The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-2c4dc61810 advisory.

  - - Update to new upstream version (103.0) (FEDORA-2022-2c4dc61810)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a7fccdd7a0 advisory.

  - Update to 91.12.0 ; https://www.mozilla.org/en-US/security/advisories/mfsa2022-31/     (FEDORA-2022-a7fccdd7a0)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c69ef9c1dd advisory.

  - AMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to bypass their     retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can     hijack return instructions to achieve arbitrary speculative code execution under certain     microarchitecture-dependent conditions. (CVE-2022-29900)

  - Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their     retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can     hijack return instructions to achieve arbitrary speculative code execution under certain     microarchitecture-dependent conditions. (CVE-2022-29901)

  - AMD: CVE-2022-23816 AMD CPU Branch Type Confusion (CVE-2022-23816)

  - AMD: CVE-2022-23825 AMD CPU Branch Type Confusion (CVE-2022-23825)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-01b6d6f289 advisory.

  - Update to 91.11.0 (FEDORA-2022-01b6d6f289)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-59e474cd5c advisory.

  - - Update to new upstream (102.0) (FEDORA-2022-59e474cd5c)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-391e24517d advisory.

  - Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated     user to potentially enable information disclosure via local access. (CVE-2022-21123)

  - Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21125)

  - Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an     authenticated user to potentially enable information disclosure via local access. (CVE-2022-21166)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-080ea50338 advisory.

  - - New upstream update (101.0)  ----  - Fixed missing popups in some scenarios on Wayland     (https://bugzilla.mozilla.org/show_bug.cgi?id=1771104) (FEDORA-2022-080ea50338)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a5d22b5dd8 advisory.

  - Update to 91.10.0 See https://www.mozilla.org/en-US/security/advisories/mfsa2022-22/     (FEDORA-2022-a5d22b5dd8)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-443c5ec2dd advisory.

  - fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code     execution. git repositories can contain per-repository configuration that change the behavior of git,     including running arbitrary commands. When using the default configuration of fish, changing to a     directory automatically runs `git` commands in order to display information about the current repository     in the prompt. If an attacker can convince a user to change their current directory into one controlled by     the attacker, such as on a shared file system or extracted archive, fish will run arbitrary commands under     the attacker's control. This problem has been fixed in fish 3.4.0. Note that running git in these     directories, including using the git tab completion, remains a potential trigger for this issue. As a     workaround, remove the `fish_git_prompt` function from the prompt. (CVE-2022-20001)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d15a736748 advisory.

  - libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed     that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for     subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were     left out from the configuration match checks, making themmatch too easily. (CVE-2022-27782)

  - libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a     trailing dot.curl can be told to receive and send cookies. curl's cookie engine can bebuilt with or     without [Public Suffix List](https://publicsuffix.org/)awareness. If PSL support not provided, a more     rudimentary check exists to atleast prevent cookies from being set on TLDs. This check was broken if     thehost name in the URL uses a trailing dot.This can allow arbitrary sites to set cookies that then would     get sent to adifferent and unrelated site or domain. (CVE-2022-27779)

  - The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name     part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For     example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed     into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.
    (CVE-2022-27780)

  - Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-     text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in     the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around
    - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
    (CVE-2022-30115)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e56085ba31 advisory.

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length()     function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular     expressions caused by duplicate data transfers. (CVE-2022-1587)

  - An out-of-bounds read vulnerability was discovered in the PCRE2 library in the     compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property     matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully     read in case-less matching within JIT. (CVE-2022-1586)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-63b1344b6d advisory.

  - - New upstream version (100.0) (FEDORA-2022-63b1344b6d)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-e304fffd34 advisory.

  - global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This     vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible     remote execution (CVE-2022-1381)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774. (CVE-2022-1420)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-3781e69ebd advisory.

  - - Update to latest upstream (Firefox 99.0 & nss 3.77). (FEDORA-2022-3781e69ebd)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a9bd17092d advisory.

  - OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins     when more than one of them makes use of deferred authentication replies, which allows an external user to     be granted access with only partially correct credentials. (CVE-2022-0547)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-78b18981a6 advisory.

