The remote NewStart CGSL host, running version MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in the Linux kernel's key management     system where it was possible for an attacker to escalate     privileges or crash the machine. If a user key gets     negatively instantiated, an error code is cached in the     payload area. A negatively instantiated key may be then     be positively instantiated by updating it with valid     data. However, the ->update key type method must be     aware that the error code may be there. (CVE-2015-8539)

  - A flaw was found in the way the Linux KVM module     processed the trap flag(TF) bit in EFLAGS during     emulation of the syscall instruction, which leads to a     debug exception(#DB) being raised in the guest stack. A     user/process inside a guest could use this flaw to     potentially escalate their privileges inside the guest.
    Linux guests are not affected by this. (CVE-2017-7518)

  - A vulnerability was found in the Key Management sub     component of the Linux kernel, where when trying to     issue a KEYTCL_READ on a negative key would lead to a     NULL pointer dereference. A local attacker could use     this flaw to crash the kernel. (CVE-2017-12192)

  - The Linux kernel built with the KVM visualization     support (CONFIG_KVM), with nested visualization(nVMX)     feature enabled (nested=1), was vulnerable to a stack     buffer overflow issue. The vulnerability could occur     while traversing guest page table entries to resolve     guest virtual address(gva). An L1 guest could use this     flaw to crash the host kernel resulting in denial of     service (DoS) or potentially execute arbitrary code on     the host to gain privileges on the system.
    (CVE-2017-12188)

  - A flaw was found in the Linux kernel's implementation of     associative arrays introduced in 3.13. This     functionality was backported to the 3.10 kernels in Red     Hat Enterprise Linux 7. The flaw involved a null pointer     dereference in assoc_array_apply_edit() due to incorrect     node-splitting in assoc_array implementation. This     affects the keyring key type and thus key addition and     link creation operations may cause the kernel to panic.
    (CVE-2017-12193)

  - It was found that fanout_add() in     'net/packet/af_packet.c' in the Linux kernel, before     version 4.13.6, allows local users to gain privileges     via crafted system calls that trigger mishandling of     packet_fanout data structures, because of a race     condition (involving fanout_add and packet_do_bind) that     leads to a use-after-free bug. (CVE-2017-15649)

  - A vulnerability was found in the Linux kernel where the     keyctl_set_reqkey_keyring() function leaks the thread     keyring. This allows an unprivileged local user to     exhaust kernel memory and thus cause a DoS.
    (CVE-2017-7472)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has ruby packages installed that are affected by multiple vulnerabilities:

  - A buffer overflow vulnerability was found in the JSON     extension of ruby. An attacker with the ability to pass     a specially crafted JSON input to the extension could     use this flaw to expose the interpreter's heap memory.
    (CVE-2017-14064)

  - The lazy_initialize function in lib/resolv.rb did not     properly process certain filenames. A remote attacker     could possibly exploit this flaw to inject and execute     arbitrary commands. (CVE-2017-17790)

  - It was discovered that the Net::FTP module did not     properly process filenames in combination with certain     operations. A remote attacker could exploit this flaw to     execute arbitrary commands by setting up a malicious FTP     server and tricking a user or Ruby application into     downloading files with specially crafted names using the     Net::FTP module. (CVE-2017-17405)

  - A buffer underflow was found in ruby's sprintf function.
    An attacker, with ability to control its format string     parameter, could send a specially crafted string that     would disclose heap memory or crash the interpreter.
    (CVE-2017-0898)

  - It was found that the decode method of the OpenSSL::ASN1     module was vulnerable to buffer underrun. An attacker     could pass a specially crafted string to the application     in order to crash the ruby interpreter, causing a denial     of service. (CVE-2017-14033)

  - It was found that WEBrick did not sanitize all its log     messages. If logs were printed in a terminal, an     attacker could interact with the terminal via the use of     escape sequences. (CVE-2017-10784)

  - It was found that rubygems did not sanitize gem names     during installation of a given gem. A specially crafted     gem could use this flaw to install files outside of the     regular directory. (CVE-2017-0901)

  - It was found that rubygems could use an excessive amount     of CPU while parsing a sufficiently long gem summary. A     specially crafted gem from a gem repository could freeze     gem commands attempting to parse its summary.
    (CVE-2017-0900)

