The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1491 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.9.1 ESR.

    Security Fix(es):

    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)

    * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions     (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9     (CVE-2024-2614)

    * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1487 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.9.1 ESR.

    Security Fix(es):

    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)

    * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions     (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9     (CVE-2024-2614)

    * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1503 advisory.

    Node.js is a software development platform for building fast and scalable     network applications in the JavaScript programming language.

    Security Fix(es):

    * nodejs: code injection and privilege escalation through Linux capabilities (CVE-2024-21892)

    * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks     (CVE-2024-22019)

    * nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin)     (CVE-2023-46809)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1484 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards     compliance, performance, and portability.

    This update upgrades Firefox to version 115.9.1 ESR.

    Security Fix(es):

    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)

    * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions     (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9     (CVE-2024-2614)

    * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1495 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.9.0.

    Security Fix(es):
    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: Leaking of encrypted email subjects to other conversations  (CVE-2024-1936)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write     (CVE-2024-2608)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage     (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally     granting permissions (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a     use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and     Thunderbird 115.9 (CVE-2024-2614)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1485 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards     compliance, performance, and portability.

    This update upgrades Firefox to version 115.9.1 ESR.

    Security Fix(es):

    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)

    * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions     (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9     (CVE-2024-2614)

    * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1501 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * grafana: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads     (CVE-2024-1394)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1499 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.9.0.

    Security Fix(es):

    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: Leaking of encrypted email subjects to other conversations  (CVE-2024-1936)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write     (CVE-2024-2608)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage     (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally     granting permissions (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a     use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and     Thunderbird 115.9 (CVE-2024-2614)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1490 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.9.1 ESR.

    Security Fix(es):

    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)

    * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions     (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9     (CVE-2024-2614)

    * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1489 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.9.1 ESR.

    Security Fix(es):

    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)

    * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions     (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9     (CVE-2024-2614)

    * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1488 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.9.1 ESR.

    Security Fix(es):

    * nss: timing attack against RSA decryption (CVE-2023-5388)

    * Mozilla: Crash in NSS TLS method (CVE-2024-0743)

    * Mozilla: JIT code failed to save return registers on Armv7-A (CVE-2024-2607)

    * Mozilla: Integer overflow could have led to out of bounds write (CVE-2024-2608)

    * Mozilla: Improve handling of out-of-memory conditions in ICU (CVE-2024-2616)

    * Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (CVE-2024-2610)

    * Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions     (CVE-2024-2611)

    * Mozilla: Self referencing object could have potentially led to a use-after-free (CVE-2024-2612)

    * Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9     (CVE-2024-2614)

    * Mozilla: Privileged JavaScript Execution via Event Handlers (CVE-2024-29944)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1479 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

    Security Fix(es):

    * squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1468 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    Security Fix(es):

    * golang: golang-fips/openssl: Memory leaks in code encrypting and decrypting     RSA payloads (CVE-2024-1394)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1472 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    Security Fix(es):

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1473 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice     replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * libreoffice: various flaws (CVE-2023-6186)

    * libreoffice: various flaws (CVE-2023-6185)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1462 advisory.

    The golang packages provide the Go programming language compiler.

    Security Fix(es):

     * golang: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads     (CVE-2024-1394)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1444 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks     (CVE-2024-22019)

    * nodejs: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)     (CVE-2023-44487)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1438 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks     (CVE-2024-22019)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1436 advisory.

    PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package     includes the .jar files needed for Java programs to access a PostgreSQL database.

    Security Fix(es):

    * PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1437 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1435 advisory.

    PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package     includes the .jar files needed for Java programs to access a PostgreSQL database.

    Security Fix(es):

    * PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE (CVE-2024-1597)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1267 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.12.53. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:1265

    Security Fix(es):

    * kube-controller-manager: malformed HPA v1 manifest causes crash     (CVE-2024-0793)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1267 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1424 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks     (CVE-2024-22019)

    A Red Hat Security Bulletin which addresses further details about this flaw is available in the References     section.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1411 advisory.

    The opencryptoki packages contain version 2.11 of the PKCS#11 API, implemented for IBM Cryptocards, such     as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic     CoProcessor (with the PKCS#11 firmware loaded), the IBM eServer Cryptographic Accelerator (FC 4960 on IBM     eServer System p), the IBM Crypto Express2 (FC 0863 or FC 0870 on IBM System z), and the IBM CP Assist for     Cryptographic Function (FC 3863 on IBM System z). The opencryptoki packages also bring a software token     implementation that can be used without any cryptographic hardware. These packages contain the Slot Daemon     (pkcsslotd) and general utilities.

