The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:2897 advisory.

  - jbig2dec: heap-based buffer overflow in jbig2_image_compose in jbig2_image.c (CVE-2020-12268)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2046 advisory.

  - Mozilla: Use-after-free during worker shutdown (CVE-2020-12387)

  - Mozilla: Arbitrary local file access with 'Copy as cURL' (CVE-2020-12392)

  - Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 (CVE-2020-12395)

  - Mozilla: Sender Email Address Spoofing using encoded Unicode characters (CVE-2020-12397)

  - usrsctp: Buffer overflow in AUTH chunk input validation (CVE-2020-6831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2641 advisory.

  - grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send     HTTP requests to any URL (CVE-2020-13379)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4542 advisory.

  - cryptsetup: Out-of-bounds write when validating segments (CVE-2020-14382)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1702 advisory.

  - rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c (CVE-2019-17041)

  - rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c (CVE-2019-17042)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:5562 advisory.

  - chromium-browser: Uninitialized Use in V8 (CVE-2020-16042)

  - Mozilla: Heap buffer overflow in WebGL (CVE-2020-26971)

  - Mozilla: CSS Sanitizer performed incorrect sanitization (CVE-2020-26973)

  - Mozilla: Incorrect cast of StyleGenericFlexBasis resulted in a heap use-after-free (CVE-2020-26974)

  - Mozilla: Internal network hosts could have been probed by a malicious webpage (CVE-2020-26978)

  - Mozilla: The proxy.onRequest API did not catch view-source URLs (CVE-2020-35111)

  - Mozilla: Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6 (CVE-2020-35113)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:0633 advisory.

  - ppp: Buffer overflow in the eap_request and eap_response functions in eap.c (CVE-2020-8597)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4649 advisory.

  - evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4643 advisory.

  - poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc     (CVE-2019-14494)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4634 advisory.

  - libtiff: integer overflow leading to heap-based buffer overflow in tif_getimage.c (CVE-2019-17546)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1631 advisory.

  - libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4469 advisory.

  - cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c (CVE-2020-3898)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:0559 advisory.

  - ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code     injection (CVE-2019-14868)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5487 advisory.

  - pacemaker: ACL restrictions bypass (CVE-2020-25654)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4659 advisory.

  - gd: NULL pointer dereference in gdImageClone (CVE-2018-14553)

  - gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c (CVE-2019-6977)

  - gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c (CVE-2019-6978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5476 advisory.

  - openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4844 advisory.

  - fontforge: SFD_GetFontMetaData() insufficient CVE-2020-5395 backport (CVE-2020-25690)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4465 advisory.

  - binutils: denial of service via crafted ELF file (CVE-2019-17450)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1605 advisory.

  - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074)

  - python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure     (CVE-2018-20060)

  - python: Cookie domain check returns incorrect results (CVE-2018-20852)

  - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on     internal service (CVE-2019-11236)

  - python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

  - python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

  - python: XSS vulnerability in the documentation XML-RPC server in server_title field (CVE-2019-16935)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4689 advisory.

  - openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3665 advisory.

  - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

  - golang: data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586)

  - golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs     (CVE-2020-16845)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1913 advisory.

  - e2fsprogs: Crafted ext4 partition leads to out-of-bounds write (CVE-2019-5094)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:1804 advisory.

  - sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user     (CVE-2019-19232)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1581 advisory.

  - wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840)

  - wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841)

  - wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315)

  - wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317)

  - wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319)

  - wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4433 advisory.

  - python: XSS vulnerability in the documentation XML-RPC server in server_title field (CVE-2019-16935)

  - python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)

  - python: DoS via inefficiency in IPv{4,6}Interface classes (CVE-2020-14422)

  - python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS (CVE-2020-8492)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3669 advisory.

  - postgresql: Selectivity estimators bypass row security policies (CVE-2019-10130)

  - postgresql: Stack-based buffer overflow via setting a password (CVE-2019-10164)

  - postgresql: TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER execution (CVE-2019-10208)

  - postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

  - postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

  - postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4479 advisory.

  - libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c (CVE-2019-19956)

  - libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c (CVE-2019-20388)

  - libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations (CVE-2020-7595)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4436 advisory.

  - fwupd: Possible bypass in signature verification (CVE-2020-10759)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2755 advisory.

  - nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3280 advisory.

  - nss: Use-after-free in sftk_FreeSession due to improper refcounting (CVE-2019-11756)

  - nss: Check length of inputs for cryptographic primitives (CVE-2019-17006)

  - nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state (CVE-2019-17023)

  - nss: Side channel vulnerabilities during RSA key generation (CVE-2020-12402)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4508 advisory.

  - libsolv: out-of-bounds read in repodata_schema2id in repodata.c (CVE-2019-20387)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1878 advisory.

