The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1708 advisory.

    Liblouis is an open source braille translator and back-translator named in honor of Louis Braille. It     features support for computer and literary braille, supports contracted and uncontracted translation for     many languages and has support for hyphenation. New languages can easily be added through tables that     support a rule or dictionary based approach. Liblouis also supports math braille (Nemeth and Marburg).

    Security Fix(es):

    * liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c     (CVE-2018-11684)

    * liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c     (CVE-2018-11685)

    * liblouis: Segmentation fault in logging.c:lou_logPrint() (CVE-2018-11577)

    * liblouis: Stack-based buffer overflow in compileTranslationTable.c (CVE-2018-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1712 advisory.

    EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package     contains a sample 64-bit UEFI firmware for QEMU and KVM.

    Security Fix(es):

    * edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib (CVE-2019-14563)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4050 advisory.

  - QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1852 advisory.

    The patch program applies diff files to originals. The diff command is used to compare an original to a     changed file. Diff lists the changes made to the file. A person who has the original file can then use the     patch command with the diff file to add the changes to their original file (patching the file).

    Security Fix(es):

    * patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files     (CVE-2019-13636)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1878 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    The following packages have been upgraded to a later upstream version: samba (4.11.2). (BZ#1754409)

    Security Fix(es):

    * samba: Combination of parameters and permissions can allow user to escape from the share path definition     (CVE-2019-10197)

    * samba: smb client vulnerable to filenames containing path separators (CVE-2019-10218)

    * samba: Crash after failed character conversion at log level 3 or above (CVE-2019-14907)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1735 advisory.

  - dpdk: possible memory leak leads to denial of service (CVE-2019-14818)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1840 advisory.

    OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)     protocols, as well as a full-strength general-purpose cryptography library.

    Security Fix(es):

    * openssl: side-channel weak encryption vulnerability (CVE-2019-1547)

    * openssl: information disclosure in fork() (CVE-2019-1549)

    * openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey (CVE-2019-1563)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1827 advisory.

  - libxml2: infinite loop in xz_decomp function in xzlib.c (CVE-2018-9251)

  - libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c (CVE-2018-14404)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1686 advisory.

    The libmspack packages contain a library providing compression and extraction of the Cabinet (CAB) file     format used by Microsoft.

    Security Fix(es):

    * libmspack: buffer overflow in function chmd_read_headers() (CVE-2019-1010305)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4054 advisory.

  - QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0920 advisory.

    LibVNCServer is a C library that enables you to implement VNC server functionality into own programs.

    Security Fix(es):

    * libvncserver: HandleCursorShape() integer overflow resulting in heap-based buffer overflow     (CVE-2019-15690)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2679 advisory.

  - hw: Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543)

  - hw: Vector Register Data Sampling (CVE-2020-0548)

  - hw: L1D Cache Eviction Sampling (CVE-2020-0549)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1804 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    The following packages have been upgraded to a later upstream version: sudo (1.8.29). (BZ#1733961)

    Security Fix(es):

    * sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user     (CVE-2019-19232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2276 advisory.

  - ipmitool: Buffer overflow in read_fru_area_section function in lib/ipmi_fru.c (CVE-2020-5208)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5135 advisory.

  - Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5138 advisory.

  - Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5111 advisory.

  - QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c (CVE-2020-16092)

  - libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c (CVE-2020-25637)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5129 advisory.

  - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution     (CVE-2020-15862)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5139 advisory.

  - Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5102 advisory.

  - jenkins-2-plugins/mailer: Missing hostname validation in Mailer Plugin could result in MITM     (CVE-2020-2252)

  - jenkins-2-plugins/blueocean: Path traversal vulnerability in Blue Ocean Plugin could allow to read     arbitrary files (CVE-2020-2254)

  - jenkins-2-plugins/blueocean: Blue Ocean Plugin does not perform permission checks in several HTTP     endpoints implementing connection tests. (CVE-2020-2255)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5011 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: truncated TSIG response can lead to an assertion failure (CVE-2020-8622)

    * bind: remotely triggerable assertion failure in pk11.c (CVE-2020-8623)

    * bind: incorrect enforcement of update-policy rules of type subdomain (CVE-2020-8624)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * BIND stops DNSKEY lookup in get_dst_key() when a key with unsupported algorithm is found first [RHEL7]     (BZ#1884530)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5099 advisory.

  - Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5104 advisory.

  - Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5100 advisory.

  - Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5084 advisory.

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5083 advisory.

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5085 advisory.

  - hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695)

  - hw: Vector Register Leakage-Active (CVE-2020-8696)

  - hw: Fast forward store predictor (CVE-2020-8698)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5079 advisory.

  - kernel: soft-lockups in iov_iter_copy_from_user_atomic() could result in DoS (CVE-2020-25641)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5023 advisory.

  - kernel: net-sysfs: *_queue_add_kobject refcount issue (CVE-2019-20811)

  - kernel: kernel: buffer over write in vgacon_scroll (CVE-2020-14331)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5020 advisory.

  - tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling (CVE-2020-1935)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5004 advisory.

  - python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request     function (CVE-2020-11078)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5026 advisory.

  - kernel: net-sysfs: *_queue_add_kobject refcount issue (CVE-2019-20811)

  - kernel: kernel: buffer over write in vgacon_scroll (CVE-2020-14331)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5002 advisory.

    The curl packages provide the libcurl library and the curl utility for downloading files from servers     using various protocols, including HTTP, FTP, and LDAP.

    Security Fix(es):

    * curl: Incorrect argument check can allow remote servers to overwrite local files (CVE-2020-8177)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5003 advisory.

  - python-httplib2: CRLF injection via an attacker controlled unescaped part of uri for httplib2.Http.request     function (CVE-2020-11078)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5021 advisory.

  - qt: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp (CVE-2020-17507)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5054 advisory.

  - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5012 advisory.

  - librepo: missing path validation in repomd.xml may lead to directory traversal (CVE-2020-14352)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5040 advisory.

    The libvirt library contains a C API for managing and interacting with the virtualization capabilities of     Linux and other operating systems. In addition, libvirt provides tools for remote management of     virtualized systems.

    Security Fix(es):

    * libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c (CVE-2020-25637)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * libvirt destroying macvtap device of running VM after a failed incoming migration of another VM with     same macvtap target device (BZ#1868549)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5009 advisory.

  - python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5056 advisory.

  - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

  - podman: environment variables leak between containers when started via Varlink or Docker-compatible REST     API (CVE-2020-14370)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5055 advisory.

  - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5010 advisory.

  - python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)

  - python: DoS via inefficiency in IPv{4,6}Interface classes (CVE-2020-14422)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4999 advisory.

    The unixODBC packages contain a framework that supports accessing databases through the ODBC protocol.

    Security Fix(es):

    * unixODBC: Buffer overflow in unicode_to_ansi_copy() can lead to crash or other unspecified impact     (CVE-2018-7409)

    * unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c (CVE-2018-7485)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4991 advisory.

  - kernel: net: bluetooth: information leak when processing certain AMP packets (CVE-2020-12352)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4990 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net: bluetooth: information leak when processing certain AMP packets (CVE-2020-12352)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4992 advisory.

  - bind: truncated TSIG response can lead to an assertion failure (CVE-2020-8622)

  - bind: remotely triggerable assertion failure in pk11.c (CVE-2020-8623)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4974 advisory.

  - chromium-browser: Use after free in user interface (CVE-2020-16004)

  - chromium-browser: Insufficient policy enforcement in ANGLE (CVE-2020-16005)

  - chromium-browser: Inappropriate implementation in V8 (CVE-2020-16006, CVE-2020-16009)

  - chromium-browser: Stack buffer overflow in WebRTC (CVE-2020-16008)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4952 advisory.

  - freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4953 advisory.

  - xorg-x11-server: Out-of-bounds access in XkbSetNames function (CVE-2020-14345)

  - xorg-x11-server: Integer underflow in the X input extension protocol (CVE-2020-14346)

  - xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability (CVE-2020-14361)

  - xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability     (CVE-2020-14362)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4951 advisory.

  - freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png (CVE-2020-15999)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
143016	RHEL 8 : liblouis (RHSA-2020:1708)	high
143015	RHEL 8 : edk2 (RHSA-2020:1712)	high
143014	RHEL 7 : qemu-kvm (RHSA-2020:4050)	medium
143013	RHEL 8 : patch (RHSA-2020:1852)	medium
143012	RHEL 8 : samba (RHSA-2020:1878)	critical
143011	RHEL 8 : dpdk (RHSA-2020:1735)	high
143010	RHEL 8 : openssl (RHSA-2020:1840)	medium
143009	RHEL 8 : libxml2 (RHSA-2020:1827)	high
143008	RHEL 8 : libmspack (RHSA-2020:1686)	medium
143007	RHEL 6 : qemu-kvm (RHSA-2020:4054)	medium
143006	RHEL 8 : libvncserver (RHSA-2020:0920)	critical
143005	RHEL 7 : microcode_ctl (RHSA-2020:2679)	medium
143004	RHEL 8 : sudo (RHSA-2020:1804)	high
143003	RHEL 7 : ipmitool (RHSA-2020:2276)	high
142994	RHEL 8 : firefox (RHSA-2020:5135)	high
142992	RHEL 8 : firefox (RHSA-2020:5138)	high
142982	RHEL 8 : virt:8.2 and virt-devel:8.2 (RHSA-2020:5111)	medium
142973	RHEL 6 : net-snmp (RHSA-2020:5129)	high
142972	RHEL 8 : firefox (RHSA-2020:5139)	high
142907	RHEL 7 : OpenShift Container Platform 3.11.318 jenkins-2-plugins (RHSA-2020:5102)	medium
142906	RHEL 7 : bind (RHSA-2020:5011)	medium
142871	RHEL 7 : firefox (RHSA-2020:5099)	high
142864	RHEL 6 : firefox (RHSA-2020:5104)	high
142863	RHEL 8 : firefox (RHSA-2020:5100)	high
142716	RHEL 6 : microcode_ctl (RHSA-2020:5084)	medium
142715	RHEL 7 : microcode_ctl (RHSA-2020:5083)	medium
142714	RHEL 8 : microcode_ctl (RHSA-2020:5085)	medium
142710	RHEL 7 : kernel-alt (RHSA-2020:5079)	medium
142709	RHEL 7 : kernel (RHSA-2020:5023)	medium
142708	RHEL 7 : tomcat (RHSA-2020:5020)	medium
142707	RHEL 7 : resource-agents (RHSA-2020:5004)	medium
142706	RHEL 7 : kernel-rt (RHSA-2020:5026)	medium
142705	RHEL 7 : curl (RHSA-2020:5002)	high
142704	RHEL 7 : fence-agents (RHSA-2020:5003)	medium
142703	RHEL 7 : qt and qt5-qtbase (RHSA-2020:5021)	medium
142702	RHEL 7 : skopeo (RHSA-2020:5054)	high
142701	RHEL 7 : librepo (RHSA-2020:5012)	high
142700	RHEL 7 : libvirt (RHSA-2020:5040)	medium
142699	RHEL 7 : python (RHSA-2020:5009)	high
142698	RHEL 7 : podman (RHSA-2020:5056)	medium
142697	RHEL 7 : buildah (RHSA-2020:5055)	high
142696	RHEL 7 : python3 (RHSA-2020:5010)	high
142675	RHEL 7 : unixODBC (RHSA-2020:4999)	critical
142674	RHEL 7 : kernel (RHSA-2020:4991)	medium
142673	RHEL 7 : kernel (RHSA-2020:4990)	medium
142672	RHEL 7 : bind (RHSA-2020:4992)	high
142643	RHEL 6 : chromium-browser (RHSA-2020:4974)	high
142480	RHEL 8 : freetype (RHSA-2020:4952)	medium
142479	RHEL 6 : xorg-x11-server (RHSA-2020:4953)	high
142478	RHEL 8 : freetype (RHSA-2020:4951)	medium

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

high

medium

medium

critical

high

medium

high

medium

medium

critical

medium

high

high

high

high

medium

high

high

medium

medium

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

high

high

medium

high

medium

high

high

critical

medium

medium

high

high

medium

high

medium