The remote host is affected by the vulnerability described in GLSA-202101-11 (Zabbix: Root privilege escalation)

    It was discovered that Gentoo&rsquo;s Zabbix ebuild did not properly set       permissions or placed the pid file in an unsafe directory.
  Impact :

    A local attacker could escalate privileges.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-09 (VirtualBox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in VirtualBox. Please       review the CVE identifiers referenced below for details.
  Impact :

    An attacker could take control of VirtualBox resulting in the execution       of arbitrary code with the privileges of the process, a Denial of Service       condition, or other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-10 (Asterisk: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Asterisk. Please review       the security advisories referenced below for details.
  Impact :

    An attacker could cause a possible Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-08 (Pillow: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Pillow. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-06 (Ark: Symlink vulnerability)

    KDE Ark did not fully verify symlinks contained within tar archives.
  Impact :

    A remote attacker could entice a user to open a specially crafted tar       archive using KDE Ark, possibly resulting in execution of arbitrary code       with the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-07 (NodeJS: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in NodeJS. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-05 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-04 (Mozilla Firefox: Remote code execution)

    A use-after-free bug was discovered in Mozilla Firefox&rsquo;s handling of       SCTP.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-01 (Dovecot: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Dovecot. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could send a specially crafted mail or send a       specially crafted IMAP command possibly resulting in a Denial of Service       condition or an authenticated remote attacker might be able to discover       the file system directory structure and access other users&rsquo; emails.
  Workaround :

    The information disclosure vulnerability can be mitigated by disabling       IMAP hibernation feature which isn&rsquo;t enabled by default.

The remote host is affected by the vulnerability described in GLSA-202101-03 (ipmitool: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ipmiool. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202101-02 (Firejail: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Firejail. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-23 (Apache Tomcat: Information disclosure)

    It was discovered that Apache Tomcat could re-use an HTTP request header       value from the previous stream received on an HTTP/2 connection for the       request associated with the subsequent stream.
  Impact :

    A remote attacker, by sending well-timed HTTP/2 requests, could possibly       obtain sensitive information.
  Workaround :

    Disable HTTP/2 support.

The remote host is affected by the vulnerability described in GLSA-202012-22 (HAProxy: Arbitrary code execution)

    It was discovered that HAProxy incorrectly handled certain HTTP/2       headers.
  Impact :

    A remote attacker, by sending a specially crafted HTTP/2 request, could       possibly execute arbitrary code with the privileges of the process, or       cause a Denial of Service condition.
  Workaround :

    Disable HTTP/2 support.

The remote host is affected by the vulnerability described in GLSA-202012-24 (Samba: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Samba. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-11 (c-ares: Denial of service)

    It was discovered that c-ares incorrectly handled certain DNS requests.
  Impact :

    A remote attacker, able to trigger a DNS request for a host of their       choice by an application linked against c-ares, could possibly cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-16 (PHP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PHP. Please review the       CVE identifiers and change log referenced below for details.
  Impact :

    An attacker could cause a Denial of Service condition or obtain       sensitive information.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-17 (D-Bus: Denial of service)

    It was discovered that D-Bus did not properly handle the situation when       two usernames have the same numeric UID.
  Impact :

    An attacker could possibly cause a Denial of Service condition or       trigger other undefined behavior, possibly including incorrect       authorization decisions.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-19 (PowerDNS Recursor: Denial of service)

    It was discovered that it was possible to update the DNSSEC validation       state to a bogus state for a cached record via DNS ANY query.
  Impact :

    A remote attacker could send specially crafted DNS queries to deny       DNSSEC validation.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-14 (cURL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in cURL. Please review the       CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-10 (WebkitGTK+: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in WebKitGTK+. Please       review the CVE identifiers referenced below for details.
  Impact :

    An attacker, by enticing a user to visit maliciously crafted web       content, may be able to execute arbitrary code or cause memory       corruption.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-15 (GDK-PixBuf: Denial of service)

    It was discovered that the GDK-PixBuf library did not properly handle       certain GIF images.
  Impact :

    A remote attacker could entice a user to open a specially crafted GIF       image in an application linked against GDK-PixBuf library, possibly       resulting in a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-13 (OpenSSL: Denial of service)

    A NULL pointer dereference flaw was found in OpenSSL.
  Impact :

    A remote attacker, able to control the arguments of the GENERAL_NAME_cmp       function in an application linked against OpenSSL, could possibly cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-12 (libass: User-assisted execution of arbitrary code)