  - samba: Combination of parameters and permissions can allow user to escape from the share path definition     (CVE-2019-10197)

  - samba: smb client vulnerable to filenames containing path separators (CVE-2019-10218)

  - samba: Crash after failed character conversion at log level 3 or above (CVE-2019-14907)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4568 advisory.

  - samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and     paged_results (CVE-2020-10730)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1880 advisory.

  - ibus: missing authorization allows local attacker to access the input bus of another user (CVE-2019-14822)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4670 advisory.

  - jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  - bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  - bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  - bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  - bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)

  - bootstrap: XSS in the affix configuration target property (CVE-2018-20677)

  - jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or     property injection (CVE-2019-11358)

  - bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  - jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  - ipa: No password length restriction leads to denial of service (CVE-2020-1722)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4539 advisory.

  - pcre: Out of bounds read in JIT mode when \X is used in non-UTF mode (CVE-2019-20454)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3732 advisory.

  - mysql: Information Schema unspecified vulnerability (CPU Oct 2019) (CVE-2019-2911)

  - mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2019) (CVE-2019-2914,     CVE-2019-2957)

  - mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938, CVE-2019-2963, CVE-2019-2968,     CVE-2019-3018)

  - mysql: Server: PS unspecified vulnerability (CPU Oct 2019) (CVE-2019-2946)

  - mysql: Server: Replication unspecified vulnerability (CPU Oct 2019) (CVE-2019-2960)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2966, CVE-2019-2967,     CVE-2019-2974, CVE-2019-2982, CVE-2019-2991, CVE-2019-2998)

  - mysql: Server: C API unspecified vulnerability (CPU Oct 2019) (CVE-2019-2993, CVE-2019-3011)

  - mysql: Server: DDL unspecified vulnerability (CPU Oct 2019) (CVE-2019-2997)

  - mysql: Server: Parser unspecified vulnerability (CPU Oct 2019) (CVE-2019-3004)

  - mysql: Server: Connection unspecified vulnerability (CPU Oct 2019) (CVE-2019-3009)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2020) (CVE-2020-14539, CVE-2020-14547,     CVE-2020-14597, CVE-2020-14614, CVE-2020-14654, CVE-2020-14680, CVE-2020-14725)

  - mysql: Server: DML unspecified vulnerability (CPU Jul 2020) (CVE-2020-14540, CVE-2020-14575,     CVE-2020-14620)

  - mysql: C API unspecified vulnerability (CPU Jul 2020) (CVE-2020-14550)

  - mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2020) (CVE-2020-14553)

  - mysql: Server: Information Schema unspecified vulnerability (CPU Jul 2020) (CVE-2020-14559)

  - mysql: Server: Replication unspecified vulnerability (CPU Jul 2020) (CVE-2020-14567)

  - mysql: InnoDB unspecified vulnerability (CPU Jul 2020) (CVE-2020-14568, CVE-2020-14623, CVE-2020-14633,     CVE-2020-14634)

  - mysql: Server: UDF unspecified vulnerability (CPU Jul 2020) (CVE-2020-14576)

  - mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2020) (CVE-2020-14586,     CVE-2020-14663, CVE-2020-14678, CVE-2020-14697, CVE-2020-14702)

  - mysql: Server: Parser unspecified vulnerability (CPU Jul 2020) (CVE-2020-14619)

  - mysql: Server: JSON unspecified vulnerability (CPU Jul 2020) (CVE-2020-14624)

  - mysql: Server: Security: Audit unspecified vulnerability (CPU Jul 2020) (CVE-2020-14631)

  - mysql: Server: Options unspecified vulnerability (CPU Jul 2020) (CVE-2020-14632)

  - mysql: Server: Security: Roles unspecified vulnerability (CPU Jul 2020) (CVE-2020-14641, CVE-2020-14643,     CVE-2020-14651)

  - mysql: Server: Locking unspecified vulnerability (CPU Jul 2020) (CVE-2020-14656)

  - mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2020) (CVE-2020-14799)

  - mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2570, CVE-2020-2573, CVE-2020-2574)

  - mysql: InnoDB unspecified vulnerability (CPU Jan 2020) (CVE-2020-2577, CVE-2020-2589)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2020) (CVE-2020-2579, CVE-2020-2660,     CVE-2020-2679, CVE-2020-2686)

  - mysql: Server: DDL unspecified vulnerability (CPU Jan 2020) (CVE-2020-2580)

  - mysql: Server: Options unspecified vulnerability (CPU Jan 2020) (CVE-2020-2584)

  - mysql: Server: DML unspecified vulnerability (CPU Jan 2020) (CVE-2020-2588)

  - mysql: Server: Parser unspecified vulnerability (CPU Jan 2020) (CVE-2020-2627)

