The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4513 advisory.

  - libsepol: use-after-free in __cil_verify_classperms() (CVE-2021-36084, CVE-2021-36085)

  - libsepol: use-after-free in cil_reset_classpermission() (CVE-2021-36086)

  - libsepol: heap-based buffer overflow in ebitmap_match_any() (CVE-2021-36087)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4140 advisory.

  - kernel: Intel graphics card information leak. (CVE-2019-14615)

  - kernel: out-of-bounds reads in pinctrl subsystem. (CVE-2020-0427)

  - kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24502)

  - kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24503)

  - kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24504)

  - kernel: Fragmentation cache not cleared on reconnection (CVE-2020-24586)

  - kernel: Reassembling fragments encrypted under different keys (CVE-2020-24587)

  - kernel: wifi frame payload being parsed incorrectly as an L2 frame (CVE-2020-24588)

  - kernel: Forwarding EAPOL from unauthenticated wifi client (CVE-2020-26139)

  - kernel: accepting plaintext data frames in protected networks (CVE-2020-26140)

  - kernel: not verifying TKIP MIC of fragmented frames (CVE-2020-26141)

  - kernel: accepting fragmented plaintext frames in protected networks (CVE-2020-26143)

  - kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header (CVE-2020-26144)

  - kernel: accepting plaintext broadcast fragments as full frames (CVE-2020-26145)

  - kernel: reassembling encrypted fragments with non-consecutive packet numbers (CVE-2020-26146)

  - kernel: reassembling mixed encrypted/plaintext fragments (CVE-2020-26147)

  - kernel: the copy-on-write implementation can grant unintended write access because of a race condition in     a THP mapcount check (CVE-2020-29368)

  - kernel: locking inconsistency in drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c can lead to a read-     after-free (CVE-2020-29660)

  - kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function in     drivers/net/wireless/marvell/mwifiex/join.c via a long SSID value (CVE-2020-36158)

  - kernel: memory leak upon a kmalloc failure in kvm_io_bus_unregister_dev function in virt/kvm/kvm_main.c     (CVE-2020-36312)

  - kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() in net/bluetooth/hci_event.c     (CVE-2020-36386)

  - kernel: Improper access control in BlueZ may allow information disclosure vulnerability. (CVE-2021-0129)

  - kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() (CVE-2021-20194)

  - kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure (CVE-2021-20239)

  - kernel: Race condition in sctp_destroy_sock list_del (CVE-2021-23133)

  - kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode     (CVE-2021-28950)

  - kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c (CVE-2021-28971)

  - kernel: protection for sequences of pointer arithmetic operations against speculatively out-of-bounds     loads can be bypassed to leak content of kernel memory (CVE-2021-29155)

  - kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c (CVE-2021-29646)

  - kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c     and include/linux/netfilter/x_tables.h may lead to DoS (CVE-2021-29650)

  - kernel: local escalation of privileges in handling of eBPF programs (CVE-2021-31440)

  - kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content     of kernel memory (CVE-2021-31829)

  - kernel: out of bounds array access in drivers/md/dm-ioctl.c (CVE-2021-31916)

  - kernel: use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c (CVE-2021-33033)

  - kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations     by BPF verifier (CVE-2021-33200)

  - kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c (CVE-2021-3348)

  - kernel: Linux kernel eBPF RINGBUF map oversized allocation (CVE-2021-3489)

  - kernel: double free in bluetooth subsystem when the HCI device initialization fails (CVE-2021-3564)

  - kernel: use-after-free in function hci_sock_bound_ioctl() (CVE-2021-3573)

  - kernel: eBPF 32-bit source register truncation on div/mod (CVE-2021-3600)

  - kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50 (CVE-2021-3635)

  - kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (CVE-2021-3659)

  - kernel: DoS in rb_per_cpu_empty() (CVE-2021-3679)

  - kernel: overlayfs: Mounting overlayfs inside an unprivileged user namespace can reveal files     (CVE-2021-3732)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4153 advisory.

  - dnsmasq: fixed outgoing port used when --server is used with an interface name (CVE-2021-3448)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4489 advisory.

  - rpm: missing length checks in hdrblobInit() (CVE-2021-20266)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4511 advisory.

