The remote host is affected by the vulnerability described in GLSA-202103-01 (Salt: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Salt. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary commands via       salt-api, cause a Denial of Service condition, bypass access restrictions       or disclose sensitive information.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202103-03 (OpenSSL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in OpenSSL. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202103-02 (Redis: Remote code execution)

    It was discovered that there were a number of integer overflow issues in       Redis.
  Impact :

    A remote attacker, able to connect to a Redis instance, could send a       malicious crafted large request possibly resulting in the execution of       arbitrary code with the privileges of the process or a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202103-04 (SQLite: Remote code execution)

    It was discovered that SQLite incorrectly handled certain sub-queries.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202102-02 (Mozilla Thunderbird: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Thunderbird.
      Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202102-01 (Mozilla Firefox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-37 (VLC: Buffer overflow)

    VLC was found to have a buffer overflow when handling crafted MKV files.
  Impact :

    A remote attacker could entice a user to open a specially crafted MKV       file using VLC possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-38 (NSD: Symbolic link traversal)

    A local vulnerability was discovered that would allow for a local       symlink attack due to how NSD handles PID files.
  Impact :

    A local attacker could cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-36 (ImageMagick: Command injection)

    A flaw in ImageMagick&rsquo;s handling of password protected PDFs was       discovered.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       using ImageMagick possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    Do not open untrusted PDFs.

The remote host is affected by the vulnerability described in GLSA-202101-35 (phpMyAdmin: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in phpMyAdmin. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-34 (Telegram Desktop: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Telegram Desktop.
      Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-32 (Mutt, NeoMutt: Information disclosure)

    A weakness in TLS handshake handling was found which may allow       information disclosure.
  Impact :

    A remote attacker may be able to cause information disclosure.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-33 (sudo: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in sudo. Please review the       CVE identifiers referenced below for details.
  Impact :

    Local users are able to gain unauthorized privileges on the system or       determine the existence of files.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-31 (Cacti: Remote code execution)

    The side_id parameter in data_debug.php does not properly verify input       allowing SQL injection.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-29 (OpenJPEG: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in OpenJPEG. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-28 (ncurses: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ncurses. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-23 (PEAR Archive_Tar: Directory traversal)

    Multiple vulnerabilities have been discovered in PEAR Archive_Tar.
      Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-30 (Qt WebEngine: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Qt WebEngine. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-27 (FreeRADIUS: Root privilege escalation)

    It was discovered that Gentoo&rsquo;s FreeRADIUS systemd unit set       permissions on an unsafe directory on start.
  Impact :

    A local attacker could escalate privileges.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-25 (Mutt: Denial of service)

    A memory leak could occur when a crafted email message is received.
  Impact :

    An attacker could cause a possible Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-24 (cfitsio: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in cfitsio. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-22 (libvirt: Unintended access to /dev/mapper/control)

    A file descriptor for /dev/mapper/control was insufficiently protected.
  Impact :

    A local attacker may be able to escalate to root privileges.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-26 (f2fs-tools: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in f2fs-tools. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-12 (Wireshark: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Wireshark. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-15 (VirtualBox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VirtualBox. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-21 (Flatpak: Sandbox escape)

    A bug was discovered in the flatpak-portal service that can allow       sandboxed applications to execute arbitrary code on the host system (a       sandbox escape).
  Impact :

    A remote attacker could entice a user to open a specially crafted       Flatpak app possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    As a workaround, this vulnerability can be mitigated by preventing the       flatpak-portal service from starting, but that mitigation will prevent       many Flatpak apps from working correctly. It is highly recommended to       upgrade.