  - mysql: Server: Information Schema unspecified vulnerability (CPU Jan 2020) (CVE-2020-2694)

  - mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752, CVE-2020-2922)

  - mysql: Server: Replication unspecified vulnerability (CPU Apr 2020) (CVE-2020-2759, CVE-2020-2763)

  - mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760, CVE-2020-2762, CVE-2020-2814,     CVE-2020-2893, CVE-2020-2895)

  - mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2020) (CVE-2020-2761,     CVE-2020-2774, CVE-2020-2779, CVE-2020-2853)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2020) (CVE-2020-2765, CVE-2020-2892,     CVE-2020-2897, CVE-2020-2901, CVE-2020-2904, CVE-2020-2923, CVE-2020-2924, CVE-2020-2928)

  - mysql: Server: Logging unspecified vulnerability (CPU Apr 2020) (CVE-2020-2770)

  - mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

  - mysql: Server: Memcached unspecified vulnerability (CPU Apr 2020) (CVE-2020-2804)

  - mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

  - mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2020) (CVE-2020-2896)

  - mysql: Server: Charsets unspecified vulnerability (CPU Apr 2020) (CVE-2020-2898)

  - mysql: Server: Connection Handling unspecified vulnerability (CPU Apr 2020) (CVE-2020-2903)

  - mysql: Server: Group Replication Plugin unspecified vulnerability (CPU Apr 2020) (CVE-2020-2921)

  - mysql: Server: PS unspecified vulnerability (CPU Apr 2020) (CVE-2020-2925)

  - mysql: Server: Group Replication GCS unspecified vulnerability (CPU Apr 2020) (CVE-2020-2926)

  - mysql: Server: Parser unspecified vulnerability (CPU Apr 2020) (CVE-2020-2930)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2021) (CVE-2021-1998, CVE-2021-2016,     CVE-2021-2020)

  - mysql: C API unspecified vulnerability (CPU Jan 2021) (CVE-2021-2006, CVE-2021-2007)

  - mysql: Server: Security: Roles unspecified vulnerability (CPU Jan 2021) (CVE-2021-2009)

  - mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2021) (CVE-2021-2012,     CVE-2021-2019)

  - mysql: Server: Parser unspecified vulnerability (CPU Apr 2021) (CVE-2021-2144)

  - mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2021) (CVE-2021-2160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2901 advisory.

  - dovecot: malformed NOOP commands leads to DoS (CVE-2020-10957)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0202 advisory.

  - OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization,     8224909) (CVE-2020-2583)

  - OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352) (CVE-2020-2590)

  - OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)     (CVE-2020-2593)

  - OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951) (CVE-2020-2601)

  - OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)     (CVE-2020-2604)

  - OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)     (CVE-2020-2654)

  - OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)     (CVE-2020-2659)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3341 advisory.

  - Mozilla: Potential leak of redirect targets when loading scripts in a worker (CVE-2020-15652)

  - Mozilla: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11 (CVE-2020-15659)

  - chromium-browser: Use after free in ANGLE (CVE-2020-6463)

  - chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:2938 advisory.

  - dotnet: XML source markup processing remote code execution (CVE-2020-1147)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0820 advisory.

  - usrsctp: Out of bounds reads in sctp_load_addresses_from_init() (CVE-2019-20503)

  - Mozilla: Use-after-free when removing data about origins (CVE-2020-6805)

  - Mozilla: BodyStream::OnInputStreamReady was missing protections against state confusion (CVE-2020-6806)

  - Mozilla: Use-after-free in cubeb during stream destruction (CVE-2020-6807)

  - Mozilla: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially     leading to command injection (CVE-2020-6811)

  - Mozilla: The names of AirPods with personally identifiable information were exposed to websites with     camera or microphone permission (CVE-2020-6812)

  - Mozilla: Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6 (CVE-2020-6814)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4453 advisory.

  - vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode     (CVE-2019-20807)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:4697 advisory.

  - targetcli: weak permissions for /etc/target and backup files (CVE-2020-13867)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1766 advisory.

  - LibRaw: stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (CVE-2018-20337)

  - gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c (CVE-2019-12447)

  - gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing     query_info_on_read/write (CVE-2019-12448)

  - gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of     root privileges (CVE-2019-12449)

  - gdm: lock screen bypass when timed login is enabled (CVE-2019-3825)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:0052 advisory.

  - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk (CVE-2020-16044)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:2774 advisory.

  - QEMU: vnc: memory leakage upon disconnect (CVE-2019-20382)

  - QEMU: Slirp: potential OOB access due to unsafe snprintf() usages (CVE-2020-8608)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:4820 advisory.