  - A vulnerability was found where rubygems did not     sanitize DNS responses when requesting the hostname of     the rubygems server for a domain, via a _rubygems._tcp     DNS SRV query. An attacker with the ability to     manipulate DNS responses could direct the gem command     towards a different domain. (CVE-2017-0902)

  - A vulnerability was found where rubygems did not     properly sanitize gems' specification text. A specially     crafted gem could interact with the terminal via the use     of escape sequences. (CVE-2017-0899)

  - A vulnerability was found where the rubygems module was     vulnerable to an unsafe YAML deserialization when     inspecting a gem. Applications inspecting gem files     without installing them can be tricked to execute     arbitrary code in the context of the ruby interpreter.
    (CVE-2017-0903)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has libreoffice packages installed that are affected by a vulnerability:

  - A flaw was found in libreoffice before 5.4.5 and before     6.0.1. Arbitrary remote file disclosure may be achieved     by the use of the WEBSERVICE formula in a specially     crafted ODS file. (CVE-2018-6871)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities:

  - Vulnerability in the Java SE, Java SE Embedded, JRockit     component of Oracle Java SE (subcomponent: JNDI).
    Supported versions that are affected are Java SE: 6u171,     7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151;
    JRockit: R28.3.16. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     multiple protocols to compromise Java SE, Java SE     Embedded, JRockit. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Java SE, Java SE Embedded,     JRockit. Note: This vulnerability applies to client and     server deployment of Java. This vulnerability can be     exploited through sandboxed Java Web Start applications     and sandboxed Java applets. It can also be exploited by     supplying data to APIs in the specified Component     without using sandboxed Java Web Start applications or     sandboxed Java applets, such as through a web service.
    CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS     Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
    (CVE-2018-2678)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: AWT). Supported     versions that are affected are Java SE: 6u171, 7u161,     8u152 and 9.0.1; Java SE Embedded: 8u151. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Java SE, Java SE Embedded. Successful attacks     require human interaction from a person other than the     attacker. Successful attacks of this vulnerability can     result in unauthorized ability to cause a partial denial     of service (partial DOS) of Java SE, Java SE Embedded.
    Note: This vulnerability applies to Java deployments,     typically in clients running sandboxed Java Web Start     applications or sandboxed Java applets, that load and     run untrusted code (e.g., code that comes from the     internet) and rely on the Java sandbox for security.
    This vulnerability does not apply to Java deployments,     typically in servers, that load and run only trusted     code (e.g., code installed by an administrator). CVSS     3.0 Base Score 4.3 (Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
    (CVE-2018-2677)

  - Vulnerability in the Java SE, Java SE Embedded, JRockit     component of Oracle Java SE (subcomponent: Libraries).
    Supported versions that are affected are Java SE: 6u171,     7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151;
    JRockit: R28.3.16. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     multiple protocols to compromise Java SE, Java SE     Embedded, JRockit. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of     service (partial DOS) of Java SE, Java SE Embedded,     JRockit. Note: This vulnerability applies to client and     server deployment of Java. This vulnerability can be     exploited through sandboxed Java Web Start applications     and sandboxed Java applets. It can also be exploited by     supplying data to APIs in the specified Component     without using sandboxed Java Web Start applications or     sandboxed Java applets, such as through a web service.
    CVSS 3.0 Base Score 4.3 (Availability impacts). CVSS     Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
    (CVE-2018-2663)

  - It was discovered that multiple encryption key classes     in the Libraries component of OpenJDK did not properly     synchronize access to their internal data. This could     possibly cause a multi-threaded Java application to     apply weak encryption to data because of the use of a     key that was zeroed out. (CVE-2018-2579)

  - It was discovered that the LDAP component of OpenJDK     failed to properly encode special characters in user     names when adding them to an LDAP search query. A remote     attacker could possibly use this flaw to manipulate LDAP     queries performed by the LdapLoginModule class.
    (CVE-2018-2588)

  - It was discovered that the I18n component of OpenJDK     could use an untrusted search path when loading resource     bundle classes. A local attacker could possibly use this     flaw to execute arbitrary code as another local user by     making their Java application load an attacker     controlled class file. (CVE-2018-2602)

  - It was discovered that the DNS client implementation in     the JNDI component of OpenJDK did not use random source     ports when sending out DNS queries. This could make it     easier for a remote attacker to spoof responses to those     queries. (CVE-2018-2599)

