The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2363 advisory.

  - gupnp: allows DNS rebinding which could result in tricking browser into triggering actions against local     UPnP services (CVE-2021-33516)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2033 advisory.

  - A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver     which can lead to a local privilege escalation. The highest threat from this vulnerability is to data     confidentiality and integrity as well as system availability. (CVE-2021-3472)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2147 advisory.

  - An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has     an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow     could potentially lead to memory corruption. (CVE-2021-27219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2323 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1512 advisory.

  - A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before     9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a     suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute     arbitrary SQL as the owner of the function. (CVE-2019-10208)

  - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before     9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses     the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-     the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat     from this vulnerability is to data confidentiality and integrity as well as system availability.
    (CVE-2020-25694)

  - A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before     9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one     schema can execute arbitrary SQL functions under the identity of a superuser. The highest threat from this     vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2020-25695)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2314 advisory.

  - Integer overflow in the firmware for some Intel(R) Graphics Drivers for Windows * before version     26.20.100.7212 and before Linux kernel version 5.5 may allow a privileged user to potentially enable an     escalation of privilege via local access. (CVE-2020-12362)

  - Improper input validation in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and     before Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of service via     local access. (CVE-2020-12363)

  - Null pointer reference in some Intel(R) Graphics Drivers for Windows* before version 26.20.100.7212 and     before version Linux kernel version 5.5 may allow a privileged user to potentially enable a denial of     service via local access. (CVE-2020-12364)

  - An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-     of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre     mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects     pointer types that do not define a ptr_limit. (CVE-2020-27170)

  - There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common     function in drivers/tty/n_tty.c. (CVE-2020-8648)

  - An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free     during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.
    (CVE-2021-3347)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2322 advisory.

  - ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer     index is not validated. (CVE-2020-29443)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2313 advisory.

  - A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix     group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end     of the array in the case where a negative cache entry had been added to the mapping cache. This could     cause the calling code to return those values into the process token that stores the group membership for     a user. The highest threat from this vulnerability is to data confidentiality and integrity.
    (CVE-2021-20254)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:2206 advisory.

  - Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and     Firefox ESR < 78.11. (CVE-2021-29967)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2318 advisory.

  - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds     check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive)     file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The     highest threat from this vulnerability is to system availability. (CVE-2021-3504)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2357 advisory.

  - In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases     in the 4.0.x series or lower and releases in the 4.3.x series) are beyond their End-of-Life (EOL) and no     longer supported by ISC. From inspection it is clear that the defect is also present in releases from     those series, but they have not been officially tested for the vulnerability), The outcome of encountering     the defect while reading a lease that will trigger it varies, according to: the component being affected     (i.e., dhclient or dhcpd) whether the package was built as a 32-bit or 64-bit binary whether the compiler     flag -fstack-protection-strong was used when compiling In dhclient, ISC has not successfully reproduced     the error on a 64-bit system. However, on a 32-bit system it is possible to cause dhclient to crash when     reading an improper lease, which could cause network connectivity problems for an affected system due to     the absence of a running DHCP client process. In dhcpd, when run in DHCPv4 or DHCPv6 mode: if the dhcpd     server binary was built for a 32-bit architecture AND the -fstack-protection-strong flag was specified to     the compiler, dhcpd may exit while parsing a lease file containing an objectionable lease, resulting in     lack of service to clients. Additionally, the offending lease and the lease immediately following it in     the lease database may be improperly deleted. if the dhcpd server binary was built for a 64-bit     architecture OR if the -fstack-protection-strong compiler flag was NOT specified, the crash will not     occur, but it is possible for the offending lease and the lease which immediately followed it to be     improperly deleted. (CVE-2021-25217)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2328 advisory.

  - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16(). (CVE-2018-25011)

  - A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
    (CVE-2018-25014)

  - A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function     WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this     vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2020-36328)

  - A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being     killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as     well as system availability. (CVE-2020-36329)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:2233 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 (CVE-2021-29967)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2238 advisory.

  - polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (CVE-2021-3560)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2170 advisory.

  - glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to     32 bits (CVE-2021-27219)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2235 advisory.

  - pki-server: Dogtag installer pkispawn logs admin credentials into a world-readable log file     (CVE-2021-3551)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2037 advisory.

  - dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2036 advisory.

  - dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:1898 advisory.

  - python-lxml: mXSS due to the use of improper parser (CVE-2020-27783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2034 advisory.

  - redis: Integer overflow via STRALGO LCS command (CVE-2021-29477)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1585 advisory.

  - glibc: iconv program can hang when invoked with the -c option (CVE-2016-10228)

  - glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding     (CVE-2019-25013)

  - glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-     read (CVE-2019-9169)

  - glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which     could result in an infinite loop (CVE-2020-27618)

  - glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters (CVE-2021-3326)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1796 advisory.

  - golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652)

  - podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1879 advisory.

  - python: CRLF injection via HTTP request method in httplib/http.client (CVE-2020-26116)

  - python-lxml: mXSS due to the use of improper parser (CVE-2020-27783)

  - python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1746 advisory.

  - golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)

  - golang: cmd/go: packages using cgo can cause arbitrary code execution at build time (CVE-2021-3115)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1578 advisory.

  - kernel: memory leak in sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c (CVE-2019-18811)

  - kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver     (CVE-2019-19523)

  - kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver     (CVE-2019-19528)

  - kernel: possible out of bounds write in kbd_keycode of keyboard.c (CVE-2020-0431)

  - kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in     drivers/media/usb/gspca/ov519.c (CVE-2020-11608)

  - kernel: DoS by corrupting mountpoint reference counter (CVE-2020-12114)

  - kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362)

  - kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c (CVE-2020-12464)

  - kernel: buffer uses out of index in ext3/4 filesystem (CVE-2020-14314)

  - kernel: Use After Free vulnerability in cgroup BPF component (CVE-2020-14356)

  - kernel: NULL pointer dereference in serial8250_isa_init_ports function in     drivers/tty/serial/8250/8250_core.c (CVE-2020-15437)

  - kernel: umask not applied on filesystem without ACL support (CVE-2020-24394)

  - kernel: TOCTOU mismatch in the NFS client code (CVE-2020-25212)

  - kernel: incomplete permission checking for access to rbd devices (CVE-2020-25284)

  - kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c (CVE-2020-25285)

  - kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read overflow     (CVE-2020-25643)

  - kernel: perf_event_parse_addr_filter memory (CVE-2020-25704)

  - kernel: use-after-free in kernel midi subsystem (CVE-2020-27786)

  - kernel: child process is able to access parent mm through hfi dev file handle (CVE-2020-27835)

  - kernel: slab-out-of-bounds read in fbcon (CVE-2020-28974)

  - kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (CVE-2020-35508)

  - kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations (CVE-2020-36322)

  - kernel: use after free in tun_get_user of tun.c could lead to local escalation of privilege     (CVE-2021-0342)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1679 advisory.

  - bash: when effective UID is not equal to its real UID the saved UID is not dropped (CVE-2019-18276)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1972 advisory.

  - cmark-gfm: Exponential time to parse certain inputs could lead to DoS (CVE-2020-5238)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1675 advisory.

  - libdb: Denial of service in the Data Store component (CVE-2019-2708)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1608 advisory.

  - python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)

  - python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads     could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1758 advisory.

  - exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check (CVE-2019-17402)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1979 advisory.

  - squid: improper input validation may allow a trusted client to perform HTTP request smuggling     (CVE-2020-25097)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1574 advisory.

  - NetworkManager: Profile with match.path setting triggers crash (CVE-2021-20297)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1611 advisory.

  - systemd: Spoofing of XDG_SEAT allows for actions to be checked against allow_active instead of     allow_any (CVE-2019-3842)

  - systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits     (CVE-2020-13776)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1751 advisory.

  - mailman: arbitrary content injection via the options login page (CVE-2020-12108)

  - mailman: arbitrary content injection via the private archive login page (CVE-2020-15011)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1762 advisory.

  - QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure     (CVE-2020-11947)

  - QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c (CVE-2020-16092)

  - libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c (CVE-2020-25637)

  - QEMU: infinite loop in e1000e_write_packet_to_guest() in hw/net/e1000e_core.c (CVE-2020-25707)

  - QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c (CVE-2020-25723)

  - QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c (CVE-2020-27821)

  - QEMU: e1000e: infinite loop scenario in case of null packet descriptor (CVE-2020-28916)

  - CVE-2020-29130 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets (CVE-2020-29129)

  - CVE-2020-29129  QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets (CVE-2020-29130)

  - QEMU: ide: atapi: OOB access while processing read commands (CVE-2020-29443)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:1686 advisory.

  - wpa_supplicant: P2P group information processing vulnerability (CVE-2021-0326)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1702 advisory.

  - brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1881 advisory.

  - poppler: pdftohtml: access to uninitialized pointer could lead to DoS (CVE-2020-27778)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1723 advisory.

  - sudo: possible directory existence test due to race condition in sudoedit (CVE-2021-23239)

  - sudo: symbolic link attack in SELinux-enabled sudoedit (CVE-2021-23240)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1610 advisory.

  - curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set (CVE-2020-8231)

  - curl: FTP PASV command response can cause curl to connect to arbitrary host (CVE-2020-8284)

  - curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used     (CVE-2020-8285)

  - curl: Inferior OCSP verification (CVE-2020-8286)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1852 advisory.

