The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7368 advisory.

  - c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7389 advisory.

  - kernel: use-after-free due to race condition in qdisc_graft() (CVE-2023-0590)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

  - kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)

  - kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free     (CVE-2023-4147)

  - hw: amd: Cross-Process Information Leak (CVE-2023-20593)

  - kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7400 advisory.

  - libcap: Memory Leak on pthread_create() Error (CVE-2023-2602)

  - libcap: Integer Overflow in _libcap_strdup() (CVE-2023-2603)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7417 advisory.

  - kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7436 advisory.

  - xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7434 advisory.

  - kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7435 advisory.

  - python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)

  - python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7407 advisory.

  - python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)

  - python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7388 advisory.

  - xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7418 advisory.

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

  - kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and     cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)

  - kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)

  - kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7382 advisory.

  - kernel: use-after-free due to race condition in qdisc_graft() (CVE-2023-0590)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

  - kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)

  - kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free     (CVE-2023-4147)

  - hw: amd: Cross-Process Information Leak (CVE-2023-20593)

  - kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7376 advisory.

  - libqb: Buffer overflow in log_blackbox.c (CVE-2023-39976)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7375 advisory.

  - pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7385 advisory.

  - python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)

  - python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7401 advisory.

  - hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

  - hw: amd: Cross-Process Information Leak (CVE-2023-20593)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7405 advisory.

  - xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7419 advisory.

  - kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue     overhead (CVE-2023-3611)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and     cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7371 advisory.

  - samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)

  - samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)

  - samba: rpcecho development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7398 advisory.

  - kernel: use-after-free due to race condition occurring in dvb_register_device() (CVE-2022-45884)

  - kernel: use-after-free due to race condition occurring in dvb_net.c (CVE-2022-45886)

  - kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c (CVE-2022-45919)

  - Kernel: NULL pointer dereference problem in sctp_sched_dequeue_common (CVE-2023-2177)

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7410 advisory.

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7411 advisory.

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

  - kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)

  - kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free     (CVE-2023-4147)

  - kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7373 advisory.

  - xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7428 advisory.

  - xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367)

  - xorg-x11-server: Use-after-free bug in DestroyWindow (CVE-2023-5380)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7423 advisory.

  - hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)

  - kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue     overhead (CVE-2023-3611)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and     cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)

  - kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7395 advisory.

  - pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7408 advisory.

  - samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)

  - samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)

  - samba: rpcecho development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7394 advisory.

  - binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7403 advisory.

  - pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7431 advisory.

  - kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter (CVE-2023-1829)

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() (CVE-2023-4004)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7409 advisory.

  - glibc: potential use-after-free in getaddrinfo() (CVE-2023-4806)

  - glibc: potential use-after-free in gaih_inet() (CVE-2023-4813)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7378 advisory.

  - python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)

  - python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7424 advisory.

  - hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)

  - kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue     overhead (CVE-2023-3611)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

  - kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and     cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)

  - kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7386 advisory.

  - pixman: Integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (CVE-2022-44638)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7370 advisory.

  - kernel: AMD: Cross-Thread Return Address Predictions (CVE-2022-27672)

  - hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

  - kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and     cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)

  - kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)

  - kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7379 advisory.

  - kernel: AMD: Cross-Thread Return Address Predictions (CVE-2022-27672)

  - hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags (CVE-2023-3812)

  - kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and     cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)

  - kernel: use after free in nvmet_tcp_free_crypto in NVMe (CVE-2023-5178)

  - kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7361 advisory.

  - ncurses: Local users can trigger security-relevant memory corruption via malformed data (CVE-2023-29491)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7334 advisory.

  - HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)     (CVE-2023-44487)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7262 advisory.

  - open-vm-tools: SAML token signature bypass (CVE-2023-34058)

  - open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7294 advisory.

  - kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails (CVE-2023-3609)

  - kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function     (CVE-2023-3776)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7253 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7256 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7260 advisory.

  - open-vm-tools: SAML token signature bypass (CVE-2023-34058)

  - open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7263 advisory.

  - open-vm-tools: SAML token signature bypass (CVE-2023-34058)

  - open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7267 advisory.

  - open-vm-tools: SAML token signature bypass (CVE-2023-34058)

  - open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7254 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7255 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7277 advisory.

  - open-vm-tools: SAML token signature bypass (CVE-2023-34058)

  - open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7265 advisory.

  - open-vm-tools: SAML token signature bypass (CVE-2023-34058)

  - open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7258 advisory.

  - dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand (CVE-2023-36049)

  - dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms (CVE-2023-36558)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7279 advisory.

  - open-vm-tools: SAML token signature bypass (CVE-2023-34058)

  - open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper (CVE-2023-34059)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
186074	RHEL 9 : c-ares (RHSA-2023:7368)	high
186073	RHEL 9 : kernel-rt (RHSA-2023:7389)	high
186072	RHEL 8 : libcap (RHSA-2023:7400)	high
186071	RHEL 8 : kpatch-patch (RHSA-2023:7417)	high
186070	RHEL 8 : tigervnc (RHSA-2023:7436)	high
186069	RHEL 8 : kernel (RHSA-2023:7434)	high
186068	RHEL 8 : fence-agents (RHSA-2023:7435)	critical
186067	RHEL 8 : fence-agents (RHSA-2023:7407)	critical
186066	RHEL 9 : tigervnc (RHSA-2023:7388)	high
186065	RHEL 9 : kpatch-patch (RHSA-2023:7418)	high
186064	RHEL 9 : kernel (RHSA-2023:7382)	high
186063	RHEL 9 : libqb (RHSA-2023:7376)	critical
186062	RHEL 9 : pixman (RHSA-2023:7375)	high
186061	RHEL 9 : fence-agents (RHSA-2023:7385)	critical
186060	RHEL 8 : linux-firmware (RHSA-2023:7401)	medium
186059	RHEL 8 : tigervnc (RHSA-2023:7405)	high
186058	RHEL 7 : kpatch-patch (RHSA-2023:7419)	high
186057	RHEL 9 : samba (RHSA-2023:7371)	critical
186056	RHEL 8 : kernel (RHSA-2023:7398)	high
186055	RHEL 8 : kpatch-patch (RHSA-2023:7410)	high
186054	RHEL 9 : kpatch-patch (RHSA-2023:7411)	high
186053	RHEL 9 : tigervnc (RHSA-2023:7373)	high
186052	RHEL 7 : tigervnc (RHSA-2023:7428)	high
186051	RHEL 7 : kernel (RHSA-2023:7423)	high
186050	RHEL 8 : python-setuptools (RHSA-2023:7395)	medium
186049	RHEL 8 : samba (RHSA-2023:7408)	critical
186048	RHEL 8 : binutils (RHSA-2023:7394)	medium
186047	RHEL 8 : pixman (RHSA-2023:7403)	high
186046	RHEL 8 : kernel-rt (RHSA-2023:7431)	high
186045	RHEL 8 : glibc (RHSA-2023:7409)	medium
186044	RHEL 9 : fence-agents (RHSA-2023:7378)	critical
186043	RHEL 7 : kernel-rt (RHSA-2023:7424)	high
186042	RHEL 9 : pixman (RHSA-2023:7386)	high
186041	RHEL 9 : kernel (RHSA-2023:7370)	high
186034	RHEL 9 : kernel-rt (RHSA-2023:7379)	high
186033	RHEL 9 : ncurses (RHSA-2023:7361)	high
185905	RHEL 7 : rh-varnish6-varnish (RHSA-2023:7334)	high
185810	RHEL 8 : open-vm-tools (RHSA-2023:7262)	high
185809	RHEL 7 : kernel (RHSA-2023:7294)	high
185808	RHEL 9 : dotnet8.0 (RHSA-2023:7253)	critical
185807	RHEL 8 : dotnet7.0 (RHSA-2023:7256)	critical
185806	RHEL 8 : open-vm-tools (RHSA-2023:7260)	high
185805	RHEL 8 : open-vm-tools (RHSA-2023:7263)	high
185804	RHEL 9 : open-vm-tools (RHSA-2023:7267)	high
185803	RHEL 8 : dotnet8.0 (RHSA-2023:7254)	critical
185802	RHEL 9 : dotnet7.0 (RHSA-2023:7255)	critical
185801	RHEL 9 : open-vm-tools (RHSA-2023:7277)	high
185800	RHEL 8 : open-vm-tools (RHSA-2023:7265)	high
185799	RHEL 8 : dotnet6.0 (RHSA-2023:7258)	critical
185798	RHEL 7 : open-vm-tools (RHSA-2023:7279)	high

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

high

high

high

high

high

critical

critical

high

high

high

critical

high

critical

medium

high

high

critical

high

high

high

high

high

high

medium

critical

medium

high

high

medium

critical

high

high

high

high

high

high

high

high

critical

critical

high

high

high

critical

critical

high

high

critical

high