    It was discovered that libass did not properly handle Advanced       Substation Alpha/Substation Alpha subtitle format files.
  Impact :

    A remote attacker could entice a user to process an a specially crafted       subtitle format file using an application linked against libass, possibly       resulting in execution of arbitrary code with the privileges of the       process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-09 (Cherokee: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Cherokee. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-20 (Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox and       Mozilla Thunderbird. Please review the CVE identifiers referenced below       for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-18 (PowerDNS: information disclosure)

    It was discovered that PowerDNS did not properly handle certain unknown       records.
  Impact :

    An authorized attacker with the ability to insert crafted records into a       zone might be able to leak the content of uninitialized memory. Crafted       records cannot be inserted via AXFR.
  Workaround :

    Do not take zone data from untrusted users.

The remote host is affected by the vulnerability described in GLSA-202012-04 (Mozilla Thunderbird: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Thunderbird.
      Please review the referenced Mozilla Foundation Security Advisories and       CVE identifiers below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-08 (MariaDB: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MariaDB. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-02 (SeaMonkey: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in SeaMonkey. Please       review referenced release notes for more details.
  Impact :

    Please review the referenced release notes for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-07 (PostgreSQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PostgreSQL. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly obtain sensitive information, alter SQL       commands, escape PostgreSQL sandbox or execute arbitrary code with the       privileges of the process.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-05 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-03 (Mozilla Firefox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202012-06 (Linux-PAM: Authentication bypass)

    A flaw was found in Linux-Pam in the way it handle empty passwords for       non-existing users.
  Impact :

    A remote attacker, who only needs to know a non-existing username, could       bypass security restrictions and authenticate as root user.
  Workaround :

    Ensure that root account is protected by a non-empty password.

The remote host is affected by the vulnerability described in GLSA-202012-01 (X.Org X Server: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in X.org X Server. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    A local attacker could escalate privileges.

The remote host is affected by the vulnerability described in GLSA-202011-19 (libexif: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libexif. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-16 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-18 (Apache Ant: Insecure temporary file)

    A previous fix for a security vulnerability involving insecure temporary       files has been found to be incomplete.
  Impact :

    A local attacker could perform symlink attacks to overwrite arbitrary       files with the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-17 (MIT Kerberos 5: Denial of service)

    It was discovered that MIT Kerberos network authentication system, krb5,       did not properly handle ASN.1-encoded Kerberos messages.
  Impact :

    A remote attacker could send a specially crafted Kerberos message,       possibly resulting in a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-15 (libmaxminddb: Denial of service)

    libmaxminddb used uninitialised memory when reading from a corrupt       database file.
  Impact :

    A remote attacker could entice a user to use a specially crafted       database with libmaxminddb, possibly resulting in a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-06 (Xen: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Xen. Please review the       CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-13 (Salt: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Salt. Please review the       CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-08 (Wireshark: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Wireshark. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-14 (MariaDB: Remote code execution)

    It was discovered that MariaDB did not properly validate the content of       a packet received from a server.
  Impact :

    A remote attacker could send a specially crafted packet to WSREP       service, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-07 (Mozilla Firefox: Remote code execution)

    Invalid assumptions when emitting the the MCallGetProperty opcode in the       JavaScript JIT may result in a use-after-free condition.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-09 (QEMU: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in QEMU. Please review the       CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-10 (tmux: Buffer overflow)

    A flaw in tmux&rsquo;s handling of escape characters was discovered which       may allow a buffer overflow.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-12 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Chromium and Google       Chrome. Please review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-11 (Blueman: Local privilege escalation)

    Where Polkit is not used and the default permissions have been changed       on a specific rule file, control of a local DHCP daemon may be possible.
  Impact :

    A local attacker may be able to achieve root privilege escalation.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-01 (BlueZ: Arbitrary code execution)

    It was discovered that there was a double-free vulnerability in Bluez       after the service discovery which occurs after a Bluetoth Low Energy       (BLE) connection has been established to a device.
  Impact :

