The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-09ba2aa171 advisory.

  - * New upstream version (92.0)  (FEDORA-2021-09ba2aa171)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-93a7c8b7c6 advisory.

  - An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and     source_hash URLs can gain full file system access as root on a salt minion. (CVE-2021-21996)

  - An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a     minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a     malicious actor to subvert the proper behaviour of the given minion software. (CVE-2021-22004)

  - In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module     that allows for local privilege escalation on a minion. The attack requires that a file is created with a     pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes     popen unsafely). (CVE-2021-31607)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-00ada7e667 advisory.

  - An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and     source_hash URLs can gain full file system access as root on a salt minion. (CVE-2021-21996)

  - An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a     minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a     malicious actor to subvert the proper behaviour of the given minion software. (CVE-2021-22004)

  - In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module     that allows for local privilege escalation on a minion. The attack requires that a file is created with a     pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes     popen unsafely). (CVE-2021-31607)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5fa81a2b04 advisory.

  - vim is vulnerable to Heap-based Buffer Overflow (CVE-2021-3770)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-74b76e593a advisory.

  - - New upstream update (91.0.1) - Fixes font crashes (https://bugzilla.mozilla.org/1726515)     (FEDORA-2021-74b76e593a)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-ede783f2b6 advisory.

  - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote     attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted     file into the lib/common/shapes.c component. (CVE-2020-18032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 34 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5fb7be1fbf advisory.

  - Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote     attackers to execute arbitrary code or cause a denial of service (application crash) by loading a crafted     file into the lib/common/shapes.c component. (CVE-2020-18032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5aaebdae8e advisory.

  - In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module     that allows for local privilege escalation on a minion. The attack requires that a file is created with a     pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes     popen unsafely). (CVE-2021-31607)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5ed46601f6 advisory.

  - - New upstream version (88.0) (FEDORA-2021-5ed46601f6)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-be62be8c7c advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-619711d709 advisory.

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur     11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes     12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
    (CVE-2020-27918)

  - Clear History and Website Data did not clear the history. The issue was addressed with improved data     deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update     2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete browsing     history. (CVE-2020-29623)

  - This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content     may violate iframe sandboxing policy. (CVE-2021-1765)

  - A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4     and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2021-1789)

  - A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big     Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS     14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access restricted ports on     arbitrary servers. (CVE-2021-1799)

  - This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4     and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy. (CVE-2021-1801)

  - A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2,     Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote     attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may     have been actively exploited.. (CVE-2021-1870)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d97bc581be advisory.

  - models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP     metadata entries. (CVE-2021-29421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-662680e477 advisory.

  - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an     attacker who can convince a victim to install a seemingly verifiable package, whose signature header was     modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is     to data integrity, confidentiality, and system availability. (CVE-2021-20271)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-1a8e93a285 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-87e26421fb advisory.

  - Update to upstream 20210315 release  ----  Update to upstream 20210208 release:  * rtl_bt: Updates for     RTL8822C, RTL8821C, added RTL8852A * Link Cypress brcmfmac firmwares to old brcm location * brcm NVRAM     updates for Raspberry Pi, added 96boards Rock960 * QCom SM8250 (SD865) firmware for Compute, Audio DSPs,     Adreno a650, venus VPU-1.0 * i915: Added firmware for DG1, ADL-S * Uodated bluetooth firmware for Intel     Bluetooth AX200/201/210 * rtw88: RTL8821C: Update firmware to v24.8 * New MT7921 firmware * Mellanox: Add     new mlxsw_spectrum firmware xx.2008.2304  (FEDORA-2021-87e26421fb)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-7d86bec29e advisory.

  - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it     allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the     security controls. This occurs for certain uri_whitespace configuration settings. (CVE-2020-25097)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-76f09062a7 advisory.

  - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it     allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbidden by the     security controls. This occurs for certain uri_whitespace configuration settings. (CVE-2020-25097)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-2306e89112 advisory.

