The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3403 advisory.

  - rubygem-rack: Denial of service in Multipart MIME parsing (CVE-2023-27530)

  - rubygem-rack: denial of service in header parsing (CVE-2023-27539)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3388 advisory.

  - kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

  - kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)

  - kernel: unmap_mapping_range() race with munmap() on VM_PFNMAP mappings leads to stale TLB entry     (CVE-2022-39188)

  - kernel: use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3394 advisory.

  - pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by     entering name in Subject field (CVE-2022-2393)

  - pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3397 advisory.

  - qatzip: local privilege escalation (CVE-2022-36369)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3319 advisory.

  - golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results     (CVE-2023-24532)

  - golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)

  - golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption     (CVE-2023-24536)

  - golang: go/parser: Infinite loop in parsing (CVE-2023-24537)

  - golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)

  - golang: html/template: improper sanitization of CSS values (CVE-2023-24539)

  - golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)

  - golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3323 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    Security Fix(es):

    * golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)

    * golang: go/parser: Infinite loop in parsing (CVE-2023-24537)

    * golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)

    * golang: html/template: improper sanitization of CSS values (CVE-2023-24539)

    * golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3318 advisory.

  - golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results     (CVE-2023-24532)

  - golang: net/http, net/textproto: denial of service from excessive memory allocation (CVE-2023-24534)

  - golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption     (CVE-2023-24536)

  - golang: go/parser: Infinite loop in parsing (CVE-2023-24537)

  - golang: html/template: backticks not treated as string delimiters (CVE-2023-24538)

  - golang: html/template: improper sanitization of CSS values (CVE-2023-24539)

  - golang: html/template: improper handling of JavaScript whitespace (CVE-2023-24540)

  - golang: html/template: improper handling of empty HTML attributes (CVE-2023-29400)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3436 advisory.

  - kernel: powerpc: KVM guest OS users can cause host OS memory corruption (CVE-2021-37576)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3292 advisory.

  - httpd: HTTP request splitting with mod_rewrite and mod_proxy (CVE-2023-25690)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3269 advisory.

  - libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c (CVE-2021-3826)

  - binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault (CVE-2022-4285)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3291 advisory.

  - ruby/cgi-gem: HTTP response splitting in CGI (CVE-2021-33621)

  - ruby: ReDoS vulnerability in URI (CVE-2023-28755)

  - ruby: ReDoS vulnerability in Time (CVE-2023-28756)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3280 advisory.

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3276 advisory.

  - sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3277 advisory.

  - kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3263 advisory.

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3278 advisory.

  - kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3262 advisory.

  - sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3264 advisory.

  - sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3243 advisory.

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3247 advisory.

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3248 advisory.

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3245 advisory.

  - git: data exfiltration with maliciously crafted repository (CVE-2023-22490)

  - git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3246 advisory.

  - git: data exfiltration with maliciously crafted repository (CVE-2023-22490)

  - git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2780 advisory.

  - golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)

  - golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)

  - golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

  - golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

  - golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2758 advisory.

  - golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

  - golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

  - golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

  - golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

  - golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

  - golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

  - golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  - golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

  - golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

  - golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

  - golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

  - golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short,     potentially allowing a denial of service (CVE-2022-32189)

  - golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

  - podman: symlink exchange attack in podman export volume (CVE-2023-0778)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:2805 advisory.

  - xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.c (CVE-2022-3550)

  - xorg-x11-server: memory leak in ProcXkbGetKbdByName() in xkb/xkb.c (CVE-2022-3551)

  - xorg-x11-server: XkbGetKbdByName use-after-free (CVE-2022-4283)

  - xorg-x11-server: XTestSwapFakeInput stack overflow (CVE-2022-46340)

  - xorg-x11-server: XIPassiveUngrab out-of-bounds access (CVE-2022-46341)

  - xorg-x11-server: XvdiSelectVideoNotify use-after-free (CVE-2022-46342)

  - xorg-x11-server: ScreenSaverSetAttributes use-after-free (CVE-2022-46343)

  - xorg-x11-server: XIChangeProperty out-of-bounds access (CVE-2022-46344)

  - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation (CVE-2023-0494)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3220 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3221 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3177 advisory.

  - apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3190 advisory.

  - kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

  - kernel: remote DoS in TIPC kernel module (CVE-2023-1390)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3189 advisory.

  - emacs: command injection vulnerability in org-mode (CVE-2023-28617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3191 advisory.

  - kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

  - kernel: remote DoS in TIPC kernel module (CVE-2023-1390)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3192 advisory.