    A remote attacker, by enticing a user to connect to a malicious GATT       server or device, could cause the execution of arbitrary code with the       privileges of the user running gatttool client or cause a Denial of       Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-202011-04 (Fossil: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Fossil. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted       repository using Fossil, possibly resulting in execution of arbitrary       code with the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Severity
145256	GLSA-202101-11 : Zabbix: Root privilege escalation	Medium
144923	GLSA-202101-09 : VirtualBox: Multiple vulnerabilities	Medium
144922	GLSA-202101-10 : Asterisk: Multiple vulnerabilities	Medium
144867	GLSA-202101-08 : Pillow: Multiple vulnerabilities	Medium
144865	GLSA-202101-06 : Ark: Symlink vulnerability	Medium
144864	GLSA-202101-07 : NodeJS: Multiple vulnerabilities	High
144833	GLSA-202101-05 : Chromium, Google Chrome: Multiple vulnerabilities	High
144832	GLSA-202101-04 : Mozilla Firefox: Remote code execution	Medium
144821	GLSA-202101-01 : Dovecot: Multiple vulnerabilities	Medium
144820	GLSA-202101-03 : ipmitool: Multiple vulnerabilities	Medium
144817	GLSA-202101-02 : Firejail: Multiple vulnerabilities	High
144614	GLSA-202012-23 : Apache Tomcat: Information disclosure	Medium
144610	GLSA-202012-22 : HAProxy: Arbitrary code execution	Medium
144607	GLSA-202012-24 : Samba: Multiple vulnerabilities	High
144603	GLSA-202012-11 : c-ares: Denial of service	Medium
144602	GLSA-202012-16 : PHP: Multiple vulnerabilities	Medium
144601	GLSA-202012-17 : D-Bus: Denial of service	Low
144600	GLSA-202012-19 : PowerDNS Recursor: Denial of service	Medium
144598	GLSA-202012-14 : cURL: Multiple vulnerabilities	Medium
144597	GLSA-202012-10 : WebkitGTK+: Multiple vulnerabilities	Medium
144593	GLSA-202012-15 : GDK-PixBuf: Denial of service	Medium
144592	GLSA-202012-13 : OpenSSL: Denial of service	Medium
144591	GLSA-202012-12 : libass: User-assisted execution of arbitrary code	Medium
144590	GLSA-202012-09 : Cherokee: Multiple vulnerabilities	High
144589	GLSA-202012-20 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities	Medium
144588	GLSA-202012-18 : PowerDNS: information disclosure	Medium
143531	GLSA-202012-04 : Mozilla Thunderbird: Multiple vulnerabilities	High
143528	GLSA-202012-08 : MariaDB: Multiple vulnerabilities	Medium
143524	GLSA-202012-02 : SeaMonkey: Multiple vulnerabilities	Medium
143503	GLSA-202012-07 : PostgreSQL: Multiple vulnerabilities	High
143495	GLSA-202012-05 : Chromium, Google Chrome: Multiple vulnerabilities	High
143494	GLSA-202012-03 : Mozilla Firefox: Multiple vulnerabilities	High
143493	GLSA-202012-06 : Linux-PAM: Authentication bypass	Critical
143491	GLSA-202012-01 : X.Org X Server: Multiple vulnerabilities	Medium
142939	GLSA-202011-19 : libexif: Multiple vulnerabilities	High
142933	GLSA-202011-16 : Chromium, Google Chrome: Multiple vulnerabilities	Medium
142932	GLSA-202011-18 : Apache Ant: Insecure temporary file	Medium
142930	GLSA-202011-17 : MIT Kerberos 5: Denial of service	Medium
142923	GLSA-202011-15 : libmaxminddb: Denial of service	Medium
142854	GLSA-202011-06 : Xen: Multiple vulnerabilities	Medium
142850	GLSA-202011-13 : Salt: Multiple vulnerabilities	High
142848	GLSA-202011-08 : Wireshark: Multiple vulnerabilities	Medium
142846	GLSA-202011-14 : MariaDB: Remote code execution	High
142844	GLSA-202011-07 : Mozilla Firefox: Remote code execution	High
142843	GLSA-202011-09 : QEMU: Multiple vulnerabilities	Medium
142834	GLSA-202011-10 : tmux: Buffer overflow	Medium
142833	GLSA-202011-12 : Chromium, Google Chrome: Multiple vulnerabilities	Medium
142826	GLSA-202011-11 : Blueman: Local privilege escalation	Medium
142325	GLSA-202011-01 : BlueZ: Arbitrary code execution	High
142272	GLSA-202011-04 : Fossil: Multiple vulnerabilities	Medium

Gentoo Local Security Checks Family for Nessus