The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-dc1a4934a5 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-ef8c2acfce advisory.

  - A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP     LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names     containing '..' path components to access data outside the designated mailbox on the opposite end of the     synchronization channel. The highest threat from this vulnerability is to data confidentiality and     integrity. (CVE-2021-20247)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-9107eeb95c advisory.

  - encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write     access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character     sequence. (CVE-2021-26937)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-fba11d37ee advisory.

  - Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote     attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors     involving large management addresses and TLV boundaries. (CVE-2015-8011)

  - A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to     be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service.
    The highest threat from this vulnerability is to system availability. (CVE-2020-27827)

  - A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing     can allow a malicious user to send a specially crafted packet causing the resulting megaflow in the kernel     to be too wide, potentially causing a denial of service. The highest threat from this vulnerability is to     system availability. (CVE-2020-35498)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-0595625865 advisory.

  - BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG     features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed,     but a server can be rendered vulnerable by explicitly setting valid values for the tkey-gssapi-keytab or     tkey-gssapi-credentialconfiguration options. Although the default configuration is not vulnerable, GSS-     TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server     environments that combine BIND servers with Active Directory domain controllers. The most likely outcome     of a successful exploitation of the vulnerability is a crash of the named process. However, remote code     execution, while unproven, is theoretically possible. Affects: BIND 9.5.0 -> 9.11.27, 9.12.0 -> 9.16.11,     and versions BIND 9.11.3-S1 -> 9.11.27-S1 and 9.16.8-S1 -> 9.16.11-S1 of BIND Supported Preview Edition.
    Also release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch (CVE-2020-8625)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-28f97e232d advisory.

  - BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG     features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed,     but a server can be rendered vulnerable by explicitly setting valid values for the tkey-gssapi-keytab or     tkey-gssapi-credentialconfiguration options. Although the default configuration is not vulnerable, GSS-     TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server     environments that combine BIND servers with Active Directory domain controllers. The most likely outcome     of a successful exploitation of the vulnerability is a crash of the named process. However, remote code     execution, while unproven, is theoretically possible. Affects: BIND 9.5.0 -> 9.11.27, 9.12.0 -> 9.16.11,     and versions BIND 9.11.3-S1 -> 9.11.27-S1 and 9.16.8-S1 -> 9.16.11-S1 of BIND Supported Preview Edition.
    Also release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch (CVE-2020-8625)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-954ebabcf7 advisory.

  - A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP     LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names     containing '..' path components to access data outside the designated mailbox on the opposite end of the     synchronization channel. The highest threat from this vulnerability is to data confidentiality and     integrity. (CVE-2021-20247)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5e9894a0c5 advisory.

  - encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write     access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character     sequence. (CVE-2021-26937)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-7458e2d835 advisory.

  - When binding against a DN during authentication, the reply from 389-ds-base will be different whether the     DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in     the LDAP database. (CVE-2020-35518)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-e03b328043 advisory.

  - A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit     WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free. (CVE-2020-13558)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5756fbf8a6 advisory.

  - An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to     command injection via a crafted process name. This allows for a local privilege escalation by any user     able to create a files on the minion in a non-blacklisted directory. (CVE-2020-28243)

  - In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the     vmware.py files) does not always validate the SSL/TLS certificate. (CVE-2020-28972)

  - In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL     certificate is not always validated. (CVE-2020-35662)

  - In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to     run command against the salt master or minions.) (CVE-2021-3144)

  - An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can     result in salt.utils.thin.gen_thin() command injection because of different handling of single versus     double quotes. This is related to salt/utils/thin.py. (CVE-2021-3148)

  - An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a     shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.
    (CVE-2021-3197)

  - An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials     for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.
    (CVE-2021-25281)

  - An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method     is vulnerable to directory traversal. (CVE-2021-25282)

  - An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect     against server side template injection attacks. (CVE-2021-25283)

  - An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials     to the info or error log level. (CVE-2021-25284)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-904a2dbc0c advisory.

  - An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to     command injection via a crafted process name. This allows for a local privilege escalation by any user     able to create a files on the minion in a non-blacklisted directory. (CVE-2020-28243)

  - In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the     vmware.py files) does not always validate the SSL/TLS certificate. (CVE-2020-28972)

  - In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL     certificate is not always validated. (CVE-2020-35662)

  - In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to     run command against the salt master or minions.) (CVE-2021-3144)

  - An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can     result in salt.utils.thin.gen_thin() command injection because of different handling of single versus     double quotes. This is related to salt/utils/thin.py. (CVE-2021-3148)

  - An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a     shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.
    (CVE-2021-3197)

  - An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials     for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.
    (CVE-2021-25281)

  - An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method     is vulnerable to directory traversal. (CVE-2021-25282)

  - An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect     against server side template injection attacks. (CVE-2021-25283)

  - An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials     to the info or error log level. (CVE-2021-25284)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-3430f96019 advisory.