    Security Fix(es):

    * opencryptoki: timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)     (CVE-2024-0914)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1431 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    The following packages have been upgraded to a later upstream version: ruby (3.1). (RHEL-28565)

    Security Fix(es):

    * ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

    * ruby: ReDoS vulnerability in URI (CVE-2023-28755)

    * ruby: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

    * ruby: ReDoS vulnerability in Time (CVE-2023-28756)

    Bug Fix(es):

    * ruby/rubygem-irb: IRB has hard dependency on rubygem-rdoc (RHEL-28569)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1417 advisory.

    The libX11 packages contain the core X11 protocol client library.

    Security Fix(es):

    * libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request     leads to a buffer overflow (CVE-2023-3138)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1427 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * CVE-2023-6186 libreoffice: various flaws (JIRA:RHEL-20657)
    * CVE-2023-6185 libreoffice: various flaws (JIRA:RHEL-20657)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1426 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1425 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * CVE-2023-6186 libreoffice: various flaws (JIRA:RHEL-20656)
    * CVE-2023-6185 libreoffice: various flaws (JIRA:RHEL-20656)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1406 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1408 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command execution via shell metacharacters (CVE-2022-48337)

    * emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1422 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1409 advisory.

    The Common UNIX Printing System (CUPS) provides a portable printing layer for Linux, UNIX, and similar     operating systems.

    Security Fix(es):

    * cups: heap buffer overflow may lead to DoS (CVE-2023-32324)

    * cups: use-after-free in cupsdAcceptClient() in scheduler/client.c (CVE-2023-34241)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1412 advisory.

    The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers     operations, rational numbers, and floating point numbers.

    Security Fix(es):

    * gmp: Integer overflow and resultant buffer overflow via crafted input     (CVE-2021-43618)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1404 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in     drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c (CVE-2021-43975)

    * kernel: double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (CVE-2022-28388)

    * kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858)

    * kernel: Rate limit overflow messages in r8152 in intr_callback (CVE-2022-3594)

    * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)

    * kernel: nfp: use-after-free in area_cache_get() (CVE-2022-3545)

    * kernel: denial of service in tipc_conn_close (CVE-2023-1382)

    * kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow (CVE-2023-28772)

    * kernel: NULL pointer dereference in can_rcv_filter (CVE-2023-2166)

    * kernel: Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)

    * kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (CVE-2023-40283)

    * kernel: use-after-free in sch_qfq network scheduler (CVE-2023-4921)

    * kernel: Out-Of-Bounds Read vulnerability in smbCalcSize (CVE-2023-6606)

    * kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as     destination (CVE-2024-0646)

    * kernel: inactive elements in nft_pipapo_walk (CVE-2023-6817)

    * kernel: refcount leak in ctnetlink_create_conntrack() (CVE-2023-7192)

    Bug Fix(es):

    * The kernel is still getting hung up even after converting kernfs_mutex to kernfs_rwsem with massive     concurrent kernfs access (open & lookup) performed by kubelet/node_exporter threads. (JIRA:RHEL-17149)

    * kernel: Rate limit overflow messages in r8152 in intr_callback (JIRA:RHEL-18810)

    * kernel: tun: avoid double free in tun_free_netdev (JIRA:RHEL-18813)

    * kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow (JIRA:RHEL-18850)

    * kernel: NULL pointer dereference in can_rcv_filter (JIRA:RHEL-19461)

    * ipoib mcast lockup fix (JIRA:RHEL-19698)

    * kernel: denial of service in tipc_conn_close (JIRA:RHEL-18824)

    * Rhel-8.6 crash at  qed_get_current_link+0x11 during tx_timeout recovery  (JIRA:RHEL-20923)

    * kernel: use-after-free in sch_qfq network scheduler (JIRA:RHEL-14402)

    * RHEL8.6 - s390/qeth: NET2016 - fix use-after-free in HSCI (JIRA:RHEL-15849)

    * RHEL8.6 - s390/qeth: recovery and set offline lose routes and IPv6 addr (JIRA:RHEL-17883)

    * kernel: null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (JIRA:RHEL-18582)

    * kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait() in     drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c (JIRA:RHEL-18799)