The remote host is affected by the vulnerability described in GLSA-202101-13 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-20 (glibc: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in glibc. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-14 (Mozilla Thunderbird: Remote code execution)

    A use-after-free bug was discovered in Mozilla Thunderbird handling of       SCTP.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-19 (OpenJDK: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in OpenJDK. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-18 (Python: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Python. Please review       the bugs referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-16 (KDE Connect: Denial of service)

    Multiple issues causing excessive resource consumption were found in KDE       Connect.
  Impact :

    An attacker could cause a possible Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-17 (Dnsmasq: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Dnsmasq. Please review       the references below for details.
  Impact :

    An attacker, by sending specially crafted DNS replies, could possibly       execute arbitrary code with the privileges of the process, perform a       cache poisoning attack or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-11 (Zabbix: Root privilege escalation)

    It was discovered that Gentoo&rsquo;s Zabbix ebuild did not properly set       permissions or placed the pid file in an unsafe directory.
  Impact :

    A local attacker could escalate privileges.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-09 (VirtualBox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VirtualBox. Please       review the CVE identifiers referenced below for details.
  Impact :

    An attacker could take control of VirtualBox resulting in the execution       of arbitrary code with the privileges of the process, a Denial of Service       condition, or other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-10 (Asterisk: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Asterisk. Please review       the security advisories referenced below for details.
  Impact :

    An attacker could cause a possible Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-08 (Pillow: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Pillow. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-06 (Ark: Symlink vulnerability)

    KDE Ark did not fully verify symlinks contained within tar archives.
  Impact :

    A remote attacker could entice a user to open a specially crafted tar       archive using KDE Ark, possibly resulting in execution of arbitrary code       with the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-07 (NodeJS: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in NodeJS. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-05 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-04 (Mozilla Firefox: Remote code execution)

    A use-after-free bug was discovered in Mozilla Firefox&rsquo;s handling of       SCTP.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-01 (Dovecot: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Dovecot. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send a specially crafted mail or send a       specially crafted IMAP command possibly resulting in a Denial of Service       condition or an authenticated remote attacker might be able to discover       the file system directory structure and access other users&rsquo; emails.
  Workaround :

    The information disclosure vulnerability can be mitigated by disabling       IMAP hibernation feature which isn&rsquo;t enabled by default.

The remote host is affected by the vulnerability described in GLSA-202101-03 (ipmitool: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ipmiool. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-02 (Firejail: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Firejail. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-23 (Apache Tomcat: Information disclosure)

    It was discovered that Apache Tomcat could re-use an HTTP request header       value from the previous stream received on an HTTP/2 connection for the       request associated with the subsequent stream.
  Impact :

    A remote attacker, by sending well-timed HTTP/2 requests, could possibly       obtain sensitive information.
  Workaround :

    Disable HTTP/2 support.

The remote host is affected by the vulnerability described in GLSA-202012-22 (HAProxy: Arbitrary code execution)

    It was discovered that HAProxy incorrectly handled certain HTTP/2       headers.
  Impact :

    A remote attacker, by sending a specially crafted HTTP/2 request, could       possibly execute arbitrary code with the privileges of the process, or       cause a Denial of Service condition.
  Workaround :

    Disable HTTP/2 support.

The remote host is affected by the vulnerability described in GLSA-202012-24 (Samba: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Samba. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-11 (c-ares: Denial of service)

    It was discovered that c-ares incorrectly handled certain DNS requests.
  Impact :

    A remote attacker, able to trigger a DNS request for a host of their       choice by an application linked against c-ares, could possibly cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-16 (PHP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PHP. Please review the       CVE identifiers and change log referenced below for details.
  Impact :

    An attacker could cause a Denial of Service condition or obtain       sensitive information.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-17 (D-Bus: Denial of service)

    It was discovered that D-Bus did not properly handle the situation when       two usernames have the same numeric UID.
  Impact :

    An attacker could possibly cause a Denial of Service condition or       trigger other undefined behavior, possibly including incorrect       authorization decisions.
  Workaround :

    There is no known workaround at this time.

