The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3706 advisory.

  - lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service (CVE-2019-6706)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3705 advisory.

  - libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to     denial of service (CVE-2018-14498)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3704 advisory.

  - numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code     execution (CVE-2019-6446)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3703 advisory.

  - libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)

  - libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3702 advisory.

  - openssh: scp client improper directory name validation (CVE-2018-20685)

  - openssh: Missing character encoding in progress display allows for spoofing of scp client output     (CVE-2019-6109)

  - openssh: Improper validation of object names allows malicious server to overwrite files via scp client     (CVE-2019-6111)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3701 advisory.

  - curl: NTLM type-2 heap out-of-bounds buffer read (CVE-2018-16890)

  - wget: Information exposure in set_file_metadata function in xattr.c (CVE-2018-20483)

  - curl: NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822)

  - curl: SMTP end-of-response out-of-bounds read (CVE-2019-3823)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3700 advisory.

  - openssl: timing side channel attack in the DSA signature algorithm (CVE-2018-0734)

  - openssl: timing side channel attack in the ECDSA signature generation (CVE-2018-0735)

  - openssl: ChaCha20-Poly1305 with long nonces (CVE-2019-1543)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3699 advisory.

  - evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-     online-accounts (CVE-2019-3890)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3698 advisory.

  - libarchive: Out-of-bounds read in lha_read_data_none (CVE-2017-14503)

  - libarchive: Double free in RAR decoder resulting in a denial of service (CVE-2018-1000877)

  - libarchive: Use after free in RAR decoder resulting in a denial of service (CVE-2018-1000878)

  - libarchive: Out of bounds read in archive_read_support_format_7zip.c resulting in a denial of service     (CVE-2019-1000019)

  - libarchive: Infinite recursion in archive_read_support_format_iso9660.c resulting in denial of service     (CVE-2019-1000020)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:3694 advisory.

  - sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:3673 advisory.

  - lldptool: improper sanitization of shell-escape codes (CVE-2018-10932)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3651 advisory.

  - sssd: improper implementation of GPOs due to too restrictive permissions (CVE-2018-16838)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3643 advisory.

  - gettext: double free in default_add_message in read-catalog.c (CVE-2018-18751)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3624 advisory.

  - libseccomp: incorrect generation of syscall filters in libseccomp (CVE-2019-9893)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3610 advisory.

  - libqb: Insecure treatment of IPC (temporary) files (CVE-2019-12779)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for gnutls is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

The following packages have been upgraded to a later upstream version:
gnutls (3.6.8). (BZ#1689967)

Security Fix(es) :

* gnutls: use-after-free/double-free in certificate verification (CVE-2019-3829)

* gnutls: invalid pointer access upon receiving async handshake messages (CVE-2019-3836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

An update for systemd is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es) :

* systemd: systemd-resolved allows unprivileged users to configure DNS (CVE-2019-15718)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3590 advisory.

  - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on     internal service (CVE-2019-11236)

  - python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3583 advisory.

  - libsolv: illegal address access in pool_whatprovides in src/pool.h (CVE-2018-20534)

  - libcomps: use after free when merging two objmrtrees (CVE-2019-3817)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3582 advisory.

  - samba: save registry file outside share as unprivileged user (CVE-2019-3880)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for elfutils is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

The elfutils packages contain a number of utility programs and libraries related to the creation and maintenance of executable code.

The following packages have been upgraded to a later upstream version:
elfutils (0.176). (BZ#1683705)

Security Fix(es) :

* elfutils: buffer over-read in the ebl_object_note function in eblobjnote.c in libebl (CVE-2019-7146)

* elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw (CVE-2019-7149)

* elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c (CVE-2019-7150)

* elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h (CVE-2019-7664)

* elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c (CVE-2019-7665)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3553 advisory.

  - gnome-shell: partial lock screen bypass (CVE-2019-3820)

  - webkitgtk: Multiple memory corruption issues leading to arbitrary code execution (CVE-2019-6237,     CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595,     CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611,     CVE-2019-8615, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8666, CVE-2019-8671, CVE-2019-8672,     CVE-2019-8673, CVE-2019-8676, CVE-2019-8677, CVE-2019-8679, CVE-2019-8681, CVE-2019-8686, CVE-2019-8687,     CVE-2019-8689, CVE-2019-8726, CVE-2019-8735)

  - webkitgtk: processing maliciously crafted web content lead to URI spoofing (CVE-2019-6251)

  - webkitgtk: malicous web content leads to arbitrary code execution (CVE-2019-8506)