  - A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadXYCoord     coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted     gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger     this vulnerability. (CVE-2022-23803)

  - A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon ReadIJCoord     coordinate parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted     gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger     this vulnerability. (CVE-2022-23804)

  - A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber     parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or     excellon file can lead to code execution. An attacker can provide a malicious file to trigger this     vulnerability. (CVE-2022-23946)

  - A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon DCodeNumber     parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or     excellon file can lead to code execution. An attacker can provide a malicious file to trigger this     vulnerability. (CVE-2022-23947)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-48bf3cb1c4 advisory.

  - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. (CVE-2022-0393)

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0408, CVE-2022-0629)

  - Use After Free in GitHub repository vim/vim prior to 8.2. (CVE-2022-0413, CVE-2022-0443)

  - Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2. (CVE-2022-0417)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2. (CVE-2022-0554)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0572)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418. (CVE-2022-0685)

  - NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428. (CVE-2022-0696)

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. (CVE-2022-0714)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. (CVE-2022-0729)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-db30f1bd42 advisory.

  - In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to     a missing bounds check. This could lead to local information disclosure with no additional execution     privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-11Android ID: A-174302683 (CVE-2021-0561)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-63ca9a1129 advisory.

  - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436. (CVE-2022-0714)

  - Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. (CVE-2022-0729)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-62ac7b3744 advisory.

  - Security fix for https://www.gnutls.org/security-new.html#GNUTLS-SA-2022-01-17 (FEDORA-2022-62ac7b3744)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-8622ebdebb advisory.

  - Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. (CVE-2022-0629)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f044a6dede advisory.

  - - Updated to latest upstream (97.0) (FEDORA-2022-f044a6dede)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-da040e6b94 advisory.

  - A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is     a setuid tool designed to allow unprivileged users to run commands as privileged users according     predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly     and ends trying to execute environment variables as commands. An attacker can leverage this by crafting     environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully     executed the attack can cause a local privilege escalation given unprivileged users administrative rights     on the target machine. (CVE-2021-4034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-86b0833619 advisory.

  - * Update to latest version (96.0) (FEDORA-2022-86b0833619)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-48874a2744 advisory.

  - - Update to latest upstream (95.0) (FEDORA-2021-48874a2744)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-7f0e71beb1 advisory.

  - - New upstream version (94.0) (FEDORA-2021-7f0e71beb1)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-a87c34524c advisory.

  - - New upstream version (94.0) (FEDORA-2021-a87c34524c)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-968f57ec98 advisory.

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3778)

  - vim is vulnerable to Use After Free (CVE-2021-3796)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-116eff380f advisory.

  - Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-37975)

  - Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had     compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
    (CVE-2021-37974)

  - Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to     obtain potentially sensitive information from process memory via a crafted HTML page. (CVE-2021-37976)

  - Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37977)

  - Heap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-37978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-79cbbefebe advisory.

  - prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows     unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds     write. (CVE-2021-41864)

  - A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in     drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption).
    This vulnerability is similar with the older CVE-2019-18808. (CVE-2021-3744)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-60aef08c1b advisory.

  - - New upstream update (93.0) - Fixed NSS package dependency (NSS 3.70)  ----  - New upstream release     (93.0)    (FEDORA-2021-60aef08c1b)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-09ba2aa171 advisory.

  - * New upstream version (92.0)  (FEDORA-2021-09ba2aa171)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-93a7c8b7c6 advisory.

  - An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and     source_hash URLs can gain full file system access as root on a salt minion. (CVE-2021-21996)

  - An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a     minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a     malicious actor to subvert the proper behaviour of the given minion software. (CVE-2021-22004)

  - In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module     that allows for local privilege escalation on a minion. The attack requires that a file is created with a     pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes     popen unsafely). (CVE-2021-31607)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-00ada7e667 advisory.

  - An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and     source_hash URLs can gain full file system access as root on a salt minion. (CVE-2021-21996)

  - An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a     minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a     malicious actor to subvert the proper behaviour of the given minion software. (CVE-2021-22004)

  - In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module     that allows for local privilege escalation on a minion. The attack requires that a file is created with a     pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes     popen unsafely). (CVE-2021-31607)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5fa81a2b04 advisory.

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3770)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-74b76e593a advisory.

  - Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This     allowed for a header splitting attack against servers using HTTP/3. This vulnerability affects Firefox <     91.0.1 and Thunderbird < 91.0.1. (CVE-2021-29991)

- - New upstream update (91.0.1) - Fixes font crashes (https://bugzilla.mozilla.org/1726515) (FEDORA-2021-74b76e593a) Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-ede783f2b6 advisory.

  - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote     attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted     file into the lib/common/shapes.c component. (CVE-2020-18032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5fb7be1fbf advisory.

  - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote     attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted     file into the lib/common/shapes.c component. (CVE-2020-18032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5aaebdae8e advisory.

  - In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module     that allows for local privilege escalation on a minion. The attack requires that a file is created with a     pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes     popen unsafely). (CVE-2021-31607)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5ed46601f6 advisory.

  - - New upstream version (88.0) (FEDORA-2021-5ed46601f6)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-be62be8c7c advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-619711d709 advisory.

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur     11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes     12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
    (CVE-2020-27918)

  - Clear History and Website Data did not clear the history. The issue was addressed with improved data     deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update     2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete browsing     history. (CVE-2020-29623)

  - This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content     may violate iframe sandboxing policy. (CVE-2021-1765)

  - A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4     and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2021-1789)

  - A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big     Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS     14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access restricted ports on     arbitrary servers. (CVE-2021-1799)

  - This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4     and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy. (CVE-2021-1801)

  - A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2,     Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote     attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may     have been actively exploited.. (CVE-2021-1870)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d97bc581be advisory.

  - models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP     metadata entries. (CVE-2021-29421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-662680e477 advisory.

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-1a8e93a285 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-87e26421fb advisory.

  - Update to upstream 20210315 release  ----  Update to upstream 20210208 release:  * rtl_bt: Updates for     RTL8822C, RTL8821C, added RTL8852A * Link Cypress brcmfmac firmwares to old brcm location * brcm NVRAM     updates for Raspberry Pi, added 96boards Rock960 * QCom SM8250 (SD865) firmware for Compute, Audio DSPs,     Adreno a650, venus VPU-1.0 * i915: Added firmware for DG1, ADL-S * Uodated bluetooth firmware for Intel     Bluetooth AX200/201/210 * rtw88: RTL8821C: Update firmware to v24.8 * New MT7921 firmware * Mellanox: Add     new mlxsw_spectrum firmware xx.2008.2304  (FEDORA-2021-87e26421fb)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-7d86bec29e advisory.

  - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it     allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the     security controls. This occurs for certain uri_whitespace configuration settings. (CVE-2020-25097)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-76f09062a7 advisory.

  - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it     allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the     security controls. This occurs for certain uri_whitespace configuration settings. (CVE-2020-25097)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-2306e89112 advisory.

  - An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in     the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment     size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is     enabled, aka CID-d8861bab48b6. (CVE-2021-29264)

  - An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does     not properly validate certain data sizes, aka CID-0217ed2848e8. (CVE-2021-29646)

  - An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows     attackers to obtain sensitive information from kernel memory because of a partially uninitialized data     structure, aka CID-50535249f624. (CVE-2021-29647)

  - An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider     that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF),     which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or     check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245. (CVE-2021-29648)

  - An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a     copy_process() memory leak, related to a lack of cleanup steps in kernel/usermode_driver.c and     kernel/bpf/preload/bpf_preload_kern.c, aka CID-f60a85cad677. (CVE-2021-29649)

  - An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to     cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h     lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf.
    (CVE-2021-29650)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-6b0f287b8b advisory.