  - An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in     the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment     size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is     enabled, aka CID-d8861bab48b6. (CVE-2021-29264)

  - An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does     not properly validate certain data sizes, aka CID-0217ed2848e8. (CVE-2021-29646)

  - An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows     attackers to obtain sensitive information from kernel memory because of a partially uninitialized data     structure, aka CID-50535249f624. (CVE-2021-29647)

  - An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider     that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF),     which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or     check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245. (CVE-2021-29648)

  - An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a     copy_process() memory leak, related to a lack of cleanup steps in kernel/usermode_driver.c and     kernel/bpf/preload/bpf_preload_kern.c, aka CID-f60a85cad677. (CVE-2021-29649)

  - An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to     cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h     lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf.
    (CVE-2021-29650)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-6b0f287b8b advisory.

  - An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in     the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment     size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is     enabled, aka CID-d8861bab48b6. (CVE-2021-29264)

  - An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does     not properly validate certain data sizes, aka CID-0217ed2848e8. (CVE-2021-29646)

  - An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows     attackers to obtain sensitive information from kernel memory because of a partially uninitialized data     structure, aka CID-50535249f624. (CVE-2021-29647)

  - An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider     that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF),     which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or     check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245. (CVE-2021-29648)

  - An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a     copy_process() memory leak, related to a lack of cleanup steps in kernel/usermode_driver.c and     kernel/bpf/preload/bpf_preload_kern.c, aka CID-f60a85cad677. (CVE-2021-29649)

  - An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to     cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h     lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf.
    (CVE-2021-29650)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-f3ebd7554c advisory.

  - radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in     parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section. (CVE-2020-16269)

  - radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in     r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in     IMAGE_DIRECTORY_ENTRY_SECURITY. (CVE-2020-17487)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-c93a3a5d3f advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-141d8640ce advisory.

  - Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21191)

  - Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21192)

  - Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21193)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4bf9909a76 advisory.

  - models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP     metadata entries. (CVE-2021-29421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-dc534847b2 advisory.

  - ATasm 1.06 has a stack-based buffer overflow in the to_comma() function in asm.c via a crafted .m65 file.
    (CVE-2019-19785)

  - ATasm 1.06 has a stack-based buffer overflow in the parse_expr() function in setparse.c via a crafted .m65     file. (CVE-2019-19786)

  - ATasm 1.06 has a stack-based buffer overflow in the get_signed_expression() function in setparse.c via a     crafted .m65 file. (CVE-2019-19787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-3b67623d93 advisory.

  - Mediainfo before version 20.08 has a heap buffer overflow vulnerability via     MediaInfoLib::File_Gxf::ChooseParser_ChannelGrouping. (CVE-2020-26797)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c314017fcc advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2024803354 advisory.

  - decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer,     with a resultant invalid free or segmentation fault, via malformed gzip data. (CVE-2021-28831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-f347d1c866 advisory.

  - update to version 1.1.1k  (FEDORA-2021-f347d1c866)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-e7a8e79fa8 advisory.

  - xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service     (segmentation fault) via a crafted UTF-8 combining character sequence. (CVE-2021-27135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-89cb264e4d advisory.

  - Fixed cname handling in TLS certificate verification (FEDORA-2021-89cb264e4d)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c07a9e79cf advisory.

  - Apache XmlGraphics Commons 2.4 is vulnerable to server-side request forgery, caused by improper input     validation by the XMPParser. By using a specially-crafted argument, an attacker could exploit this     vulnerability to cause the underlying server to make arbitrary GET requests. (CVE-2020-11988)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2e4c3d5a9d advisory.

  - A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way     RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS     replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with     arbitrary data in a heap memory segment, possibly executing code on the machine. The highest threat from     this vulnerability is to data confidentiality and integrity as well as system availability.
    (CVE-2020-25681)

  - A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq     extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who     can create valid DNS replies, could use this flaw to cause an overflow with arbitrary data in a heap-     allocated memory, possibly executing code on the machine. The flaw is in the rfc1035.c:extract_name()     function, which writes data to the memory pointed by name assuming MAXDNAME*2 bytes are available in the     buffer. However, in some code execution paths, it is possible extract_name() gets passed an offset from     the base buffer, thus reducing, in practice, the number of available bytes that can be written in the     buffer. The highest threat from this vulnerability is to data confidentiality and integrity as well as     system availability. (CVE-2020-25682)

