on kdump dmesg file (CVE-2021-20269)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4191 advisory.

  - QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)

  - QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)

  - QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)

  - QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)

  - QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)

  - libvirt: Insecure sVirt label generation (CVE-2021-3631)

  - libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4358 advisory.

  - glibc: Use-after-free in addgetnetgrentX function in netgroupcache.c (CVE-2021-27645)

  - glibc: mq_notify does not handle separately allocated thread attributes (CVE-2021-33574)

  - glibc: Arbitrary read in wordexp() (CVE-2021-35942)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4154 advisory.

  - containers/storage: DoS via malicious image (CVE-2021-20291)

  - buildah: Host environment variables leaked in build container when using chroot isolation (CVE-2021-3602)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4408 advisory.

  - libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c (CVE-2021-3200)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4399 advisory.

  - python: Information disclosure via pydoc (CVE-2021-3426)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4386 advisory.

  - libiberty: Integer overflow in demangle_template() function (CVE-2018-20673)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4374 advisory.

  - file: heap-based buffer overflow in cdf_read_property_info in cdf.c (CVE-2019-18218)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4356 advisory.

  - kernel: Intel graphics card information leak. (CVE-2019-14615)

  - kernel: out-of-bounds reads in pinctrl subsystem. (CVE-2020-0427)

  - kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24502)

  - kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24503)

  - kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24504)

  - kernel: Fragmentation cache not cleared on reconnection (CVE-2020-24586)

  - kernel: Reassembling fragments encrypted under different keys (CVE-2020-24587)

  - kernel: wifi frame payload being parsed incorrectly as an L2 frame (CVE-2020-24588)

  - kernel: Forwarding EAPOL from unauthenticated wifi client (CVE-2020-26139)

  - kernel: accepting plaintext data frames in protected networks (CVE-2020-26140)

  - kernel: not verifying TKIP MIC of fragmented frames (CVE-2020-26141)

  - kernel: accepting fragmented plaintext frames in protected networks (CVE-2020-26143)

  - kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header (CVE-2020-26144)

  - kernel: accepting plaintext broadcast fragments as full frames (CVE-2020-26145)

  - kernel: reassembling encrypted fragments with non-consecutive packet numbers (CVE-2020-26146)

  - kernel: reassembling mixed encrypted/plaintext fragments (CVE-2020-26147)

  - kernel: powerpc: RTAS calls can be used to compromise kernel integrity (CVE-2020-27777)

  - kernel: the copy-on-write implementation can grant unintended write access because of a race condition in     a THP mapcount check (CVE-2020-29368)

  - kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-     after-free (CVE-2020-29660)

  - kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in     drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value (CVE-2020-36158)

  - kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c     (CVE-2020-36312)

  - kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() in net/bluetooth/hci_event.c     (CVE-2020-36386)

  - kernel: Improper access control in BlueZ may allow information disclosure vulnerability. (CVE-2021-0129)

  - kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() (CVE-2021-20194)

  - kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure (CVE-2021-20239)

  - kernel: Race condition in sctp_destroy_sock list_del (CVE-2021-23133)

  - kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode     (CVE-2021-28950)

  - kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c (CVE-2021-28971)

  - kernel: protection for sequences of pointer arithmetic operations against speculatively out-of-bounds     loads can be bypassed to leak content of kernel memory (CVE-2021-29155)

  - kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c (CVE-2021-29646)

  - kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c     and include/linux/netfilter/x_tables.h may lead to DoS (CVE-2021-29650)

  - kernel: local escalation of privileges in handling of eBPF programs (CVE-2021-31440)

  - kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content     of kernel memory (CVE-2021-31829)

  - kernel: out of bounds array access in drivers/md/dm-ioctl.c (CVE-2021-31916)

  - kernel: use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c (CVE-2021-33033)

  - kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations     by BPF verifier (CVE-2021-33200)

  - kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c (CVE-2021-3348)

  - kernel: Linux kernel eBPF RINGBUF map oversized allocation (CVE-2021-3489)

  - kernel: double free in bluetooth subsystem when the HCI device initialization fails (CVE-2021-3564)

  - kernel: use-after-free in function hci_sock_bound_ioctl() (CVE-2021-3573)

  - kernel: eBPF 32-bit source register truncation on div/mod (CVE-2021-3600)

  - kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50 (CVE-2021-3635)

  - kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (CVE-2021-3659)

  - kernel: DoS in rb_per_cpu_empty() (CVE-2021-3679)

  - kernel: overlayfs: Mounting overlayfs inside an unprivileged user namespace can reveal files     (CVE-2021-3732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4387 advisory.

  - libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL (CVE-2020-16135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4590 advisory.

  - Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks     (CVE-2021-42574)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4316 advisory.

  - zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()     (CVE-2020-18442)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4424 advisory.

  - openssl: integer overflow in CipherUpdate (CVE-2021-23840)

  - openssl: NULL pointer dereference in X509_issuer_and_serial_hash() (CVE-2021-23841)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4510 advisory.

  - lua: segmentation fault in getlocal and setlocal functions in ldebug.c (CVE-2020-24370)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4385 advisory.

  - glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink     (CVE-2021-28153)

  - glib2: Possible privilege escalation thourgh pkexec and aliases (CVE-2021-3800)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4142 advisory.

  - jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods     (CVE-2020-11023)

  - jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces (CVE-2020-7656)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4381 advisory.

  - webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution     (CVE-2020-13558)

  - LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp (CVE-2020-24870)

  - webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2020-27918, CVE-2021-1788,     CVE-2021-30795)

  - webkitgtk: User may be unable to fully delete browsing history (CVE-2020-29623)

  - CVE-2021-28650 gnome-autoar: Directory traversal via directory symbolic links pointing outside of the     destination directory (incomplete  fix) (CVE-2020-36241)

  - webkitgtk: IFrame sandboxing policy violation (CVE-2021-1765, CVE-2021-1801)

  - webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-1789)

  - webkitgtk: Access to restricted ports on arbitrary servers via port redirection (CVE-2021-1799)

  - webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-1844)

  - webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1870, CVE-2021-1871)

  - webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and     possibly code execution (CVE-2021-21775)

  - webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code     execution (CVE-2021-21779)

  - webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution (CVE-2021-21806)

  - gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination     directory (incomplete CVE-2020-36241 fix) (CVE-2021-28650)

  - webkitgtk: Integer overflow leading to arbitrary code execution (CVE-2021-30663)

  - webkitgtk: Memory corruption leading to arbitrary code execution (CVE-2021-30665)

  - webkitgtk: Logic issue leading to leak of sensitive user information (CVE-2021-30682)

  - webkitgtk: Logic issue leading to universal cross site scripting attack (CVE-2021-30689)

  - webkitgtk: Logic issue allowing access to restricted ports on arbitrary servers (CVE-2021-30720)

  - webkitgtk: Memory corruptions leading to arbitrary code execution (CVE-2021-30734, CVE-2021-30749,     CVE-2021-30799)

  - webkitgtk: Cross-origin issue with iframe elements leading to universal cross site scripting attack     (CVE-2021-30744)

  - webkitgtk: Type confusion leading to arbitrary code execution (CVE-2021-30758)

  - webkitgtk: Insufficient checks leading to arbitrary code execution (CVE-2021-30797)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4213 advisory.

  - php: Use of freed hash key in the phar_parse_zipfile function (CVE-2020-7068)

  - php: Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVE-2020-7069)

  - php: URL decoding of cookie names can lead to different interpretation of cookies between browser and     server (CVE-2020-7070)

  - php: FILTER_VALIDATE_URL accepts URLs with invalid userinfo (CVE-2020-7071)

  - php: NULL pointer dereference in SoapClient (CVE-2021-21702)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4179 advisory.

  - file-roller: directory traversal via directory symlink pointing outside of the target directory     (incomplete fix for CVE-2020-11736) (CVE-2020-36314)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4156 advisory.

  - golang: net: lookup functions may return invalid host names (CVE-2021-33195)

  - golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty (CVE-2021-33197)

  - golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large     exponents (CVE-2021-33198)

  - golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4519 advisory.

  - autotrace: integer overflow in input-bmp.c (CVE-2019-19004)

  - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4513 advisory.

  - libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36084, CVE-2021-36085)

  - libsepol: use-after-free in cil_reset_classpermission() (CVE-2021-36086)

  - libsepol: heap-based buffer overflow in ebitmap_match_any() (CVE-2021-36087)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4140 advisory.