    * kernel: double free in usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c (JIRA:RHEL-18814)

    * kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c (JIRA:RHEL-18998)

    * dm multipath device suspend deadlocks waiting on a flush request (JIRA:RHEL-19110)

    * kernel: Slab-out-of-bound read in compare_netdev_and_ip (JIRA:RHEL-19327)

    * kernel: A flaw leading to a use-after-free in area_cache_get() (JIRA:RHEL-19451)

    * [RHEL8] I/O blocked during fio background with IO schedule switch, cpu offline/online, pci nvme     rescan/reset (JIRA:RHEL-20231)

    * kernel: refcount leak in ctnetlink_create_conntrack() (JIRA:RHEL-20298)

    * kernel: inactive elements in nft_pipapo_walk (JIRA:RHEL-20697)

    * kernel: Out-Of-Bounds Read vulnerability in smbCalcSize (JIRA:RHEL-21661)

    * kernel NULL pointer at RIP: 0010:kyber_has_work+0x1c/0x60 (JIRA:RHEL-21784)

    * kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as     destination (JIRA:RHEL-22090)

    * backport timerlat user-space support (JIRA:RHEL-20361)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1429 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1428 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL (CVE-2024-0985)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1423 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Bug Fix(es):

    * CVE-2023-6186 libreoffice: various flaws (JIRA:RHEL-20655)
    * CVE-2023-6185 libreoffice: various flaws (JIRA:RHEL-20655)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1403 advisory.

    The fwupd packages provide a service that allows session software to update device firmware.

    Security Fix(es):

    * fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1415 advisory.

    EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package     contains a sample 64-bit UEFI firmware for QEMU and KVM.

    Security Fix(es):

    * edk2: Buffer overflow in the DHCPv6 client via a long Server ID option (CVE-2023-45230)

    * edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()     (CVE-2019-14560)

    * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)

    * edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message (CVE-2023-45234)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1385 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn23.06: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1376 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * squid: denial of service in HTTP header parser (CVE-2024-25617)

    * squid: Denial of Service in HTTP Chunked Decoding (CVE-2024-25111)

    * squid: denial of service in HTTP request parsing (CVE-2023-50269)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1382 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query (CVE-2022-38096)

    * null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (CVE-2022-41858)

    * nfp: use-after-free in area_cache_get() (CVE-2022-3545)

    * NULL pointer dereference in can_rcv_filter (CVE-2023-2166)

    * Slab-out-of-bound read in compare_netdev_and_ip (CVE-2023-2176)

    * out-of-bounds write in qfq_change_class function (CVE-2023-31436)

    * NULL pointer dereference in vmxnet3_rq_cleanup() (CVE-2023-4459)

    * net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue overhead     (CVE-2023-3611)

    * ktls overwrites readonly memory pages when using function splice with a ktls socket as destination     (CVE-2024-0646)

    * inactive elements in nft_pipapo_walk (CVE-2023-6817)

    * refcount leak in ctnetlink_create_conntrack() (CVE-2023-7192)

    Bug Fix(es):

    * out-of-bounds write in qfq_change_class function (JIRA:RHEL-12700)

    * vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup() (JIRA:RHEL-18192)

    * refcount leak in ctnetlink_create_conntrack() (JIRA:RHEL-20302)

    * inactive elements in nft_pipapo_walk (JIRA:RHEL-20703)

    * ktls overwrites readonly memory pages when using function splice with a ktls socket as destination     (JIRA:RHEL-22099)

    * update RT source tree to the latest RHEL-8.4.z Batch 23 (JIRA:RHEL-23825)

    * null-ptr-deref vulnerabilities in sl_tx_timeout in drivers/net/slip (JIRA:RHEL-19023)

    * Slab-out-of-bound read in compare_netdev_and_ip (JIRA:RHEL-19404)

    * A flaw leading to a use-after-free in area_cache_get() (JIRA:RHEL-19530)

    * vmxgfx: NULL pointer dereference in vmw_cmd_dx_define_query (JIRA:RHEL-22755)

    * NULL pointer dereference in can_rcv_filter (JIRA:RHEL-19520)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1393 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn22.03: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1391 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn23.06: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1387 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn22.03: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1392 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn22.12: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1386 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn22.12: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1388 advisory.

    OVN, the Open Virtual Network, is a system to support virtual network     abstraction.  OVN complements the existing capabilities of OVS to add     native support for virtual network abstractions, such as virtual L2 and L3     overlays and security groups.