  - It was discovered that the Libraries component of     OpenJDK failed to sufficiently limit the amount of     memory allocated when reading DER encoded input. A     remote attacker could possibly use this flaw to make a     Java application use an excessive amount of memory if it     parsed attacker supplied DER encoded input.
    (CVE-2018-2603)

  - It was discovered that the JGSS component of OpenJDK     failed to properly handle GSS context in the native GSS     library wrapper in certain cases. A remote attacker     could possibly make a Java application using JGSS to use     a previously freed context. (CVE-2018-2629)

  - It was discovered that the key agreement implementations     in the JCE component of OpenJDK did not guarantee     sufficient strength of used keys to adequately protect     generated shared secret. This could make it easier to     break data encryption by attacking key agreement rather     than the encryption using the negotiated secret.
    (CVE-2018-2618)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: AWT). Supported     versions that are affected are Java SE: 6u171, 7u161,     8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise     Java SE, Java SE Embedded. Successful attacks require     human interaction from a person other than the attacker     and while the vulnerability is in Java SE, Java SE     Embedded, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized creation, deletion or     modification access to critical data or all Java SE,     Java SE Embedded accessible data. Note: This     vulnerability applies to Java deployments, typically in     clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability does     not apply to Java deployments, typically in servers,     that load and run only trusted code (e.g., code     installed by an administrator). CVSS 3.0 Base Score 6.1     (Integrity impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N).
    (CVE-2018-2641)

  - The JGSS component of OpenJDK ignores the value of the     javax.security.auth.useSubjectCredsOnly property when     using HTTP/SPNEGO authentication and always uses global     credentials. It was discovered that this could cause     global credentials to be unexpectedly used by an     untrusted Java application. (CVE-2018-2634)

  - It was discovered that the JMX component of OpenJDK     failed to properly set the deserialization filter for     the SingleEntryRegistry in certain cases. A remote     attacker could possibly use this flaw to bypass intended     deserialization restrictions. (CVE-2018-2637)

  - It was discovered that the LDAPCertStore class in the     JNDI component of OpenJDK failed to securely handle LDAP     referrals. An attacker could possibly use this flaw to     make it fetch attacker controlled certificate data.
    (CVE-2018-2633)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has glibc packages installed that are affected by multiple vulnerabilities:

  - elf/dl-load.c in ld.so in the GNU C Library (aka glibc     or libc6) through 2.11.2, and 2.12.x through 2.12.1,     does not properly handle a value of $ORIGIN for the     LD_AUDIT environment variable, which allows local users     to gain privileges via a crafted dynamic shared object     (DSO) located in an arbitrary directory. (CVE-2010-3847)

  - ld.so in the GNU C Library (aka glibc or libc6) before     2.11.3, and 2.12.x before 2.12.2, does not properly     restrict use of the LD_AUDIT environment variable to     reference dynamic shared objects (DSOs) as audit     objects, which allows local users to gain privileges by     leveraging an unsafe DSO located in a trusted library     directory, as demonstrated by libpcprofile.so.
    (CVE-2010-3856)

  - Integer overflow in string/strcoll_l.c in the GNU C     Library (aka glibc or libc6) 2.17 and earlier allows     context-dependent attackers to cause a denial of service     (crash) or possibly execute arbitrary code via a long     string, which triggers a heap-based buffer overflow.
    (CVE-2012-4412)

  - Stack-based buffer overflow in string/strcoll_l.c in the     GNU C Library (aka glibc or libc6) 2.17 and earlier     allows context-dependent attackers to cause a denial of     service (crash) or possibly execute arbitrary code via a     long string that triggers a malloc failure and use of     the alloca function. (CVE-2012-4424)

  - A flaw was found in the regular expression matching     routines that process multibyte character input. If an     application utilized the glibc regular expression     matching mechanism, an attacker could provide specially-     crafted input that, when processed, would cause the     application to crash. (CVE-2013-0242)

  - It was found that getaddrinfo() did not limit the amount     of stack memory used during name resolution. An attacker     able to make an application resolve an attacker-     controlled hostname or IP address could possibly cause     the application to exhaust all stack memory and crash.
    (CVE-2013-1914, CVE-2013-4458)