  - A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi     Direct) provision discovery requests. It could result in denial of service or other impact (potentially     execution of arbitrary code), for an attacker within radio range. (CVE-2021-27803)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-b1843407ca advisory.

  - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-9a0903469c advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e9478617ae advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-3286ac2acc advisory.

  - Update postgresql and libpq to the new upstream release. (FEDORA-2021-3286ac2acc)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-47f53a940a advisory.

  - An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory     accesses are bypassing the cache. This means that Xen needs to ensure that all writes (such as the ones     during scrubbing) have reached the memory before handing over the page to a guest. Unfortunately, the     operation to clean the cache is happening before checking if the page was scrubbed. Therefore there is no     guarantee when all the writes will reach the memory. (CVE-2021-26933)

  - An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation     (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration, but this     wasn't stated accordingly in its support status entry. (CVE-2021-26934)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-aa764a8531 advisory.

  - Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote     attacker to perform out of bounds memory access via a crafted HTML page. (CVE-2021-21149)

  - Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker     who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-21150)

  - Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to     potentially perform a sandbox escape via a crafted HTML page. (CVE-2021-21151)

  - Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker     to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21152)

  - Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote     attacker to potentially perform out of bounds memory access via a crafted HTML page. (CVE-2021-21153)

  - Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who     had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
    (CVE-2021-21154)

  - Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote     attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted     HTML page. (CVE-2021-21155)

  - Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to     potentially exploit heap corruption via a crafted script. (CVE-2021-21156)

  - Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker     to potentially exploit heap corruption via a crafted HTML page. (CVE-2021-21157)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-fb466fb623 advisory.

  - An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1.
    When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use     special elements such as ../ separators to reference binaries elsewhere on the system. This flaw allows     an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The     highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
    (CVE-2021-20206)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-7143aca8cb advisory.

  - An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to     the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be     encountered. In one case, an error encountered earlier might be discarded by later processing, resulting     in the caller assuming successful mapping, and hence subsequent operations trying to access space that     wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery     from the error. This affects drivers/block/xen-blkback/blkback.c. (CVE-2021-26930)

  - An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI     backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially     being at least under the influence of guests (such as out of memory conditions), it isn't correct to     assume a plain bug. Memory allocations potentially causing such crashes occur only when Linux is running     in PV mode, though. This affects drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c.
    (CVE-2021-26931)

  - An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations     often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success     or failure of each one is reported to the backend driver, and the backend driver then loops over the     results, performing follow-up actions based on the success or failure of each operation. Unfortunately,     when running in PV mode, the Linux backend drivers mishandle this: Some errors are ignored, effectively     implying their success from the success of related batch elements. In other cases, errors resulting from     one batch element lead to further batch elements not being inspected, and hence successful ones to not be     possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are     vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch/*/xen/p2m.c and     drivers/xen/gntdev.c. (CVE-2021-26932)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4e40ccb5e6 advisory.

  - Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead     to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near     NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments). (CVE-2020-36148)

  - Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead     to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near     NULL pointer overwrite in case of no memory restrictions (e.g. in embedded environments). (CVE-2020-36149)

  - Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap     buffer overflow and access to unallocated memory block. (CVE-2020-36150)

  - Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1     will lead to heap buffer overflow and overwriting large memory block. (CVE-2020-36151)

  - Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to     execute arbitrary code via a crafted SOFA. (CVE-2020-36152)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-4c819bf1ad advisory.

  - An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory     accesses are bypassing the cache. This means that Xen needs to ensure that all writes (such as the ones     during scrubbing) have reached the memory before handing over the page to a guest. Unfortunately, the     operation to clean the cache is happening before checking if the page was scrubbed. Therefore there is no     guarantee when all the writes will reach the memory. (CVE-2021-26933)

  - An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation     (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration, but this     wasn't stated accordingly in its support status entry. (CVE-2021-26934)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-e440aa9307 advisory.

  - - New upstream version (86.0) (FEDORA-2021-e440aa9307)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2021-3db6876545 advisory.

  - Update to the latest upstream release. (FEDORA-2021-3db6876545)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-20b9876f11 advisory.