  - A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq     when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create     valid DNS replies, could use this flaw to cause an overflow in a heap-allocated memory. This flaw is     caused by the lack of length checks in rfc1035.c:extract_name(), which could be abused to make the code     execute memcpy() with a negative size in get_rdata() and cause a crash in dnsmasq, resulting in a denial     of service. The highest threat from this vulnerability is to system availability. (CVE-2020-25683)

  - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq     checks in the forward.c:reply_query() if the reply destination address/port is used by the pending     forwarded queries. However, it does not use the address/port to retrieve the exact forwarded query,     substantially reducing the number of attempts an attacker on the network would have to perform to forge a     reply and get it accepted by dnsmasq. This issue contrasts with RFC5452, which specifies a query's     attributes that all must be used to match a reply. This flaw allows an attacker to perform a DNS Cache     Poisoning attack. If chained with CVE-2020-25685 or CVE-2020-25686, the attack complexity of a successful     attack is reduced. The highest threat from this vulnerability is to data integrity. (CVE-2020-25684)

  - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq     checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a     weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is compiled without DNSSEC, SHA-1     when it is) this flaw allows an off-path attacker to find several different domains all having the same     hash, substantially reducing the number of attempts they would have to perform to forge a reply and get it     accepted by dnsmasq. This is in contrast with RFC5452, which specifies that the query name is one of the     attributes of a query that must be used to match a reply. This flaw could be abused to perform a DNS Cache     Poisoning attack. If chained with CVE-2020-25684 the attack complexity of a successful attack is reduced.
    The highest threat from this vulnerability is to data integrity. (CVE-2020-25685)

  - A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an     existing pending request for the same name and forwards a new request. By default, a maximum of 150     pending queries can be sent to upstream servers, so there can be at most 150 queries for the same name.
    This flaw allows an off-path attacker on the network to substantially reduce the number of attempts that     it would have to perform to forge a reply and have it accepted by dnsmasq. This issue is mentioned in the     Birthday Attacks section of RFC5452. If chained with CVE-2020-25684, the attack complexity of a     successful attack is reduced. The highest threat from this vulnerability is to data integrity.
    (CVE-2020-25686)

  - A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq     when DNSSEC is enabled and before it validates the received DNS entries. This flaw allows a remote     attacker, who can create valid DNS replies, to cause an overflow in a heap-allocated memory. This flaw is     caused by the lack of length checks in rfc1035.c:extract_name(), which could be abused to make the code     execute memcpy() with a negative size in sort_rrset() and cause a crash in dnsmasq, resulting in a denial     of service. The highest threat from this vulnerability is to system availability. (CVE-2020-25687)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4740239e28 advisory.

  - Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21159, CVE-2021-21161)

  - Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21160)

  - Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21162)

  - Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote     attacker to leak cross-origin data via a crafted HTML page and a malicious server. (CVE-2021-21163)

  - Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a     remote attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-21164)

  - Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit     heap corruption via a crafted HTML page. (CVE-2021-21165, CVE-2021-21166)

  - Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21167)

  - Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    (CVE-2021-21168)

  - Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to     potentially perform out of bounds memory access via a crafted HTML page. (CVE-2021-21169)

  - Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had     compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    (CVE-2021-21170)

  - Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed     a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (CVE-2021-21171)

  - Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72     allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (CVE-2021-21172)

  - Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a     remote attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-21173)

  - Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker     to bypass navigation restrictions via a crafted HTML page. (CVE-2021-21174)

  - Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-21175)

  - Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (CVE-2021-21176)

  - Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    (CVE-2021-21177)

  - Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72     allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
    (CVE-2021-21178)

  - Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote     attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21179)

  - Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21180)

  - Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
    (CVE-2021-21181)

  - Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML     page. (CVE-2021-21182)

  - Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker to leak cross-origin data via a crafted HTML page. (CVE-2021-21183, CVE-2021-21184)

  - Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker     who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome     Extension. (CVE-2021-21185)

  - Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an     attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.
    (CVE-2021-21186)

  - Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker to perform domain spoofing via IDN homographs via a crafted domain name. (CVE-2021-21187)

  - Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-21188)

  - Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote     attacker to bypass navigation restrictions via a crafted HTML page. (CVE-2021-21189)

  - Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted PDF file. (CVE-2021-21190)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-90e915cc4f advisory.

