The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-4635 advisory.

    [115.13.0-3.0.1]
    - Add Oracle prefs file

    [115.13.0]
    - Add OpenELA debranding

    [115.13.0-3]
    - Update to 115.13.0 build5

    [115.13.0-2]
    - Update to 115.13.0 build3

    [115.13.0-1]
    - Update to 115.13.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2790-1 advisory.

    Update to Mozilla Thunderbird 115.13 (MFSA 2024-31, bsc#1226316):

    Security fixes:

    - CVE-2024-6600: Memory corruption in WebGL API (bmo#1888340)
    - CVE-2024-6601: Race condition in permission assignment (bmo#1890748)
    - CVE-2024-6602: Memory corruption in NSS (bmo#1895032)
    - CVE-2024-6603: Memory corruption in thread creation (bmo#1895081)
    - CVE-2024-6604: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13, Thunderbird 128, and     Thunderbird 115.13 (bmo#1748105, bmo#1837550, bmo#1884266)

    Other fixes:

    - fixed: After starting Thunderbird, the message list position  was sometimes set to an incorrect position     (bmo#1896009)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of thunderbird installed on the remote host is prior to 115.13.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2640 advisory.

    Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Firefox ESR < 115.13.
    (CVE-2024-6604)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202412-13 (Spidermonkey: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Spidermonkey. Please review the CVE identifiers     referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5727 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5727-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 10, 2024                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : firefox-esr     CVE ID         : CVE-2024-6601 CVE-2024-6602 CVE-2024-6603 CVE-2024-6604

    Multiple security issues have been found in the Mozilla Firefox web     browser, which could potentially result in the execution of arbitrary     code or privilege escalation.

    For the oldstable distribution (bullseye), these problems have been fixed     in version 115.13.0esr-1~deb11u1.

    For the stable distribution (bookworm), these problems have been fixed in     version 115.13.0esr-1~deb12u1.

    We recommend that you upgrade your firefox-esr packages.

    For the detailed security status of firefox-esr please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/firefox-esr

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
204707	Oracle Linux 8 : thunderbird (ELSA-2024-4635)	Nessus	Oracle Linux Local Security Checks	7/25/2024	11/13/2024	high
205125	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaThunderbird (SUSE-SU-2024:2790-1)	Nessus	SuSE Local Security Checks	8/7/2024	8/7/2024	critical
208110	Amazon Linux 2 : thunderbird (ALAS-2024-2640)	Nessus	Amazon Linux Local Security Checks	10/3/2024	12/11/2024	high
212179	GLSA-202412-13 : Spidermonkey: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	12/9/2024	2/3/2025	critical
202167	Debian dsa-5727 : firefox-esr - security update	Nessus	Debian Local Security Checks	7/11/2024	7/12/2024	critical

Detections

Analytics

Plugins Search

high

critical

high

critical

critical