  - rygel 0.40.1 release. For details, see https://mail.gnome.org/archives/ftp-release-     list/2021-February/msg00105.html  (FEDORA-2021-20b9876f11)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8d45d297c6 advisory.

  - An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to     the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be     encountered. In one case, an error encountered earlier might be discarded by later processing, resulting     in the caller assuming successful mapping, and hence subsequent operations trying to access space that     wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery     from the error. This affects drivers/block/xen-blkback/blkback.c. (CVE-2021-26930)

  - An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI     backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially     being at least under the influence of guests (such as out of memory conditions), it isn't correct to     assume a plain bug. Memory allocations potentially causing such crashes occur only when Linux is running     in PV mode, though. This affects drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c.
    (CVE-2021-26931)

  - An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations     often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success     or failure of each one is reported to the backend driver, and the backend driver then loops over the     results, performing follow-up actions based on the success or failure of each operation. Unfortunately,     when running in PV mode, the Linux backend drivers mishandle this: Some errors are ignored, effectively     implying their success from the success of related batch elements. In other cases, errors resulting from     one batch element lead to further batch elements not being inspected, and hence successful ones to not be     possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are     vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch/*/xen/p2m.c and     drivers/xen/gntdev.c. (CVE-2021-26932)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-907f3bacae advisory.

  - Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to     remote code execution in certain Python applications that accept floating-point numbers as untrusted     input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used     unsafely. (CVE-2021-3177)

  - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-7c1bb32d13 advisory.

  - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-48ca39b6ad advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-1721)

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26701. (CVE-2021-24112)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-a639ec5d6e advisory.

  - Prosody 0.11.8 ==============  This is a new minor release for the 0.11.x stable branch, it includes bug     fixes and performance improvements!  Upstream would like to thank the Jitsi folks for helping to improve     websocket performance in this and the previous release.  This release also fixes a security issue, where     channel binding, which connects the authentication layer (i.e. SASL) with the security layer (i.e. TLS) to     detect man-in-the-middle attacks, could be used on connections encrypted with TLS 1.3, despite the holy     texts declaring this undefined.   Security --------    * mod_saslauth: Disable tls-unique channel     binding with TLS 1.3 (#1542)   Fixes and improvements ----------------------    * net.websocket.frames:
    Improve websocket masking performance by using the new util.strbitop   * util.strbitop: Library for     efficient bitwise operations on strings   Minor changes -------------    * MUC: Correctly advertise     whether the subject can be changed (#1155)   * MUC: Preserve disco node attribute (or lack thereof) in     responses (#1595)   * MUC: Fix logic bug causing unnecessary presence to be sent (#1615)   * mod_bosh: Fix     error if client tries to connect to component (#425)   * mod_bosh: Pick out the wait before checking it     instead of earlier   * mod_pep: Advertise base PubSub feature (#1632)   * mod_pubsub: Fix notification     stanza type setting (#1605)   * mod_s2s: Prevent keepalives before client has established a stream   *     net.adns: Fix bug that sent empty DNS packets (#1619)   * net.http.server: Dont send Content-Length on     1xx/204 responses (#1596)   * net.websocket.frames: Fix length calculation bug (#1598)   * util.dbuffer:
    Make length API in line with Lua strings   * util.dbuffer: Optimize substring operations   * util.debug:
    Fix locals being reported under wrong stack frame in some cases   * util.dependencies: Fix check for Lua     bitwise operations library (#1594)   * util.interpolation: Fix combination of filters and fallback values     #1623   * util.promise: Preserve tracebacks   * util.stanza: Reject ASCII control characters (#1606)   *     timers: Ensure timers cant block other processing (#1620) (FEDORA-2021-a639ec5d6e)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c3d7fc8949 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-1721)

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26701. (CVE-2021-24112)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5522a34aa0 advisory.

  - Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection     or crafted capture file (CVE-2021-22173)

  - Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or     crafted capture file (CVE-2021-22174)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-e3c95619c1 advisory.

  - radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in     parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section. (CVE-2020-16269)

  - radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in     r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in     IMAGE_DIRECTORY_ENTRY_SECURITY. (CVE-2020-17487)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-ed9c13a1d5 advisory.

  - An error in the read_metadata_vorbiscomment_() function (src/libFLAC/stream_decoder.c) in FLAC version     1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file. (CVE-2017-6888)

  - In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a     heap buffer overflow. This could lead to remote information disclosure with no additional execution     privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android     ID: A-156076070 (CVE-2020-0499)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-7d3a9004e2 advisory.

  - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-11e4ae96a7 advisory.

  - A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates     the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.
    (CVE-2021-3406)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5c01339c12 advisory.