  - file-roller: path traversal vulnerability via a specially crafted filename contained in malicious archive     (CVE-2019-16680)

  - file-roller: directory traversal via directory symlink pointing outside of the target directory     (CVE-2020-11736)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3014 advisory.

  - dbus: denial of service via file descriptor leak (CVE-2020-12049)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:1495 advisory.

  - Mozilla: Use-after-free while running the nsDocShell destructor (CVE-2020-6819)

  - Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820)

  - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method (CVE-2020-6821)

  - Mozilla: Out of bounds write in GMPDecodeData when processing large images (CVE-2020-6822)

  - Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 (CVE-2020-6825)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
145907	CentOS 8 : jbig2dec (CESA-2020:2897)	critical
145906	CentOS 8 : thunderbird (CESA-2020:2046)	critical
145905	CentOS 8 : grafana (CESA-2020:2641)	high
145904	CentOS 8 : cryptsetup (CESA-2020:4542)	high
145903	CentOS 8 : rsyslog (CESA-2020:1702)	critical
145902	CentOS 8 : firefox (CESA-2020:5562)	high
145901	CentOS 8 : ppp (CESA-2020:0633)	critical
145900	CentOS 8 : evolution (CESA-2020:4649)	medium
145899	CentOS 8 : poppler (CESA-2020:4643)	high
145898	CentOS 8 : libtiff (CESA-2020:4634)	high
145897	CentOS 8 : GStreamer, libmad, and SDL (CESA-2020:1631)	critical
145896	CentOS 8 : cups (CESA-2020:4469)	high
145895	CentOS 8 : ksh (CESA-2020:0559)	high
145894	CentOS 8 : pacemaker (CESA-2020:5487)	high
145893	CentOS 8 : gd (CESA-2020:4659)	critical
145892	CentOS 8 : openssl (CESA-2020:5476)	medium
145891	CentOS 8 : fontforge (CESA-2020:4844)	high
145890	CentOS 8 : binutils (CESA-2020:4465)	medium
145889	CentOS 8 : python27:2.7 (CESA-2020:1605)	critical
145888	CentOS 8 : openwsman (CESA-2020:4689)	high
145887	CentOS 8 : go-toolset:rhel8 (CESA-2020:3665)	high
145886	CentOS 8 : e2fsprogs (CESA-2020:1913)	medium
145885	CentOS 8 : sudo (CESA-2020:1804)	high
145884	CentOS 8 : wavpack (CESA-2020:1581)	medium
145883	CentOS 8 : python3 (CESA-2020:4433)	medium
145882	CentOS 8 : postgresql:10 (CESA-2020:3669)	high
145881	CentOS 8 : libxml2 (CESA-2020:4479)	high
145880	CentOS 8 : gnome-software and fwupd (CESA-2020:4436)	medium
145879	CentOS 8 : nghttp2 (CESA-2020:2755)	high
145878	CentOS 8 : nss and nspr (CESA-2020:3280)	critical
145877	CentOS 8 : libsolv (CESA-2020:4508)	high
145876	CentOS 8 : samba (CESA-2020:1878)	critical
145875	CentOS 8 : libldb (CESA-2020:4568)	medium
145874	CentOS 8 : ibus and glib2 (CESA-2020:1880)	high
145873	CentOS 8 : idm:DL1 and idm:client (CESA-2020:4670)	medium
145872	CentOS 8 : pcre2 (CESA-2020:4539)	high
145871	CentOS 8 : mysql:8.0 (CESA-2020:3732)	high
145870	CentOS 8 : dovecot (CESA-2020:2901)	high
145869	CentOS 8 : java-1.8.0-openjdk (CESA-2020:0202)	high
145868	CentOS 8 : thunderbird (CESA-2020:3341)	high
145867	CentOS 8 : .NET Core (CESA-2020:2938)	high
145866	CentOS 8 : firefox (CESA-2020:0820)	critical
145865	CentOS 8 : vim (CESA-2020:4453)	medium
145864	CentOS 8 : targetcli (CESA-2020:4697)	medium
145863	CentOS 8 : GNOME (CESA-2020:1766)	high
145862	CentOS 8 : firefox (CESA-2021:0052)	high
145861	CentOS 8 : virt:rhel (CESA-2020:2774)	medium
145860	CentOS 8 : file-roller (CESA-2020:4820)	medium
145859	CentOS 8 : dbus (CESA-2020:3014)	medium
145858	CentOS 8 : thunderbird (CESA-2020:1495)	critical

Detections

Analytics

CentOS Local Security Checks Family for Nessus

critical

critical

high

high

critical

high

critical

medium

high

high

critical

high

high

high

critical

medium

high

medium

critical

high

high

medium

high

medium

medium

high

high

medium

high

critical

high

critical

medium

high

medium

high

high

high

high

high

high

critical

medium

medium

high

high

medium

medium

medium

critical