  - ghostscript: use-after-free vulnerability in igc_reloc_struct_ptr() could result in DoS (CVE-2020-14373)

  - ghostscript: buffer overflow in lprn_is_black() in contrib/lips4/gdevlprn.c could result in a DoS     (CVE-2020-16287)

  - ghostscript: buffer overflow in pj_common_print_page() in devices/gdevpjet.c could result in a DoS     (CVE-2020-16288)

  - ghostscript: buffer overflow in cif_print_page() in devices/gdevcif.c could result in a DoS     (CVE-2020-16289)

  - ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a DoS     (CVE-2020-16290)

  - ghostscript: buffer overflow in contrib/gdevdj9.c could result in a DoS (CVE-2020-16291)

  - ghostscript: buffer overflow in mj_raster_cmd() in contrib/japanese/gdevmjc.c could result in a DoS     (CVE-2020-16292)

  - ghostscript: NULL pointer dereference in compose_group_nonknockout_nonblend_isolated_allmask_common() in     base/gxblend.c could result in a DoS (CVE-2020-16293)

  - ghostscript: buffer overflow in epsc_print_page() in devices/gdevepsc.c could result in a DoS     (CVE-2020-16294)

  - ghostscript: NULL pointer dereference in clj_media_size() in devices/gdevclj.c could result in a DoS     (CVE-2020-16295)

  - ghostscript: buffer overflow in GetNumWrongData() in contrib/lips4/gdevlips.c could result in a DoS     (CVE-2020-16296)

  - ghostscript: buffer overflow in FloydSteinbergDitheringC() in contrib/gdevbjca.c could result in a DoS     (CVE-2020-16297)

  - ghostscript: buffer overflow in mj_color_correct() in contrib/japanese/gdevmjc.c could result in a DoS     (CVE-2020-16298)

  - ghostscript: division by zero in bj10v_print_page() in contrib/japanese/gdev10v.c could result in a DoS     (CVE-2020-16299)

  - ghostscript: buffer overflow in tiff12_print_page() in devices/gdevtfnx.c could result in a DoS     (CVE-2020-16300)

  - ghostscript: buffer overflow in okiibm_print_page1() in devices/gdevokii.c could result in a DoS     (CVE-2020-16301)

  - ghostscript: buffer overflow in jetp3852_print_page() in devices/gdev3852.c could result in a privilege     escalation (CVE-2020-16302)

  - ghostscript: use-after-free in xps_finish_image_path() in devices/vector/gdevxps.c could result in a     privilege escalation (CVE-2020-16303)

  - ghostscript: buffer overflow in image_render_color_thresh() in base/gxicolor.c could result in a DoS     (CVE-2020-16304)

  - ghostscript: buffer overflow in pcx_write_rle() in contrib/japanese/gdev10v.c could result in a DoS     (CVE-2020-16305)

  - ghostscript: NULL pointer dereference in devices/gdevtsep.c could result in a DoS (CVE-2020-16306)

  - ghostscript: NULL pointer dereference in devices/vector/gdevtxtw.c and psi/zbfont.c could result in a DoS     (CVE-2020-16307)

  - ghostscript: buffer overflow in p_print_image() in devices/gdevcdj.c could result in a DoS     (CVE-2020-16308)

  - ghostscript: buffer overflow in lxm5700m_print_page() in devices/gdevlxm.c could result in a DoS     (CVE-2020-16309)

  - ghostscript: division by zero in dot24_print_page() in devices/gdevdm24.c could result in a DoS     (CVE-2020-16310)

  - ghostscript: buffer overflow in GetNumSameData() in contrib/lips4/gdevlips.c could result in a DoS     (CVE-2020-17538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1804 advisory.

  - libX11: Heap overflow in the X input method client (CVE-2020-14344)

  - xorg-x11-server: Out-of-bounds access in XkbSetNames function (CVE-2020-14345)

  - xorg-x11-server: Integer underflow in the X input extension protocol (CVE-2020-14346)

  - xorg-x11-server: Leak of uninitialized heap memory from the X server to clients in AllocatePixmap of     dix/pixmap.c (CVE-2020-14347)

  - xorg-x11-server: Out-of-bounds access in XkbSetMap function (CVE-2020-14360)

  - xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability (CVE-2020-14361)

  - xorg-x11-server: XRecordRegisterClients integer underflow privilege escalation vulnerability     (CVE-2020-14362)

  - libX11: integer overflow leads to double free in locale handling (CVE-2020-14363)

  - xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege escalation vulnerability     (CVE-2020-25712)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1620 advisory.

  - kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1789 advisory.

  - hostapd: UPnP SUBSCRIBE misbehavior in WPS AP (CVE-2020-12695)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1887 advisory.

  - dovecot: IMAP hibernation function allows mail access (CVE-2020-24386)

  - dovecot: Denial of service via mail MIME parsing (CVE-2020-25275)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1983 advisory.