  - A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates     the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.
    (CVE-2021-3406)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-f8368da9af advisory.

  - **Horde_Text_Filter 2.3.7**  * [mjr] SECURITY: Fix XSS via Text2Html filter (Reported by: Alex     Birnberg<birnbergalex@gmail.com>, **CVE 2021-26929**)   (FEDORA-2021-f8368da9af)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-3352c1c802 advisory.

  - Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to     remote code execution in certain Python applications that accept floating-point numbers as untrusted     input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used     unsafely. (CVE-2021-3177)

  - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-ee913722db advisory.

  - A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could     trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to     resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.
    (CVE-2020-8277)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2e2fc2eac6 advisory.

  - WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer     overflow in a malloc argument. NOTE: some third-parties claim that there are later unofficial releases     through 5.3.2, which are also affected. (CVE-2020-35738)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-cbfa969c98 advisory.

  - **Horde_Text_Filter 2.3.7**  * [mjr] SECURITY: Fix XSS via Text2Html filter (Reported by: Alex     Birnberg<birnbergalex@gmail.com>, **CVE 2021-26929**)   (FEDORA-2021-cbfa969c98)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-54d3af6388 advisory.

  - Prosody 0.11.8 ==============  This is a new minor release for the 0.11.x stable branch, it includes bug     fixes and performance improvements!  Upstream would like to thank the Jitsi folks for helping to improve     websocket performance in this and the previous release.  This release also fixes a security issue, where     channel binding, which connects the authentication layer (i.e. SASL) with the security layer (i.e. TLS) to     detect man-in-the-middle attacks, could be used on connections encrypted with TLS 1.3, despite the holy     texts declaring this undefined.   Security --------    * mod_saslauth: Disable tls-unique channel     binding with TLS 1.3 (#1542)   Fixes and improvements ----------------------    * net.websocket.frames:
    Improve websocket masking performance by using the new util.strbitop   * util.strbitop: Library for     efficient bitwise operations on strings   Minor changes -------------    * MUC: Correctly advertise     whether the subject can be changed (#1155)   * MUC: Preserve disco node attribute (or lack thereof) in     responses (#1595)   * MUC: Fix logic bug causing unnecessary presence to be sent (#1615)   * mod_bosh: Fix     error if client tries to connect to component (#425)   * mod_bosh: Pick out the wait before checking it     instead of earlier   * mod_pep: Advertise base PubSub feature (#1632)   * mod_pubsub: Fix notification     stanza type setting (#1605)   * mod_s2s: Prevent keepalives before client has established a stream   *     net.adns: Fix bug that sent empty DNS packets (#1619)   * net.http.server: Dont send Content-Length on     1xx/204 responses (#1596)   * net.websocket.frames: Fix length calculation bug (#1598)   * util.dbuffer:
    Make length API in line with Lua strings   * util.dbuffer: Optimize substring operations   * util.debug:
    Fix locals being reported under wrong stack frame in some cases   * util.dependencies: Fix check for Lua     bitwise operations library (#1594)   * util.interpolation: Fix combination of filters and fallback values     #1623   * util.promise: Preserve tracebacks   * util.stanza: Reject ASCII control characters (#1606)   *     timers: Ensure timers cant block other processing (#1620) (FEDORA-2021-54d3af6388)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-afed2b904e advisory.

  - A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could     trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the application to     resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.
    (CVE-2020-8277)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-f22ce64b3b advisory.

  - Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection     or crafted capture file (CVE-2021-22173)

  - Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or     crafted capture file (CVE-2021-22174)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a48ccc6754 advisory.

  - An error in the read_metadata_vorbiscomment_() function (src/libFLAC/stream_decoder.c) in FLAC version     1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file. (CVE-2017-6888)

  - In FLAC__bitreader_read_rice_signed_block of bitreader.c, there is a possible out of bounds read due to a     heap buffer overflow. This could lead to remote information disclosure with no additional execution     privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android     ID: A-156076070 (CVE-2020-0499)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-b7826fcedf advisory.

  - WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer     overflow in a malloc argument. NOTE: some third-parties claim that there are later unofficial releases     through 5.3.2, which are also affected. (CVE-2020-35738)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-56e894d5ca advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-1721)

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26701. (CVE-2021-24112)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-f4fd9372c7 advisory.

  - Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to     remote code execution in certain Python applications that accept floating-point numbers as untrusted     input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used     unsafely. (CVE-2021-3177)

  - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before     3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and     urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query     parameters using a semicolon (;), they can cause a difference in the interpretation of the request between     the proxy (running with default configuration) and the server. This can result in malicious requests being     cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and     therefore would not include it in a cache key of an unkeyed parameter. (CVE-2021-23336)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
147156	Fedora 32 : 389-ds-base / dogtag-pki / freeipa / pki-core (2021-dc1a4934a5)	high
147154	Fedora 33 : isync (2021-ef8c2acfce)	high
147153	Fedora 33 : screen (2021-9107eeb95c)	critical
147151	Fedora 33 : 2:dpdk / openvswitch (2021-fba11d37ee)	critical
147116	Fedora 32 : 32:bind (2021-0595625865)	high
147087	Fedora 33 : 32:bind (2021-28f97e232d)	high
147068	Fedora 32 : isync (2021-954ebabcf7)	high
147027	Fedora 32 : screen (2021-5e9894a0c5)	critical
147026	Fedora 33 : 389-ds-base / dogtag-pki / freeipa / pki-core (2021-7458e2d835)	high
146979	Fedora 32 : webkit2gtk3 (2021-e03b328043)	high
146977	Fedora 33 : salt (2021-5756fbf8a6)	critical
146970	Fedora 32 : salt (2021-904a2dbc0c)	critical
146969	Fedora 33 : 1:wpa_supplicant (2021-3430f96019)	high
146947	Fedora 33 : python3.9 (2021-b1843407ca)	medium
146943	Fedora 32 : ansible (2021-9a0903469c)	high
146939	Fedora 33 : ansible (2021-e9478617ae)	high
146917	Fedora 33 : libpq / postgresql (2021-3286ac2acc)	high
146913	Fedora 33 : xen (2021-47f53a940a)	high
146909	Fedora 33 : chromium (2021-aa764a8531)	high
146906	Fedora 33 : 1:skopeo / 2:podman / 4:containers-common / buildah / containernetworking-plugins (2021-fb466fb623)	high
146905	Fedora 33 : kernel (2021-7143aca8cb)	high
146902	Fedora 32 : libmysofa (2021-4e40ccb5e6)	high
146901	Fedora 32 : xen (2021-4c819bf1ad)	high
146900	Fedora 33 : firefox (2021-e440aa9307)	high
146899	Fedora 32 : libpq / postgresql (2021-3db6876545)	high
146896	Fedora 33 : rygel (2021-20b9876f11)	high
146894	Fedora 32 : kernel (2021-8d45d297c6)	high
146886	Fedora 32 : python37 (2021-907f3bacae)	critical
146884	Fedora 32 : python39 (2021-7c1bb32d13)	medium
146856	Fedora 32 : dotnet3.1 (2021-48ca39b6ad)	critical
146855	Fedora 33 : prosody (2021-a639ec5d6e)	high
146854	Fedora 33 : dotnet3.1 (2021-c3d7fc8949)	critical
146853	Fedora 33 : 1:wireshark (2021-5522a34aa0)	high
146850	Fedora 32 : radare2 (2021-e3c95619c1)	high
146848	Fedora 33 : mingw-flac (2021-ed9c13a1d5)	medium
146847	Fedora 33 : python3.8 (2021-7d3a9004e2)	medium
146844	Fedora 32 : keylime (2021-11e4ae96a7)	critical
146843	Fedora 33 : keylime (2021-5c01339c12)	critical
146842	Fedora 33 : php-horde-Horde-Text-Filter (2021-f8368da9af)	high
146841	Fedora 32 : python36 (2021-3352c1c802)	critical
146840	Fedora 33 : mingw-c-ares (2021-ee913722db)	high
146839	Fedora 32 : mingw-wavpack (2021-2e2fc2eac6)	medium
146837	Fedora 32 : php-horde-Horde-Text-Filter (2021-cbfa969c98)	high
146835	Fedora 32 : prosody (2021-54d3af6388)	high
146834	Fedora 32 : mingw-c-ares (2021-afed2b904e)	high
146832	Fedora 32 : 1:wireshark (2021-f22ce64b3b)	high
146830	Fedora 32 : mingw-flac (2021-a48ccc6754)	medium
146829	Fedora 33 : mingw-wavpack (2021-b7826fcedf)	medium
146828	Fedora 32 : dotnet5.0 (2021-56e894d5ca)	critical
146749	Fedora 33 : python3.7 (2021-f4fd9372c7)	critical

Fedora Local Security Checks Family for Nessus

high

high

critical

critical

high

high

high

critical

high

high

critical

critical

high

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

critical

medium

critical

high

critical

high

high

medium

medium

critical

critical

high

critical

high

medium

high

high

high

high

medium

medium

critical

critical