  - kernel: Intel graphics card information leak. (CVE-2019-14615)

  - kernel: out-of-bounds reads in pinctrl subsystem. (CVE-2020-0427)

  - kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24502)

  - kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24503)

  - kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24504)

  - kernel: Fragmentation cache not cleared on reconnection (CVE-2020-24586)

  - kernel: Reassembling fragments encrypted under different keys (CVE-2020-24587)

  - kernel: wifi frame payload being parsed incorrectly as an L2 frame (CVE-2020-24588)

  - kernel: Forwarding EAPOL from unauthenticated wifi client (CVE-2020-26139)

  - kernel: accepting plaintext data frames in protected networks (CVE-2020-26140)

  - kernel: not verifying TKIP MIC of fragmented frames (CVE-2020-26141)

  - kernel: accepting fragmented plaintext frames in protected networks (CVE-2020-26143)

  - kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header (CVE-2020-26144)

  - kernel: accepting plaintext broadcast fragments as full frames (CVE-2020-26145)

  - kernel: reassembling encrypted fragments with non-consecutive packet numbers (CVE-2020-26146)

  - kernel: reassembling mixed encrypted/plaintext fragments (CVE-2020-26147)

  - kernel: the copy-on-write implementation can grant unintended write access because of a race condition in     a THP mapcount check (CVE-2020-29368)

  - kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-     after-free (CVE-2020-29660)

  - kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in     drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value (CVE-2020-36158)

  - kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c     (CVE-2020-36312)

  - kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() in net/bluetooth/hci_event.c     (CVE-2020-36386)

  - kernel: Improper access control in BlueZ may allow information disclosure vulnerability. (CVE-2021-0129)

  - kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() (CVE-2021-20194)

  - kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure (CVE-2021-20239)

  - kernel: Race condition in sctp_destroy_sock list_del (CVE-2021-23133)

  - kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode     (CVE-2021-28950)

  - kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c (CVE-2021-28971)

  - kernel: protection for sequences of pointer arithmetic operations against speculatively out-of-bounds     loads can be bypassed to leak content of kernel memory (CVE-2021-29155)

  - kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c (CVE-2021-29646)

  - kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c     and include/linux/netfilter/x_tables.h may lead to DoS (CVE-2021-29650)

  - kernel: local escalation of privileges in handling of eBPF programs (CVE-2021-31440)

  - kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content     of kernel memory (CVE-2021-31829)

  - kernel: out of bounds array access in drivers/md/dm-ioctl.c (CVE-2021-31916)

  - kernel: use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c (CVE-2021-33033)

  - kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations     by BPF verifier (CVE-2021-33200)

  - kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c (CVE-2021-3348)

  - kernel: Linux kernel eBPF RINGBUF map oversized allocation (CVE-2021-3489)

  - kernel: double free in bluetooth subsystem when the HCI device initialization fails (CVE-2021-3564)

  - kernel: use-after-free in function hci_sock_bound_ioctl() (CVE-2021-3573)

  - kernel: eBPF 32-bit source register truncation on div/mod (CVE-2021-3600)

  - kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50 (CVE-2021-3635)

  - kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (CVE-2021-3659)

  - kernel: DoS in rb_per_cpu_empty() (CVE-2021-3679)

  - kernel: overlayfs: Mounting overlayfs inside an unprivileged user namespace can reveal files     (CVE-2021-3732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4153 advisory.

  - dnsmasq: fixed outgoing port used when --server is used with an interface name (CVE-2021-3448)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4489 advisory.

  - rpm: missing length checks in hdrblobInit() (CVE-2021-20266)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4511 advisory.

  - curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)

  - CVE-2021-22925 curl: Incorrect fix for  TELNET stack contents disclosure (CVE-2021-22898)

  - curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure (CVE-2021-22925)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4319 advisory.

  - exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS     (CVE-2021-31292)

  - exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618)

  - exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-37619)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4315 advisory.

  - spamassassin: Malicious rule configuration files can be configured to run system commands (CVE-2020-1946)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4162 advisory.

  - python-psutil: Double free because of refcount mishandling (CVE-2019-18874)

  - python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)

  - python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

  - python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

  - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

  - python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

  - python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

  - python: Information disclosure via pydoc (CVE-2021-3426)

  - python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

  - python-babel: Relative path traversal allows attacker to load arbitrary locale files and     execute arbitrary code (CVE-2021-42771)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4241 advisory.

  - libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521, CVE-2020-35522)

  - libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523)

  - libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4326 advisory.

  - libX11: missing request length checks (CVE-2021-31535)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4257 advisory.

  - httpd: mod_session: NULL pointer dereference when parsing Cookie header (CVE-2021-26690)

  - httpd: Unexpected URL matching with 'MergeSlashes OFF' (CVE-2021-30641)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4409 advisory.

  - libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel     attack against mpi_powm (CVE-2021-33560)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4517 advisory.

  - vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c (CVE-2021-3778)

  - vim: use-after-free in nv_replace() in normal.c (CVE-2021-3796)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4172 advisory.

  - qt: Out of bounds read in function QRadialFetchSimd from crafted svg file (CVE-2021-3481)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4382 advisory.

  - json-c: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
155341	CentOS 8 : annobin (CESA-2021:4593)	high
155340	CentOS 8 : openssh (CESA-2021:4368)	medium
155339	CentOS 8 : gcc (CESA-2021:4587)	high
155338	CentOS 8 : grafana (CESA-2021:4226)	high
155337	CentOS 8 : java-17-openjdk (CESA-2021:4135)	medium
155205	CentOS 8 : libwebp (CESA-2021:4231)	critical
155199	CentOS 8 : tpm2-tools (CESA-2021:4413)	medium
155198	CentOS 8 : binutils (CESA-2021:4364)	medium
155196	CentOS 8 : sqlite (CESA-2021:4396)	high
155195	CentOS 8 : babel (CESA-2021:4201)	high
155189	CentOS 8 : edk2 (CESA-2021:4198)	high
155188	CentOS 8 : graphviz (CESA-2021:4256)	high
155187	CentOS 8 : container-tools:3.0 (CESA-2021:4222)	medium
155186	CentOS 8 : openjpeg2 (CESA-2021:4251)	high
155180	CentOS 8 : kexec-tools (CESA-2021:4404)	medium
155176	CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2021:4191)	medium
155175	CentOS 8 : glibc (CESA-2021:4358)	critical
155173	CentOS 8 : container-tools:rhel8 (CESA-2021:4154)	medium
155163	CentOS 8 : libsolv (CESA-2021:4408)	low
155161	CentOS 8 : python3 (CESA-2021:4399)	medium
155156	CentOS 8 : gcc (CESA-2021:4386)	medium
155147	CentOS 8 : file (CESA-2021:4374)	high
155145	CentOS 8 : kernel (CESA-2021:4356)	high
155136	CentOS 8 : libssh (CESA-2021:4387)	medium
155135	CentOS 8 : rust-toolset:rhel8 (CESA-2021:4590)	high
155125	CentOS 8 : zziplib (CESA-2021:4316)	low
155124	CentOS 8 : openssl (CESA-2021:4424)	high
155116	CentOS 8 : lua (CESA-2021:4510)	medium
155099	CentOS 8 : glib2 (CESA-2021:4385)	medium
155098	CentOS 8 : pcs (CESA-2021:4142)	medium
155097	CentOS 8 : GNOME (CESA-2021:4381)	critical
155095	CentOS 8 : php:7.4 (CESA-2021:4213)	medium
155084	CentOS 8 : file-roller (CESA-2021:4179)	low
155083	CentOS 8 : go-toolset:rhel8 (CESA-2021:4156)	high
155078	CentOS 8 : autotrace (CESA-2021:4519)	high
155077	CentOS 8 : libsepol (CESA-2021:4513)	low
155070	CentOS 8 : kernel-rt (CESA-2021:4140)	high
155069	CentOS 8 : dnsmasq (CESA-2021:4153)	medium
155068	CentOS 8 : rpm (CESA-2021:4489)	medium
155067	CentOS 8 : curl (CESA-2021:4511)	medium
155066	CentOS 8 : compat-exiv2-026 (CESA-2021:4319)	high
155065	CentOS 8 : spamassassin (CESA-2021:4315)	critical
155064	CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2021:4162)	critical
155063	CentOS 8 : libtiff (CESA-2021:4241)	high
155062	CentOS 8 : libX11 (CESA-2021:4326)	critical
155061	CentOS 8 : httpd:2.4 (CESA-2021:4257)	medium
155057	CentOS 8 : libgcrypt (CESA-2021:4409)	high
155056	CentOS 8 : vim (CESA-2021:4517)	high
155055	CentOS 8 : qt5 (CESA-2021:4172)	high
155054	CentOS 8 : json-c (CESA-2021:4382)	high

Detections

Analytics

CentOS Local Security Checks Family for Nessus

high

medium

high

high

medium

critical

medium

medium

high

high

high

high

medium

high

medium

medium

critical

medium

low

medium

medium

high

high

medium

high

low

high

medium

medium

medium

critical

medium

low

high

high

low

high

medium

medium

medium

high

critical

critical

high

critical

medium

high

high

high

high