  - webkitgtk: malicious web content leads to arbitrary code execution (CVE-2019-8518, CVE-2019-8523,     CVE-2019-8524, CVE-2019-8559, CVE-2019-8563)

  - webkitgtk: malicious crafted web content leads to arbitrary code execution (CVE-2019-8535, CVE-2019-8536,     CVE-2019-8558)

  - webkitgtk: malicious crafted web content leads to arbitrary we content (CVE-2019-8544)

  - webkitgtk: malicious web content leads to cross site scripting (CVE-2019-8551)

  - webkitgtk: Out-of-bounds read leading to memory disclosure (CVE-2019-8607)

  - webkitgtk: Incorrect state management leading to universal cross-site scripting (CVE-2019-8690)

  - webkitgtk: Browsing history could not be deleted (CVE-2019-8768)

  - webkitgtk: HTTP proxy setting deanonymization information disclosure (CVE-2019-11070)

  - evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()     (CVE-2019-11459)

  - gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3552 advisory.

  - bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using     managed-keys (CVE-2018-5745)

  - bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable     (CVE-2019-6465)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3530 advisory.

  - glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a     copy operation is in progress (CVE-2019-12450)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3525 advisory.

  - dhcp: double-deletion of the released addresses in the dhcpv6 code leading to crash and possible DoS     (CVE-2019-6470)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3520 advisory.

  - python: NULL pointer dereference using a specially crafted X509 certificate (CVE-2019-5010)

  - python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)

  - python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)

  - python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms     (CVE-2019-9948)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3517 advisory.

  - kernel: Linux stack ASLR implementation Integer overflow (CVE-2015-1593)

  - kernel: nfs: use-after-free in svc_process_common() (CVE-2018-16884)

  - kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c (CVE-2018-19854)

  - kernel: oob memory read in hso_probe in drivers/net/usb/hso.c (CVE-2018-19985)

  - kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS (CVE-2018-20169)

  - kernel: Heap address information leak while using L2CAP_GET_CONF_OPT (CVE-2019-3459)

  - kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP (CVE-2019-3460)

  - kernel: SCTP socket buffer memory leak leading to denial of service (CVE-2019-3874)

  - kernel: denial of service vector through vfio DMA mappings (CVE-2019-3882)

  - Kernel: vhost_net: infinite loop while receiving packets leads to DoS (CVE-2019-3900)

  - Kernel: page cache side channel attacks (CVE-2019-5489)

  - Kernel: KVM: leak of uninitialized stack contents to guest (CVE-2019-7222)

  - hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506)

  - kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c     (CVE-2019-10126)

  - kernel: null-pointer dereference in hci_uart_set_flow_control (CVE-2019-10207)

  - Kernel: net: weak IP ID generation leads to remote device tracking (CVE-2019-10638)

  - kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping (CVE-2019-11599)

  - kernel: fs/ext4/extents.c leads to information disclosure (CVE-2019-11833)

  - kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command (CVE-2019-11884)

  - kernel: unchecked kstrdup of fwstr in drm_load_edid_firmware leads to denial of service (CVE-2019-12382)

  - kernel: use-after-free in arch/x86/lib/insn-eval.c (CVE-2019-13233)

  - kernel: denial of service in arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c via     sigreturn() system call (CVE-2019-13648)

  - Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821)

  - kernel: use-after-free in sound/core/init.c and sound/core/info.c (CVE-2019-15214)

  - kernel: out-of-bounds array access in __xfrm_policy_unlink (CVE-2019-15666)

  - kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service     (CVE-2019-15916)

  - kernel: use-after-free in SMB2_write function in fs/cifs/smb2pdu.c (CVE-2019-15919)

  - kernel: use-after-free information leak in SMB2_read (CVE-2019-15920)

  - kernel: memory leak in genl_register_family() in net/netlink/genetlink.c (CVE-2019-15921)

  - kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c (CVE-2019-15924)

  - kernel: out-of-bounds in function build_audio_procunit in sound/usb/mixer.c (CVE-2019-15927)

  - kernel: Memory leak in sit_init_net() in net/ipv6/sit.c (CVE-2019-16994)

  - kernel: net-sysfs: *_queue_add_kobject refcount issue (CVE-2019-20811)

  - kernel: use-after-free read in napi_gro_frags() in the Linux kernel (CVE-2020-10720)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3513 advisory.

  - glibc: getaddrinfo should reject IP addresses with trailing characters (CVE-2016-10739)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:3497 advisory.

  - nodejs: Denial of Service with large HTTP headers (CVE-2018-12121)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3494 advisory.

  - containers/image: not enforcing TLS when sending username+password credentials to token servers leading to     credential disclosure (CVE-2019-10214)

  - QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3476 advisory.