ID	Name	Severity
148273	GLSA-202103-01 : Salt: Multiple vulnerabilities	high
148271	GLSA-202103-03 : OpenSSL: Multiple vulnerabilities	medium
148268	GLSA-202103-02 : Redis: Remote code execution	medium
148267	GLSA-202103-04 : SQLite: Remote code execution	low
145758	GLSA-202102-02 : Mozilla Thunderbird: Multiple vulnerabilities	medium
145711	GLSA-202102-01 : Mozilla Firefox: Multiple vulnerabilities	medium
145566	GLSA-202101-37 : VLC: Buffer overflow	medium
145564	GLSA-202101-38 : NSD: Symbolic link traversal	low
145561	GLSA-202101-36 : ImageMagick: Command injection	medium
145526	GLSA-202101-35 : phpMyAdmin: Multiple vulnerabilities	high
145524	GLSA-202101-34 : Telegram Desktop: Multiple vulnerabilities	medium
145489	GLSA-202101-32 : Mutt, NeoMutt: Information disclosure	low
145477	GLSA-202101-33 : sudo: Multiple vulnerabilities	high
145473	GLSA-202101-31 : Cacti: Remote code execution	medium
145436	GLSA-202101-29 : OpenJPEG: Multiple vulnerabilities	high
145433	GLSA-202101-28 : ncurses: Multiple vulnerabilities	medium
145432	GLSA-202101-23 : PEAR Archive_Tar: Directory traversal	medium
145430	GLSA-202101-30 : Qt WebEngine: Multiple vulnerabilities	high
145429	GLSA-202101-27 : FreeRADIUS: Root privilege escalation	medium
145428	GLSA-202101-25 : Mutt: Denial of service	medium
145426	GLSA-202101-24 : cfitsio: Multiple vulnerabilities	medium
145425	GLSA-202101-22 : libvirt: Unintended access to /dev/mapper/control	high
145424	GLSA-202101-26 : f2fs-tools: Multiple vulnerabilities	medium
145380	GLSA-202101-12 : Wireshark: Multiple vulnerabilities	medium
145378	GLSA-202101-15 : VirtualBox: Multiple vulnerabilities	high
145369	GLSA-202101-21 : Flatpak: Sandbox escape	high
145341	GLSA-202101-13 : Chromium, Google Chrome: Multiple vulnerabilities	medium
145333	GLSA-202101-20 : glibc: Multiple vulnerabilities	medium
145327	GLSA-202101-14 : Mozilla Thunderbird: Remote code execution	medium
145321	GLSA-202101-19 : OpenJDK: Multiple vulnerabilities	medium
145303	GLSA-202101-18 : Python: Multiple vulnerabilities	high
145296	GLSA-202101-16 : KDE Connect: Denial of service	medium
145282	GLSA-202101-17 : Dnsmasq: Multiple vulnerabilities	high
145256	GLSA-202101-11 : Zabbix: Root privilege escalation	medium
144923	GLSA-202101-09 : VirtualBox: Multiple vulnerabilities	medium
144922	GLSA-202101-10 : Asterisk: Multiple vulnerabilities	medium
144867	GLSA-202101-08 : Pillow: Multiple vulnerabilities	medium
144865	GLSA-202101-06 : Ark: Symlink vulnerability	medium
144864	GLSA-202101-07 : NodeJS: Multiple vulnerabilities	high
144833	GLSA-202101-05 : Chromium, Google Chrome: Multiple vulnerabilities	high
144832	GLSA-202101-04 : Mozilla Firefox: Remote code execution	medium
144821	GLSA-202101-01 : Dovecot: Multiple vulnerabilities	medium
144820	GLSA-202101-03 : ipmitool: Multiple vulnerabilities	medium
144817	GLSA-202101-02 : Firejail: Multiple vulnerabilities	high
144614	GLSA-202012-23 : Apache Tomcat: Information disclosure	medium
144610	GLSA-202012-22 : HAProxy: Arbitrary code execution	medium
144607	GLSA-202012-24 : Samba: Multiple vulnerabilities	high
144603	GLSA-202012-11 : c-ares: Denial of service	medium
144602	GLSA-202012-16 : PHP: Multiple vulnerabilities	medium
144601	GLSA-202012-17 : D-Bus: Denial of service	low

Gentoo Local Security Checks Family for Nessus

high

medium

medium

low

medium

medium

medium

low

medium

high

medium

low

high

medium

high

medium

medium

high

medium

medium

medium

high

medium

medium

high

high

medium

medium

medium

medium

high

medium

high

medium

medium

medium

medium

medium

high

high

medium

medium

medium

high

medium

medium

high

medium

medium

low