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3178 advisory.

  - apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3148 advisory.

  - libreswan: Regression of CVE-2023-30570 fixes in the Red Hat Enterprise Linux (CVE-2023-2295)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3155 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3143 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3154 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3137 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3153 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3140 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3147 advisory.

  - apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3141 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3145 advisory.

  - apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3136 advisory.

  - OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)     (CVE-2022-21426)

  - OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)

  - OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3139 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3138 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3146 advisory.

  - apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3149 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3152 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
176538	RHEL 8 : pcs (RHSA-2023:3403)	high
176537	RHEL 8 : kernel (RHSA-2023:3388)	high
176536	RHEL 8 : pki-core:10.6 (RHSA-2023:3394)	high
176535	RHEL 8 : qatzip (RHSA-2023:3397)	high
176392	RHEL 8 : go-toolset:rhel8 (RHSA-2023:3319)	critical
176391	RHEL 7 : go-toolset-1.19 and go-toolset-1.19-golang (RHSA-2023:3323)	critical
176357	RHEL 9 : go-toolset and golang (RHSA-2023:3318)	critical
176330	RHEL 8 : kpatch-patch (RHSA-2021:3436)	high
176322	RHEL 7 : httpd24-httpd (RHSA-2023:3292)	critical
176321	RHEL 7 : devtoolset-12-binutils (RHSA-2023:3269)	medium
176320	RHEL 7 : rh-ruby27-ruby (RHSA-2023:3291)	high
176256	RHEL 7 : rh-git227-git (RHSA-2023:3280)	high
176250	RHEL 7 : sudo (RHSA-2023:3276)	high
176247	RHEL 7 : kernel (RHSA-2023:3277)	high
176246	RHEL 7 : git (RHSA-2023:3263)	high
176245	RHEL 7 : kpatch-patch (RHSA-2023:3278)	high
176233	RHEL 7 : sudo (RHSA-2023:3262)	high
176232	RHEL 7 : sudo (RHSA-2023:3264)	high
176205	RHEL 8 : git (RHSA-2023:3243)	high
176204	RHEL 8 : git (RHSA-2023:3247)	high
176203	RHEL 9 : git (RHSA-2023:3248)	high
176202	RHEL 9 : git (RHSA-2023:3245)	high
176201	RHEL 8 : git (RHSA-2023:3246)	high
176147	RHEL 8 : Image Builder (RHSA-2023:2780)	high
176146	RHEL 8 : container-tools:rhel8 (RHSA-2023:2758)	medium
176145	RHEL 8 : xorg-x11-server-Xwayland (RHSA-2023:2805)	high
176068	RHEL 8 : firefox (RHSA-2023:3220)	high
176065	RHEL 8 : thunderbird (RHSA-2023:3221)	high
175984	RHEL 8 : apr-util (RHSA-2023:3177)	medium
175983	RHEL 8 : kernel (RHSA-2023:3190)	high
175982	RHEL 8 : emacs (RHSA-2023:3189)	high
175981	RHEL 8 : kpatch-patch (RHSA-2023:3191)	high
175980	RHEL 8 : git (RHSA-2023:3192)	high
175979	RHEL 8 : apr-util (RHSA-2023:3178)	medium
175943	RHEL 9 : libreswan (RHSA-2023:3148)	high
175942	RHEL 8 : thunderbird (RHSA-2023:3155)	high
175941	RHEL 9 : firefox (RHSA-2023:3143)	high
175940	RHEL 8 : thunderbird (RHSA-2023:3154)	high
175938	RHEL 7 : firefox (RHSA-2023:3137)	high
175937	RHEL 8 : thunderbird (RHSA-2023:3153)	high
175936	RHEL 8 : firefox (RHSA-2023:3140)	high
175935	RHEL 9 : apr-util (RHSA-2023:3147)	medium
175934	RHEL 8 : firefox (RHSA-2023:3141)	high
175933	RHEL 7 : apr-util (RHSA-2023:3145)	medium
175932	RHEL 7 : java-1.8.0-ibm (RHSA-2023:3136)	medium
175930	RHEL 8 : firefox (RHSA-2023:3139)	high
175924	RHEL 8 : firefox (RHSA-2023:3138)	high
175923	RHEL 9 : apr-util (RHSA-2023:3146)	medium
175922	RHEL 9 : thunderbird (RHSA-2023:3149)	high
175921	RHEL 8 : thunderbird (RHSA-2023:3152)	high

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

high

high

high

critical

critical

critical

high

critical

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

high

high

high

medium

high

high

high

high

medium

high

high

high

high

high

high

high

medium

high

medium

medium

high

high

medium

high

high