  - pt_chown in GNU C Library (aka glibc or libc6) before     2.18 does not properly check permissions for tty files,     which allows local users to change the permission on the     files and obtain access to arbitrary pseudo-terminals by     leveraging a FUSE file system. (CVE-2013-2207)

  - An out-of-bounds write flaw was found in the way the     glibc's readdir_r() function handled file system entries     longer than the NAME_MAX character constant. A remote     attacker could provide a specially crafted NTFS or CIFS     file system that, when processed by an application using     readdir_r(), would cause that application to crash or,     potentially, allow the attacker to execute arbitrary     code with the privileges of the user running the     application. (CVE-2013-4237)

  - Multiple integer overflow flaws, leading to heap-based     buffer overflows, were found in glibc's memory allocator     functions (pvalloc, valloc, and memalign). If an     application used such a function, it could cause the     application to crash or, potentially, execute arbitrary     code with the privileges of the user running the     application. (CVE-2013-4332)

  - The PTR_MANGLE implementation in the GNU C Library (aka     glibc or libc6) 2.4, 2.17, and earlier, and Embedded     GLIBC (EGLIBC) does not initialize the random value for     the pointer guard, which makes it easier for context-     dependent attackers to control execution flow by     leveraging a buffer-overflow vulnerability in an     application and using the known zero value pointer guard     to calculate a pointer address. (CVE-2013-4788)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities:

  - Memory safety bugs were reported in Firefox 58 and     Firefox ESR 52.6. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Thunderbird < 52.7,     Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125)

  - A buffer overflow can occur when manipulating the SVG     animatedPathSegList through script. This results in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 52.7, Firefox ESR < 52.7, and     Firefox < 59. (CVE-2018-5127)

  - A lack of parameter validation on IPC messages results     in a potential out-of-bounds write through malformed IPC     messages. This can potentially allow for sandbox escape     through memory corruption in the parent process. This     vulnerability affects Thunderbird < 52.7, Firefox ESR <     52.7, and Firefox < 59. (CVE-2018-5129)

  - When packets with a mismatched RTP payload type are sent     in WebRTC connections, in some circumstances a     potentially exploitable crash is triggered. This     vulnerability affects Firefox ESR < 52.7 and Firefox <     59. (CVE-2018-5130)

  - Under certain circumstances the fetch() API can return     transient local copies of resources that were sent with     a no-store or no-cache cache header instead of     downloading a copy from the network as it should. This     can result in previously stored, locally cached data of     a website being accessible to users if they share a     common profile while browsing. This vulnerability     affects Firefox ESR < 52.7 and Firefox < 59.
    (CVE-2018-5131)

  - An integer overflow can occur during conversion of text     to some Unicode character sets due to an unchecked     length parameter. This vulnerability affects Firefox ESR     < 52.7 and Thunderbird < 52.7. (CVE-2018-5144)

  - Memory safety bugs were reported in Firefox ESR 52.6.
    These bugs showed evidence of memory corruption and we     presume that with enough effort that some of these could     be exploited to run arbitrary code. This vulnerability     affects Firefox ESR < 52.7 and Thunderbird < 52.7.
    (CVE-2018-5145)

  - Memory safety bugs were reported in Firefox 57 and     Firefox ESR 52.5. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089)

  - A use-after-free vulnerability can occur during WebRTC     connections when interacting with the DTMF timers. This     results in a potentially exploitable crash. This     vulnerability affects Firefox ESR < 52.6 and Firefox <     58. (CVE-2018-5091)

  - An integer overflow vulnerability in the Skia library     when allocating memory for edge builders on some systems     with at least 8 GB of RAM. This results in the use of     uninitialized memory, resulting in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5095)

  - A use-after-free vulnerability can occur while editing     events in form elements on a page, resulting in a     potentially exploitable crash. This vulnerability     affects Firefox ESR < 52.6 and Thunderbird < 52.6.
    (CVE-2018-5096)

  - A use-after-free vulnerability can occur during XSL     transformations when the source document for the     transformation is manipulated by script content during     the transformation. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5097)

  - A use-after-free vulnerability can occur when form input     elements, focus, and selections are manipulated by     script content. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5098)

  - A use-after-free vulnerability can occur when the widget     listener is holding strong references to browser objects     that have previously been freed, resulting in a     potentially exploitable crash when these references are     used. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099)