  - curl: Leak of authentication credentials in URL via automatic Referer (CVE-2021-22876)

  - CVE-2021-22925 curl: Incorrect fix for  TELNET stack contents disclosure (CVE-2021-22898)

  - curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure (CVE-2021-22925)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4319 advisory.

  - exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS     (CVE-2021-31292)

  - exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618)

  - exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-37619)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4315 advisory.

  - spamassassin: Malicious rule configuration files can be configured to run system commands (CVE-2020-1946)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4162 advisory.

  - python-psutil: Double free because of refcount mishandling (CVE-2019-18874)

  - python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)

  - python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

  - python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

  - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

  - python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

  - python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

  - python: Information disclosure via pydoc (CVE-2021-3426)

  - python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

  - python-babel: Relative path traversal allows attacker to load arbitrary locale files and     execute arbitrary code (CVE-2021-42771)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4241 advisory.

  - libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521, CVE-2020-35522)

  - libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523)

  - libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4326 advisory.

  - libX11: missing request length checks (CVE-2021-31535)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4257 advisory.

  - httpd: mod_session: NULL pointer dereference when parsing Cookie header (CVE-2021-26690)

  - httpd: Unexpected URL matching with 'MergeSlashes OFF' (CVE-2021-30641)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4409 advisory.

  - libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel     attack against mpi_powm (CVE-2021-33560)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4517 advisory.

  - vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c (CVE-2021-3778)

  - vim: use-after-free in nv_replace() in normal.c (CVE-2021-3796)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4172 advisory.

  - qt: Out of bounds read in function QRadialFetchSimd from crafted svg file (CVE-2021-3481)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4382 advisory.

  - json-c: integer overflow and out-of-bounds write via a large JSON file (CVE-2020-12762)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4526 advisory.

  - glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a     64-bit platform (CVE-2021-27218)

  - glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to     32 bits (CVE-2021-27219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4451 advisory.

  - gnutls: Use after free in client key_share extension (CVE-2021-20231)

  - gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c (CVE-2021-20232)

  - nettle: Remote crash in RSA decryption via manipulated ciphertext (CVE-2021-3580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4235 advisory.

  - jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)

  - jasper: Out of bounds read in jp2_decode() in jp2_dec.c (CVE-2021-26926)

  - jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c (CVE-2021-26927)

  - jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2021-3272)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4373 advisory.

  - pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1     (CVE-2019-20838)

  - pcre: Integer overflow when parsing callout numeric arguments (CVE-2020-14155)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4151 advisory.

  - python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)

  - python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

  - python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

  - python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in     query parameters (CVE-2021-23336)

  - python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

  - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

  - python-babel: Relative path traversal allows attacker to load arbitrary locale files and     execute arbitrary code (CVE-2021-42771)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4150 advisory.

  - python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

  - python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4324 advisory.

  - python-psutil: Double free because of refcount mishandling (CVE-2019-18874)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4464 advisory.

  - libdnf: Signature verification bypass via signature placed in the main RPM header (CVE-2021-3445)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4270 advisory.

  - rust: incorrect parsing of extraneous zero characters at the beginning of an IP address string     (CVE-2021-29922)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4455 advisory.

  - python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4537 advisory.

  - httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5     (CVE-2021-20325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4158 advisory.

  - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4160 advisory.

  - python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

  - python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

  - python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

  - python: Information disclosure via pydoc (CVE-2021-3426)

  - python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

  - python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)

  - python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4292 advisory.

  - squid: denial of service in URN processing (CVE-2021-28651)

  - squid: denial of service issue in Cache Manager (CVE-2021-28652)

  - squid: denial of service in HTTP response processing (CVE-2021-28662, CVE-2021-33620)

  - squid: improper input validation in HTTP Range header (CVE-2021-31806)

  - squid: incorrect memory management in HTTP Range header (CVE-2021-31807)

  - squid: integer overflow in HTTP Range header (CVE-2021-31808)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4426 advisory.

  - ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c (CVE-2019-17594)

  - ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c (CVE-2019-17595)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4161 advisory.

  - python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4181 advisory.

  - mutt: Incorrect handling of invalid initial IMAP responses could lead to an authentication attempt over     unencrypted connection (CVE-2020-28896)

  - mutt: Memory leak when parsing rfc822 group addresses (CVE-2021-3181)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4173 advisory.

  - exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29457)

  - exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode (CVE-2021-29458)

  - exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata (CVE-2021-29463)

  - exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29464)

  - exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29470, CVE-2021-37619)

  - exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29473)

  - exiv2: Use of uninitialized memory in isWebPType() may lead to information leak (CVE-2021-29623)

  - exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS     (CVE-2021-31292)

  - exiv2: DoS due to quadratic complexity in ProcessUTF8Portion (CVE-2021-32617)

  - exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() (CVE-2021-3482)

  - exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4432 advisory.

  - bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack     (CVE-2020-26558)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4149 advisory.

  - python-pillow: Buffer over-read in PCX image reader (CVE-2020-35653)

  - python-pillow: Buffer over-read in SGI RLE image reader (CVE-2020-35655)

  - python-pillow: Out-of-bounds read in J2K image reader (CVE-2021-25287, CVE-2021-25288)

  - python-pillow: Negative-offset memcpy in TIFF image reader (CVE-2021-25290)

  - python-pillow: Regular expression DoS in PDF format parser (CVE-2021-25292)

  - python-pillow: Out-of-bounds read in SGI RLE image reader (CVE-2021-25293)

  - python-pillow: Excessive memory allocation in BLP image reader (CVE-2021-27921)

  - python-pillow: Excessive memory allocation in ICNS image reader (CVE-2021-27922)

  - python-pillow: Excessive memory allocation in ICO image reader (CVE-2021-27923)

  - python-pillow: Excessive memory allocation in PSD image reader (CVE-2021-28675)

  - python-pillow: Infinite loop in FLI image reader (CVE-2021-28676)

  - python-pillow: Excessive CPU use in EPS image reader (CVE-2021-28677)

  - python-pillow: Excessive looping in BLP image reader (CVE-2021-28678)

  - python-pillow: Buffer overflow in image convert function (CVE-2021-34552)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4321 advisory.

  - linuxptp: wrong length of one-step follow-up in transparent clock (CVE-2021-3571)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4288 advisory.

  - libjpeg-turbo: Stack-based buffer overflow in the transform component (CVE-2020-17541)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4339 advisory.

  - grilo: missing TLS certificate verification (CVE-2021-39365)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4139 advisory.

  - python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

  - python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4325 advisory.

  - lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4393 advisory.

  - cups: access to uninitialized buffer in ipp.c (CVE-2020-10001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4130 advisory.

  - Mozilla: iframe sandbox rules did not apply to XSLT stylesheets (CVE-2021-38503)

  - Mozilla: Use-after-free in file picker dialog (CVE-2021-38504)

  - Mozilla: Firefox could be coaxed into going into fullscreen mode without notification or warning     (CVE-2021-38506)

  - Mozilla: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services     hosted on other ports (CVE-2021-38507)

  - Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing     (CVE-2021-38508)

  - Mozilla: Javascript alert box could have been spoofed onto an arbitrary domain (CVE-2021-38509)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4123 advisory.

  - Mozilla: iframe sandbox rules did not apply to XSLT stylesheets (CVE-2021-38503)

  - Mozilla: Use-after-free in file picker dialog (CVE-2021-38504)

  - Mozilla: Firefox could be coaxed into going into fullscreen mode without notification or warning     (CVE-2021-38506)

  - Mozilla: Opportunistic Encryption in HTTP2 could be used to bypass the Same-Origin-Policy on services     hosted on other ports (CVE-2021-38507)

  - Mozilla: Permission Prompt could be overlaid, resulting in user confusion and potential spoofing     (CVE-2021-38508)

  - Mozilla: Javascript alert box could have been spoofed onto an arbitrary domain (CVE-2021-38509)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4097 advisory.

  - webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30858)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4057 advisory.

  - python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4059 advisory.

  - curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols (CVE-2021-22946)

  - curl: Server responses received before STARTTLS processed after TLS handshake (CVE-2021-22947)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4060 advisory.

  - libsolv: heap-based buffer overflow in pool_installable() in src/repo.h (CVE-2021-33928)

  - libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h (CVE-2021-33929)

  - libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h (CVE-2021-33930)

  - libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c (CVE-2021-33938)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4042 advisory.

  - flatpak: Sandbox bypass via recent VFS-manipulating syscalls (CVE-2021-41133)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4056 advisory.

  - kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free (CVE-2020-36385)

  - kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of     hid-input.c (CVE-2021-0512)

  - kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE) (CVE-2021-3656)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4058 advisory.

  - samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process     token (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
155077	CentOS 8 : libsepol (CESA-2021:4513)	low
155070	CentOS 8 : kernel-rt (CESA-2021:4140)	high
155069	CentOS 8 : dnsmasq (CESA-2021:4153)	medium
155068	CentOS 8 : rpm (CESA-2021:4489)	medium
155067	CentOS 8 : curl (CESA-2021:4511)	medium
155066	CentOS 8 : compat-exiv2-026 (CESA-2021:4319)	high
155065	CentOS 8 : spamassassin (CESA-2021:4315)	critical
155064	CentOS 8 : python38:3.8 and python38-devel:3.8 (CESA-2021:4162)	critical
155063	CentOS 8 : libtiff (CESA-2021:4241)	high
155062	CentOS 8 : libX11 (CESA-2021:4326)	critical
155061	CentOS 8 : httpd:2.4 (CESA-2021:4257)	medium
155057	CentOS 8 : libgcrypt (CESA-2021:4409)	high
155056	CentOS 8 : vim (CESA-2021:4517)	high
155055	CentOS 8 : qt5 (CESA-2021:4172)	high
155054	CentOS 8 : json-c (CESA-2021:4382)	high
155053	CentOS 8 : mingw-glib2 (CESA-2021:4526)	high
155052	CentOS 8 : gnutls and nettle (CESA-2021:4451)	critical
155051	CentOS 8 : jasper (CESA-2021:4235)	high
155050	CentOS 8 : pcre (CESA-2021:4373)	high
155049	CentOS 8 : python27:2.7 (CESA-2021:4151)	critical
155047	CentOS 8 : python36:3.6 (CESA-2021:4150)	high
155046	CentOS 8 : python-psutil (CESA-2021:4324)	high
155045	CentOS 8 : dnf (CESA-2021:4464)	high
155044	CentOS 8 : rust-toolset:rhel8 (CESA-2021:4270)	critical
155043	CentOS 8 : python-pip (CESA-2021:4455)	medium
155042	CentOS 8 : httpd:2.4 (CESA-2021:4537)	critical
155041	CentOS 8 : python-lxml (CESA-2021:4158)	medium
155040	CentOS 8 : python39:3.9 and python39-devel:3.9 (CESA-2021:4160)	critical
155039	CentOS 8 : squid:4 (CESA-2021:4292)	high
155038	CentOS 8 : ncurses (CESA-2021:4426)	medium
155037	CentOS 8 : python-jinja2 (CESA-2021:4161)	medium
155036	CentOS 8 : mutt (CESA-2021:4181)	medium
155035	CentOS 8 : exiv2 (CESA-2021:4173)	high
155034	CentOS 8 : bluez (CESA-2021:4432)	medium
155033	CentOS 8 : python-pillow (CESA-2021:4149)	critical
155032	CentOS 8 : linuxptp (CESA-2021:4321)	high
155031	CentOS 8 : libjpeg-turbo (CESA-2021:4288)	high
155030	CentOS 8 : grilo (CESA-2021:4339)	medium
155029	CentOS 8 : resource-agents (CESA-2021:4139)	high
155028	CentOS 8 : lasso (CESA-2021:4325)	high
155027	CentOS 8 : cups (CESA-2021:4393)	medium
154979	CentOS 8 : thunderbird (CESA-2021:4130)	critical
154969	CentOS 8 : firefox (CESA-2021:4123)	critical
154884	CentOS 8 : webkit2gtk3 (CESA-2021:4097)	high
154877	CentOS 8 : python3 (CESA-2021:4057)	medium
154874	CentOS 8 : curl (CESA-2021:4059)	high
154873	CentOS 8 : libsolv (CESA-2021:4060)	high
154872	CentOS 8 : flatpak (CESA-2021:4042)	high
154871	CentOS 8 : kernel (CESA-2021:4056)	high
154870	CentOS 8 : samba (CESA-2021:4058)	medium

Detections

Analytics

CentOS Local Security Checks Family for Nessus

low

high

medium

medium

medium

high

critical

critical

high

critical

medium

high

high

high

high

high

critical

high

high

critical

high

high

high

critical

medium

critical

medium

critical

high

medium

medium

medium

high

medium

critical

high

high

medium

high

high

medium

critical

critical

high

medium

high

high

high

high

medium