  - squid: XSS via user_name or auth parameter in cachemgr.cgi (CVE-2019-13345)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3467 advisory.

  - dovecot: Improper certificate validation (CVE-2019-3814)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3464 advisory.

  - virt-install: unattended option leaks password via command line argument (CVE-2019-10183)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3436 advisory.

  - httpd: mod_auth_digest: access control bypass due to race condition (CVE-2019-0217)

  - httpd: URL normalization inconsistency (CVE-2019-0220)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3433 advisory.

  - golang: malformed hosts in URLs leads to authorization bypass (CVE-2019-14809)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3421 advisory.

  - mod_auth_mellon: open redirect in logout url when using URLs with backslashes (CVE-2019-3877)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3419 advisory.

  - libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of     service or possibly code execution (CVE-2018-12900)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es) :

* QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378)

* containers/image: not enforcing TLS when sending username+password credentials to token servers leading to credential disclosure (CVE-2019-10214)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3401 advisory.

  - 389-ds-base: replication and the Retro Changelog plugin store plaintext password by default     (CVE-2018-10871)

  - 389-ds-base: DoS via hanging secured connections (CVE-2019-3883)

  - 389-ds-base: using dscreate in verbose mode results in information disclosure (CVE-2019-10224)

  - 389-ds-base: Read permission check bypass via the deref plugin (CVE-2019-14824)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3391 advisory.

  - libreswan: vulnerability in the processing of IKEv1 informational packets due to missing integrity check     (CVE-2019-10155)

  - libreswan: null-pointer dereference by sending two IKEv2 packets (CVE-2019-12312)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3390 advisory.

  - qt5-qtbase: Double free in QXmlStreamReader (CVE-2018-15518)

  - qt5-qtbase: QImage allocation failure in qgifhandler (CVE-2018-19870)

  - qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file (CVE-2018-19873)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3387 advisory.

  - Libosinfo: osinfo-install-script option leaks password via command line argument (CVE-2019-13313)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3353 advisory.

  - freeradius: privilege escalation due to insecure logrotate configuration (CVE-2019-10143)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3352 advisory.

  - libiberty: Memory leak in demangle_template function resulting in a denial of service (CVE-2018-20657)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3345 advisory.

  - ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

  - QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

  - QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3338 advisory.

  - edk2: Stack buffer overflow with corrupted BMP (CVE-2018-12181)

  - edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media     (CVE-2019-0160)

  - edk2: stack overflow in XHCI causing denial of service (CVE-2019-0161)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.

Security Fix(es) :

* numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)

* python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)

* python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)

* python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms (CVE-2019-9948)

* python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service (CVE-2019-11236)

* python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3309 advisory.

  - kernel: nfs: use-after-free in svc_process_common() (CVE-2018-16884)

  - kernel: Information Disclosure in crypto_report_one in crypto/crypto_user.c (CVE-2018-19854)

  - kernel: oob memory read in hso_probe in drivers/net/usb/hso.c (CVE-2018-19985)

  - kernel: usb: missing size check in the __usb_get_extra_descriptor() leading to DoS (CVE-2018-20169)

  - kernel: Heap address information leak while using L2CAP_GET_CONF_OPT (CVE-2019-3459)

  - kernel: Heap address information leak while using L2CAP_PARSE_CONF_RSP (CVE-2019-3460)

  - kernel: SCTP socket buffer memory leak leading to denial of service (CVE-2019-3874)

  - kernel: denial of service vector through vfio DMA mappings (CVE-2019-3882)

  - Kernel: vhost_net: infinite loop while receiving packets leads to DoS (CVE-2019-3900)

  - Kernel: page cache side channel attacks (CVE-2019-5489)

  - Kernel: KVM: leak of uninitialized stack contents to guest (CVE-2019-7222)

  - hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506)

  - kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c     (CVE-2019-10126)

  - kernel: null-pointer dereference in hci_uart_set_flow_control (CVE-2019-10207)

  - Kernel: net: weak IP ID generation leads to remote device tracking (CVE-2019-10638)

  - kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping (CVE-2019-11599)

  - kernel: fs/ext4/extents.c leads to information disclosure (CVE-2019-11833)

  - kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command (CVE-2019-11884)

  - kernel: use-after-free in arch/x86/lib/insn-eval.c (CVE-2019-13233)

  - Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821)

  - kernel: out-of-bounds array access in __xfrm_policy_unlink (CVE-2019-15666)

  - kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service     (CVE-2019-15916)

  - kernel: memory leak in genl_register_family() in net/netlink/genetlink.c (CVE-2019-15921)

  - kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c (CVE-2019-15924)

  - kernel: Memory leak in sit_init_net() in net/ipv6/sit.c (CVE-2019-16994)

  - kernel: use-after-free read in napi_gro_frags() in the Linux kernel (CVE-2020-10720)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3287 advisory.