  - slapi-nis: NULL dereference (DoS) with specially crafted Binding DN (CVE-2021-3480)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1678 advisory.

  - perl: heap-based buffer overflow in regular expression compiler leads to DoS (CVE-2020-10543)

  - perl: corruption of intermediate language state of compiled regular expression due to integer overflow     leads to DoS (CVE-2020-10878)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1744 advisory.

  - sane-backends: NULL pointer dereference in sanei_epson_net_read function (CVE-2020-12867)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1598 advisory.

  - bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or     RCE (CVE-2020-27153)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1846 advisory.

  - jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods     (CVE-2020-11023)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
150830	CentOS 8 : gupnp (CESA-2021:2363)	high
150774	CentOS 7 : xorg-x11-server (RHSA-2021:2033)	high
150773	CentOS 7 : glib2 (RHSA-2021:2147)	high
150772	CentOS 7 : 389-ds-base (RHSA-2021:2323)	medium
150771	CentOS 7 : postgresql (RHSA-2021:1512)	high
150770	CentOS 7 : kernel (RHSA-2021:2314)	high
150769	CentOS 7 : qemu-kvm (RHSA-2021:2322)	low
150767	CentOS 7 : samba (RHSA-2021:2313)	medium
150765	CentOS 7 : firefox (RHSA-2021:2206)	high
150764	CentOS 7 : hivex (RHSA-2021:2318)	medium
150763	CentOS 7 : dhcp (RHSA-2021:2357)	high
150762	CentOS 7 : qt5-qtimageformats (RHSA-2021:2328)	critical
150385	CentOS 8 : firefox (CESA-2021:2233)	high
150384	CentOS 8 : polkit (CESA-2021:2238)	high
150298	CentOS 8 : glib2 (CESA-2021:2170)	high
150297	CentOS 8 : pki-core:10.6 (CESA-2021:2235)	high
150065	CentOS 8 : dotnet3.1 (CESA-2021:2037)	high
150064	CentOS 8 : dotnet5.0 (CESA-2021:2036)	high
150045	CentOS 8 : python-lxml (CESA-2021:1898)	medium
150044	CentOS 8 : redis:6 (CESA-2021:2034)	high
150034	CentOS 8 : glibc (CESA-2021:1585)	critical
150033	CentOS 8 : container-tools:rhel8 (CESA-2021:1796)	medium
150032	CentOS 8 : python38:3.8 (CESA-2021:1879)	critical
150031	CentOS 8 : go-toolset:rhel8 (CESA-2021:1746)	high
149874	CentOS 8 : kernel (CESA-2021:1578)	high
149781	CentOS 8 : bash (CESA-2021:1679)	high
149780	CentOS 8 : pandoc (CESA-2021:1972)	medium
149779	CentOS 8 : libdb (CESA-2021:1675)	low
149778	CentOS 8 : python-cryptography (CESA-2021:1608)	critical
149777	CentOS 8 : exiv2 (CESA-2021:1758)	medium
149776	CentOS 8 : squid:4 (CESA-2021:1979)	high
149775	CentOS 8 : NetworkManager and libnma (CESA-2021:1574)	medium
149774	CentOS 8 : systemd (CESA-2021:1611)	high
149773	CentOS 8 : mailman:2.1 (CESA-2021:1751)	medium
149772	CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2021:1762)	medium
149771	CentOS 8 : wpa_supplicant (CESA-2021:1686)	high
149770	CentOS 8 : brotli (CESA-2021:1702)	medium
149769	CentOS 8 : poppler and evince (CESA-2021:1881)	high
149768	CentOS 8 : sudo (CESA-2021:1723)	high
149767	CentOS 8 : curl (CESA-2021:1610)	high
149766	CentOS 8 : ghostscript (CESA-2021:1852)	high
149765	CentOS 8 : userspace graphics, xorg-x11, and mesa (CESA-2021:1804)	high
149764	CentOS 8 : linux-firmware (CESA-2021:1620)	high
149763	CentOS 8 : gssdp and gupnp (CESA-2021:1789)	high
149762	CentOS 8 : dovecot (CESA-2021:1887)	medium
149761	CentOS 8 : idm:DL1 (CESA-2021:1983)	high
149759	CentOS 8 : perl (CESA-2021:1678)	high
149758	CentOS 8 : sane-backends (CESA-2021:1744)	medium
149757	CentOS 8 : bluez (CESA-2021:1598)	high
149756	CentOS 8 : idm:DL1 and idm:client (CESA-2021:1846)	medium

Detections

Analytics

CentOS Local Security Checks Family for Nessus

high

high

high

medium

high

high

low

medium

high

medium

high

critical

high

high

high

high

high

high

medium

high

critical

medium

critical

high

high

high

medium

low

critical

medium

high

medium

high

medium

medium

high

medium

high

high

high

high

high

high

high

medium

high

high

medium

high

medium