  - An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in     the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment     size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is     enabled, aka CID-d8861bab48b6. (CVE-2021-29264)

  - An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does     not properly validate certain data sizes, aka CID-0217ed2848e8. (CVE-2021-29646)

  - An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows     attackers to obtain sensitive information from kernel memory because of a partially uninitialized data     structure, aka CID-50535249f624. (CVE-2021-29647)

  - An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider     that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF),     which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or     check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245. (CVE-2021-29648)

  - An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a     copy_process() memory leak, related to a lack of cleanup steps in kernel/usermode_driver.c and     kernel/bpf/preload/bpf_preload_kern.c, aka CID-f60a85cad677. (CVE-2021-29649)

  - An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to     cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h     lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf.
    (CVE-2021-29650)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
163751	Fedora 36 : firefox (2022-2c4dc61810)	high
163643	Fedora 36 : thunderbird (2022-a7fccdd7a0)	high
163090	Fedora 36 : kernel (2022-c69ef9c1dd)	medium
162615	Fedora 36 : thunderbird (2022-01b6d6f289)	high
162613	Fedora 36 : firefox (2022-59e474cd5c)	high
162339	Fedora 36 : kernel (2022-391e24517d)	medium
161829	Fedora 36 : firefox (2022-080ea50338)	high
161788	Fedora 36 : thunderbird (2022-a5d22b5dd8)	high
161281	Fedora 36 : fish (2022-443c5ec2dd)	high
161149	Fedora 36 : curl (2022-d15a736748)	high
161148	Fedora 36 : pcre2 (2022-e56085ba31)	critical
160483	Fedora 35 : firefox (2022-63b1344b6d)	high
160101	Fedora 35 : 2:vim (2022-e304fffd34)	high
159634	Fedora 35 : firefox / nss (2022-3781e69ebd)	high
159010	Fedora 35 : openvpn (2022-a9bd17092d)	critical
158557	Fedora 35 : 1:kicad (2022-78b18981a6)	high
158443	Fedora 34 : 2:vim (2022-48bf3cb1c4)	high
158442	Fedora 35 : flac (2022-db30f1bd42)	medium
158441	Fedora 35 : 2:vim (2022-63ca9a1129)	high
158437	Fedora 35 : gnutls (2022-62ac7b3744)	high
158257	Fedora 35 : 2:vim (2022-8622ebdebb)	high
157888	Fedora 35 : firefox (2022-f044a6dede)	high
157153	Fedora 35 : polkit (2022-da040e6b94)	high
156741	Fedora 35 : firefox (2022-86b0833619)	high
155960	Fedora 35 : firefox (2021-48874a2744)	high
154857	Fedora 34 : firefox (2021-7f0e71beb1)	high
154839	Fedora 35 : firefox (2021-a87c34524c)	high
154184	Fedora 34 : 2:vim (2021-968f57ec98)	high
154180	Fedora 34 : chromium (2021-116eff380f)	high
154140	Fedora 35 : kernel (2021-79cbbefebe)	high
154065	Fedora 35 : firefox (2021-60aef08c1b)	high
153212	Fedora 34 : firefox (2021-09ba2aa171)	high
153200	Fedora 33 : salt (2021-93a7c8b7c6)	high
153199	Fedora 34 : salt (2021-00ada7e667)	high
153093	Fedora 34 : 2:vim (2021-5fa81a2b04)	high
152831	Fedora 34 : firefox (2021-74b76e593a)	high
149990	Fedora 33 : graphviz (2021-ede783f2b6)	high
149989	Fedora 34 : graphviz (2021-5fb7be1fbf)	high
149414	Fedora 33 : salt (2021-5aaebdae8e)	high
148917	Fedora 33 : firefox (2021-5ed46601f6)	high
148805	Fedora 33 : perl-Net-Netmask (2021-be62be8c7c)	high
148804	Fedora 32 : webkit2gtk3 (2021-619711d709)	critical
148803	Fedora 32 : python-pikepdf (2021-d97bc581be)	high
148802	Fedora 32 : rpm (2021-662680e477)	high
148801	Fedora 33 : 2:samba / libldb (2021-1a8e93a285)	high
148800	Fedora 32 : linux-firmware (2021-87e26421fb)	high
148799	Fedora 33 : 7:squid (2021-7d86bec29e)	high
148798	Fedora 32 : 7:squid (2021-76f09062a7)	high
148797	Fedora 33 : kernel / kernel-headers / kernel-tools (2021-2306e89112)	medium
148796	Fedora 32 : kernel / kernel-headers / kernel-tools (2021-6b0f287b8b)	medium

Fedora Local Security Checks Family for Nessus

high

high

medium

high

high

medium

high

high

high

high

critical

high

high

high

critical

high

high

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

critical

high

high

high

high

high

high

medium

medium