Detections
Analytics
Rocky Linux 8 [CIQ] Security Update: bind-dyndb-ldap / bind-dyndb-ldap-debuginfo / etc (crlsa-2021_1846)
medium Nessus Plugin ID 359448
Language:
Synopsis
The Rocky Linux host is missing one or more security updates.Description
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2021_1846 advisory.* jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023)
Tenable has extracted the preceding description block directly from the CIQ security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected packages based on the guidance in CIQ advisory crlsa-2021_1846.See Also
https://access.redhat.com/errata/RHSA-2021:1846
https://bugzilla.redhat.com/show_bug.cgi?id=1340463
https://bugzilla.redhat.com/show_bug.cgi?id=1357495
https://bugzilla.redhat.com/show_bug.cgi?id=1484088
https://bugzilla.redhat.com/show_bug.cgi?id=1542737
https://bugzilla.redhat.com/show_bug.cgi?id=1544379
https://bugzilla.redhat.com/show_bug.cgi?id=1660877
https://bugzilla.redhat.com/show_bug.cgi?id=1779981
https://bugzilla.redhat.com/show_bug.cgi?id=1780328
https://bugzilla.redhat.com/show_bug.cgi?id=1780510
https://bugzilla.redhat.com/show_bug.cgi?id=1780782
https://bugzilla.redhat.com/show_bug.cgi?id=1784657
https://bugzilla.redhat.com/show_bug.cgi?id=1809215
https://bugzilla.redhat.com/show_bug.cgi?id=1810148
https://bugzilla.redhat.com/show_bug.cgi?id=1812871
https://bugzilla.redhat.com/show_bug.cgi?id=1824193
https://bugzilla.redhat.com/show_bug.cgi?id=1850004
https://bugzilla.redhat.com/show_bug.cgi?id=1851835
https://bugzilla.redhat.com/show_bug.cgi?id=1857272
https://bugzilla.redhat.com/show_bug.cgi?id=1860129
https://bugzilla.redhat.com/show_bug.cgi?id=1866558
https://bugzilla.redhat.com/show_bug.cgi?id=1872603
https://bugzilla.redhat.com/show_bug.cgi?id=1875001
https://bugzilla.redhat.com/show_bug.cgi?id=1882340
https://bugzilla.redhat.com/show_bug.cgi?id=1891056
https://bugzilla.redhat.com/show_bug.cgi?id=1891505
https://bugzilla.redhat.com/show_bug.cgi?id=1891735
https://bugzilla.redhat.com/show_bug.cgi?id=1891741
https://bugzilla.redhat.com/show_bug.cgi?id=1891832
https://bugzilla.redhat.com/show_bug.cgi?id=1891850
https://bugzilla.redhat.com/show_bug.cgi?id=1894800
https://bugzilla.redhat.com/show_bug.cgi?id=1901068
https://bugzilla.redhat.com/show_bug.cgi?id=1902173
https://bugzilla.redhat.com/show_bug.cgi?id=1902727
https://bugzilla.redhat.com/show_bug.cgi?id=1903025
https://bugzilla.redhat.com/show_bug.cgi?id=1904484
https://bugzilla.redhat.com/show_bug.cgi?id=1904612
https://bugzilla.redhat.com/show_bug.cgi?id=1905919
https://bugzilla.redhat.com/show_bug.cgi?id=1909876
https://bugzilla.redhat.com/show_bug.cgi?id=1912845
https://bugzilla.redhat.com/show_bug.cgi?id=1922955
https://bugzilla.redhat.com/show_bug.cgi?id=1923900
https://bugzilla.redhat.com/show_bug.cgi?id=1924026
https://bugzilla.redhat.com/show_bug.cgi?id=1924501
https://bugzilla.redhat.com/show_bug.cgi?id=1924812
https://bugzilla.redhat.com/show_bug.cgi?id=1925410
https://bugzilla.redhat.com/show_bug.cgi?id=1926699
https://bugzilla.redhat.com/show_bug.cgi?id=1926910
https://bugzilla.redhat.com/show_bug.cgi?id=1928900
https://bugzilla.redhat.com/show_bug.cgi?id=1930426
https://bugzilla.redhat.com/show_bug.cgi?id=1932289
https://bugzilla.redhat.com/show_bug.cgi?id=1939371
https://bugzilla.redhat.com/show_bug.cgi?id=871208
https://errata.build.resf.org/RLSA-2021:1846
Plugin Details
Severity: Medium
ID: 359448
File Name: ciq_rocky_linux_8_crlsa-2021_1846.nasl
Version: 1.2
Type: Local
Published: 10/1/2026
Updated: 10/2/2026
Supported Sensors: Continuous Assessment, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.1
Percentile: 96.42
Vendor
Vendor Severity: Unknown
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Score Source: CVE-2020-11023
CVSS v3
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
Required KB Items: Host/OS/extended-third-party, Host/local_checks_enabled, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/18/2021
Vulnerability Publication Date: 4/29/2020
CISA Known Exploited Vulnerability Due Dates: 2/13/2025
Reference Information
CVE: CVE-2020-11023