    Security fix(es):

    * ovn23.03: insufficient validation of BFD packets may lead to denial of service (CVE-2024-2182)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
192551	RHEL 8 : firefox (RHSA-2024:1491)	high
192550	RHEL 9 : firefox (RHSA-2024:1487)	high
192549	RHEL 9 : nodejs:18 (RHSA-2024:1503)	high
192548	RHEL 8 : firefox (RHSA-2024:1484)	high
192547	RHEL 9 : thunderbird (RHSA-2024:1495)	high
192546	RHEL 9 : firefox (RHSA-2024:1485)	high
192545	RHEL 9 : grafana (RHSA-2024:1501)	high
192544	RHEL 8 : thunderbird (RHSA-2024:1499)	high
192543	RHEL 8 : firefox (RHSA-2024:1490)	high
192542	RHEL 8 : firefox (RHSA-2024:1489)	high
192541	RHEL 8 : firefox (RHSA-2024:1488)	high
192528	RHEL 8 : squid:4 (RHSA-2024:1479)	high
192407	RHEL 7 : go-toolset-1.19-golang (RHSA-2024:1468)	high
192406	RHEL 8 : go-toolset:rhel8 (RHSA-2024:1472)	high
192405	RHEL 8 : libreoffice (RHSA-2024:1473)	high
192395	RHEL 9 : golang (RHSA-2024:1462)	high
192322	RHEL 8 : nodejs:16 (RHSA-2024:1444)	high
192308	RHEL 9 : nodejs (RHSA-2024:1438)	high
192302	RHEL 9 : postgresql-jdbc (RHSA-2024:1436)	critical
192301	RHEL 8 : postgresql (RHSA-2024:1437)	high
192300	RHEL 8 : postgresql-jdbc (RHSA-2024:1435)	critical
192298	RHEL 8 / 9 : OpenShift Container Platform 4.12.53 (RHSA-2024:1267)	high
192297	RHCOS 4 : OpenShift Container Platform 4.12.53 (RHSA-2024:1267)	high
192289	RHEL 9 : nodejs (RHSA-2024:1424)	high
192288	RHEL 8 : opencryptoki (RHSA-2024:1411)	medium
192287	RHEL 8 : ruby:3.1 (RHSA-2024:1431)	high
192286	RHEL 8 : libX11 (RHSA-2024:1417)	high
192285	RHEL 9 : libreoffice (RHSA-2024:1427)	high
192284	RHEL 8 : postgresql (RHSA-2024:1426)	high
192283	RHEL 9 : libreoffice (RHSA-2024:1425)	high
192282	RHEL 8 : bind (RHSA-2024:1406)	high
192281	RHEL 8 : emacs (RHSA-2024:1408)	critical
192280	RHEL 8 : postgresql (RHSA-2024:1422)	high
192279	RHEL 8 : cups (RHSA-2024:1409)	high
192278	RHEL 8 : gmp update (Moderate) (RHSA-2024:1412)	high
192277	RHEL 8 : kernel (RHSA-2024:1404)	high
192276	RHEL 8 : postgresql (RHSA-2024:1429)	high
192275	RHEL 8 : postgresql (RHSA-2024:1428)	high
192274	RHEL 9 : libreoffice (RHSA-2024:1423)	high
192273	RHEL 8 : fwupd (RHSA-2024:1403)	medium
192272	RHEL 8 : edk2 (RHSA-2024:1415)	high
192265	RHEL 8 : ovn23.06 (RHSA-2024:1385)	medium
192264	RHEL 9 : squid (RHSA-2024:1376)	high
192263	RHEL 8 : kernel-rt (RHSA-2024:1382)	high
192262	RHEL 9 : ovn22.03 (RHSA-2024:1393)	medium
192261	RHEL 9 : ovn23.06 (RHSA-2024:1391)	medium
192260	RHEL 8 : ovn22.03 (RHSA-2024:1387)	medium
192259	RHEL 9 : ovn22.12 (RHSA-2024:1392)	medium
192258	RHEL 8 : ovn22.12 (RHSA-2024:1386)	medium
192257	RHEL 8 : ovn23.03 (RHSA-2024:1388)	medium

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

critical

high

critical

high

high

high

medium

high

high

high

high

high

high

critical

high

high

high

high

high

high

high

medium

high

medium

high

high

medium

medium

medium

medium

medium

medium