  - In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run     system commands without any output or errors. With this, exploits can be injected in a number of     scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd     party .cf files from trusted places. (CVE-2020-1946)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-2761b54dff advisory.

  - Fix updating and support of legacy javascript extensions.  ----  Update to 2.53.7  Enable support for     module scripts. (To turn it off, toggle dom.moduleScripts.enabled in about:config).  For sending mail,     now Thunderbird is advertised in User-Agent header instead of Firefox (if any).  Some performance     fixes, including from upcoming releases. (FEDORA-2021-2761b54dff)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-cab5c9befb advisory.

  - curl 7.1.1 to and including 7.75.0 is vulnerable to an Exposure of Private Personal Information to an     Unauthorized Actor by leaking credentials in the HTTP Referer: header. libcurl does not strip off user     credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing     HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second     HTTP request. (CVE-2021-22876)

  - curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a     connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl     can confuse session tickets arriving from the HTTPS proxy but work as if they arrived from the remote     server and then wrongly short-cut the host handshake. When confusing the tickets, a HTTPS proxy can     trick libcurl to use the wrong session ticket resume for the host and thereby circumvent the server TLS     certificate check and make a MITM attack to be possible to perform unnoticed. Note that such a malicious     HTTPS proxy needs to provide a certificate that curl will accept for the MITMed server for an attack to     work - unless curl has been told to ignore the server certificate check. (CVE-2021-22890)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-864dc37032 advisory.

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur     11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes     12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
    (CVE-2020-27918)

  - Clear History and Website Data did not clear the history. The issue was addressed with improved data     deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update     2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete browsing     history. (CVE-2020-29623)

  - This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content     may violate iframe sandboxing policy. (CVE-2021-1765)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4     and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2021-1788)

  - A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4     and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code     execution. (CVE-2021-1789)

  - A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big     Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS     14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access restricted ports on     arbitrary servers. (CVE-2021-1799)

  - This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur     11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4     and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy. (CVE-2021-1801)

  - A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and     iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2021-1844)

  - A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2,     Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote     attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may     have been actively exploited.. (CVE-2021-1870, CVE-2021-1871)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5697574fd1 advisory.

  - Fixed cname handling in TLS certificate verification (FEDORA-2021-5697574fd1)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5a4377797c advisory.

  - In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run     system commands without any output or errors. With this, exploits can be injected in a number of     scenarios. In addition to upgrading to SA version 3.4.5, users should only use update channels or 3rd     party .cf files from trusted places. (CVE-2020-1946)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-8bcfa50520 advisory.

  - The 5.11.12 stable kernel update contains a number of important fixes across the tree.
    (FEDORA-2021-8bcfa50520)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-29b96724c5 advisory.

  - 0.103.2 (#1947267) https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html     (FEDORA-2021-29b96724c5)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-596fc11138 advisory.

  - Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can     lead to read and write arbitrary memory values. (CVE-2021-20307)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-57a7ba61f8 advisory.

  - An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL     pointer dereference for certain accesses to the SynIC Hyper-V context, aka CID-919f4ebc5987.
    (CVE-2021-30178)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-da3784629e advisory.

  - Update to 1.6.14  https://mosquitto.org/blog/2021/03/version-2-0-9-released/ (FEDORA-2021-da3784629e)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-65100169e4 advisory.

  - Update to 1.6.14  https://mosquitto.org/blog/2021/03/version-2-0-9-released/ (FEDORA-2021-65100169e4)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5497f7409b advisory.

  - Update to 2.06~rc1 to fix a bunch of CVEs (FEDORA-2021-5497f7409b)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-d0cc9a393f advisory.

  - This update disallows use of IP addresses with leading zeroes in the octet values, which could have been     interpreted ambiguously as either octal or decimal values. (FEDORA-2021-d0cc9a393f)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-1c170a7c7c advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-33a1b73e48 advisory.

  - Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the     NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to     cause the underlying server to make arbitrary GET requests. (CVE-2020-11987)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-601ee898f7 advisory.