  - php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3286 advisory.

  - php: underflow in env_path_info in fpm_main.c (CVE-2019-11043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
130573	RHEL 8 : lua (RHSA-2019:3706)	high
130572	RHEL 8 : libjpeg-turbo (RHSA-2019:3705)	medium
130571	RHEL 8 : numpy (RHSA-2019:3704)	critical
130570	RHEL 8 : libvorbis (RHSA-2019:3703)	high
130569	RHEL 8 : openssh (RHSA-2019:3702)	medium
130568	RHEL 8 : curl (RHSA-2019:3701)	critical
130567	RHEL 8 : openssl (RHSA-2019:3700)	high
130566	RHEL 8 : evolution (RHSA-2019:3699)	high
130565	RHEL 8 : libarchive (RHSA-2019:3698)	high
130564	RHEL 8 : sudo (RHSA-2019:3694)	high
130563	RHEL 8 : lldpad (RHSA-2019:3673)	medium
130562	RHEL 8 : sssd (RHSA-2019:3651)	medium
130561	RHEL 8 : gettext (RHSA-2019:3643)	critical
130560	RHEL 8 : libseccomp (RHSA-2019:3624)	critical
130559	RHEL 8 : libqb (RHSA-2019:3610)	high
130558	RHEL 8 : gnutls (RHSA-2019:3600)	high
130557	RHEL 8 : systemd (RHSA-2019:3592)	medium
130556	RHEL 8 : python-urllib3 (RHSA-2019:3590)	high
130555	RHEL 8 : yum (RHSA-2019:3583)	high
130554	RHEL 8 : samba (RHSA-2019:3582)	medium
130553	RHEL 8 : elfutils (RHSA-2019:3575)	medium
130552	RHEL 8 : GNOME (RHSA-2019:3553)	high
130551	RHEL 8 : bind (RHSA-2019:3552)	medium
130550	RHEL 8 : glib2 (RHSA-2019:3530)	critical
130549	RHEL 8 : dhcp (RHSA-2019:3525)	high
130548	RHEL 8 : python3 (RHSA-2019:3520)	critical
130547	RHEL 8 : kernel (RHSA-2019:3517)	critical
130546	RHEL 8 : glibc (RHSA-2019:3513)	medium
130545	RHEL 8 : http-parser (RHSA-2019:3497)	high
130544	RHEL 8 : container-tools:1.0 (RHSA-2019:3494)	high
130543	RHEL 8 : squid:4 (RHSA-2019:3476)	medium
130542	RHEL 8 : dovecot (RHSA-2019:3467)	medium
130541	RHEL 8 : virt-manager (RHSA-2019:3464)	low
130540	RHEL 8 : httpd:2.4 (RHSA-2019:3436)	high
130539	RHEL 8 : go-toolset:rhel8 (RHSA-2019:3433)	critical
130538	RHEL 8 : mod_auth_mellon (RHSA-2019:3421)	medium
130537	RHEL 8 : libtiff (RHSA-2019:3419)	high
130536	RHEL 8 : container-tools:rhel8 (RHSA-2019:3403)	high
130535	RHEL 8 : 389-ds:1.4 (RHSA-2019:3401)	high
130534	RHEL 8 : libreswan (RHSA-2019:3391)	high
130533	RHEL 8 : qt5-qtbase (RHSA-2019:3390)	critical
130532	RHEL 8 : osinfo-db and libosinfo (RHSA-2019:3387)	high
130531	RHEL 8 : freeradius:3.0 (RHSA-2019:3353)	high
130530	RHEL 8 : gdb (RHSA-2019:3352)	high
130529	RHEL 8 : virt:rhel (RHSA-2019:3345)	high
130528	RHEL 8 : edk2 (RHSA-2019:3338)	critical
130527	RHEL 8 : python27:2.7 (RHSA-2019:3335)	critical
130526	RHEL 8 : kernel-rt (RHSA-2019:3309)	critical
130446	RHEL 6 : php (RHSA-2019:3287)	critical
130445	RHEL 7 : php (RHSA-2019:3286)	critical

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

medium

critical

high

medium

critical

high

high

high

high

medium

medium

critical

critical

high

high

medium

high

high

medium

medium

high

medium

critical

high

critical

critical

medium

high

high

medium

medium

low

high

critical

medium

high

high

high

high

critical

high

high

high

high

critical

critical

critical

critical

critical