  - Upgrade to upstream security release 3.7.3  (FEDORA-2021-601ee898f7)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
153212	Fedora 34 : firefox (2021-09ba2aa171)	high
153200	Fedora 33 : salt (2021-93a7c8b7c6)	high
153199	Fedora 34 : salt (2021-00ada7e667)	high
153093	Fedora 34 : 2:vim (2021-5fa81a2b04)	critical
152831	Fedora 34 : firefox (2021-74b76e593a)	high
149990	Fedora 33 : graphviz (2021-ede783f2b6)	high
149989	Fedora 34 : graphviz (2021-5fb7be1fbf)	high
149414	Fedora 33 : salt (2021-5aaebdae8e)	high
148917	Fedora 33 : firefox (2021-5ed46601f6)	high
148805	Fedora 33 : perl-Net-Netmask (2021-be62be8c7c)	high
148804	Fedora 32 : webkit2gtk3 (2021-619711d709)	critical
148803	Fedora 32 : python-pikepdf (2021-d97bc581be)	high
148802	Fedora 32 : rpm (2021-662680e477)	high
148801	Fedora 33 : 2:samba / libldb (2021-1a8e93a285)	critical
148800	Fedora 32 : linux-firmware (2021-87e26421fb)	high
148799	Fedora 33 : 7:squid (2021-7d86bec29e)	high
148798	Fedora 32 : 7:squid (2021-76f09062a7)	high
148797	Fedora 33 : kernel / kernel-headers / kernel-tools (2021-2306e89112)	medium
148796	Fedora 32 : kernel / kernel-headers / kernel-tools (2021-6b0f287b8b)	medium
148795	Fedora 33 : radare2 (2021-f3ebd7554c)	high
148794	Fedora 32 : 2:samba / libldb (2021-c93a3a5d3f)	critical
148793	Fedora 32 : chromium (2021-141d8640ce)	high
148792	Fedora 33 : python-pikepdf (2021-4bf9909a76)	high
148791	Fedora 32 : atasm (2021-dc534847b2)	high
148790	Fedora 33 : libmediainfo / libzen / mediaconch / mediainfo (2021-3b67623d93)	critical
148789	Fedora 32 : perl-Net-Netmask (2021-c314017fcc)	high
148788	Fedora 32 : 1:busybox (2021-2024803354)	high
148787	Fedora 32 : 1:openssl (2021-f347d1c866)	high
148786	Fedora 33 : xterm (2021-e7a8e79fa8)	critical
148785	Fedora 32 : exim (2021-89cb264e4d)	high
148784	Fedora 33 : xmlgraphics-commons (2021-c07a9e79cf)	high
148783	Fedora 32 : dnsmasq (2021-2e4c3d5a9d)	high
148782	Fedora 33 : chromium (2021-4740239e28)	high
148781	Fedora 33 : spamassassin (2021-90e915cc4f)	critical
148780	Fedora 33 : seamonkey (2021-2761b54dff)	high
148779	Fedora 33 : curl (2021-cab5c9befb)	medium
148778	Fedora 33 : webkit2gtk3 (2021-864dc37032)	critical
148777	Fedora 33 : exim (2021-5697574fd1)	high
148776	Fedora 32 : spamassassin (2021-5a4377797c)	critical
148744	Fedora 33 : kernel (2021-8bcfa50520)	high
148743	Fedora 32 : clamav (2021-29b96724c5)	high
148742	Fedora 32 : libpano13 (2021-596fc11138)	critical
148741	Fedora 32 : kernel (2021-57a7ba61f8)	medium
148736	Fedora 33 : mosquitto (2021-da3784629e)	high
148735	Fedora 32 : mosquitto (2021-65100169e4)	high
148734	Fedora 33 : 1:grub2 (2021-5497f7409b)	high
148733	Fedora 33 : perl-Net-CIDR-Lite (2021-d0cc9a393f)	high
148732	Fedora 33 : kernel / kernel-headers / kernel-tools (2021-1c170a7c7c)	critical
148731	Fedora 33 : batik (2021-33a1b73e48)	high
148730	Fedora 33 : singularity (2021-601ee898f7)	high

Fedora Local Security Checks Family for Nessus

high

high

high

critical

high

high

high

high

high

high

critical

high

high

critical

high

high

high

medium

medium

high

critical

high

high

high

critical

high

high

high

critical

high

high

high

high

critical

high

medium

critical

high

critical

high

high

critical

medium

high

high

high

high

critical

high

high