  - A use-after-free vulnerability can occur when     manipulating HTML media elements with media streams,     resulting in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5102)

  - A use-after-free vulnerability can occur during mouse     event handling due to issues with multiprocess support.
    This results in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5103)

  - A use-after-free vulnerability can occur during font     face manipulation when a font face is freed while still     in use, resulting in a potentially exploitable crash.
    This vulnerability affects Thunderbird < 52.6, Firefox     ESR < 52.6, and Firefox < 58. (CVE-2018-5104)

  - If right-to-left text is used in the addressbar with     left-to-right alignment, it is possible in some     circumstances to scroll this text to spoof the displayed     URL. This issue could result in the wrong URL being     displayed as a location, which can mislead users to     believe they are on a different site than the one     loaded. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117)

  - An out of bounds write flaw was found in the processing     of vorbis audio data. A maliciously crafted file or     audio stream could cause the application to crash or,     potentially, execute arbitrary code. (CVE-2018-5146)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has bind packages installed that are affected by a vulnerability:

  - A use-after-free flaw leading to denial of service was     found in the way BIND internally handled cleanup     operations on upstream recursion fetch contexts. A     remote attacker could potentially use this flaw to make     named, acting as a DNSSEC validating resolver, exit     unexpectedly with an assertion failure via a specially     crafted DNS request. (CVE-2017-3145)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has quagga packages installed that are affected by a vulnerability:

  - A double-free vulnerability was found in Quagga. A BGP     peer could send a specially crafted UPDATE message which     would cause allocated blocks of memory to be free()d     more than once, potentially leading to a crash or other     issues. (CVE-2018-5379)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has dhcp packages installed that are affected by multiple vulnerabilities:

  - An out-of-bound memory access flaw was found in the way     dhclient processed a DHCP response packet. A malicious     DHCP server could potentially use this flaw to crash     dhclient processes running on DHCP client machines via a     crafted DHCP response packet. (CVE-2018-5732)

  - A denial of service flaw was found in the way dhcpd     handled reference counting when processing client     requests. A malicious DHCP client could use this flaw to     trigger a reference count overflow on the server side,     potentially causing dhcpd to crash, by sending large     amounts of traffic. (CVE-2018-5733)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - It is possible to spoof the sender's email address and     display an arbitrary sender address to the email     recipient. The real sender's address is not displayed if     preceded by a null character in the display string. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7829)

  - Crafted CSS in an RSS feed can leak and reveal local     path strings, which may contain user name. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7847)

  - RSS fields can inject new lines into the created email     structure, modifying the message body. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7848)

  - It is possible to execute JavaScript in the parsed RSS     feed when RSS feed is viewed as a website, e.g. via     View -> Feed article -> Website or in the standard     format of View -> Feed article -> default format. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7846)

  - Memory safety bugs were reported in Firefox 57 and     Firefox ESR 52.5. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089)

  - An integer overflow vulnerability in the Skia library     when allocating memory for edge builders on some systems     with at least 8 GB of RAM. This results in the use of     uninitialized memory, resulting in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5095)

  - A use-after-free vulnerability can occur while editing     events in form elements on a page, resulting in a     potentially exploitable crash. This vulnerability     affects Firefox ESR < 52.6 and Thunderbird < 52.6.
    (CVE-2018-5096)

  - A use-after-free vulnerability can occur during XSL     transformations when the source document for the     transformation is manipulated by script content during     the transformation. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5097)

  - A use-after-free vulnerability can occur when form input     elements, focus, and selections are manipulated by     script content. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5098)

  - A use-after-free vulnerability can occur when the widget     listener is holding strong references to browser objects     that have previously been freed, resulting in a     potentially exploitable crash when these references are     used. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099)

  - A use-after-free vulnerability can occur when     manipulating HTML media elements with media streams,     resulting in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5102)

  - A use-after-free vulnerability can occur during mouse     event handling due to issues with multiprocess support.
    This results in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5103)

  - A use-after-free vulnerability can occur during font     face manipulation when a font face is freed while still     in use, resulting in a potentially exploitable crash.
    This vulnerability affects Thunderbird < 52.6, Firefox     ESR < 52.6, and Firefox < 58. (CVE-2018-5104)

  - If right-to-left text is used in the addressbar with     left-to-right alignment, it is possible in some     circumstances to scroll this text to spoof the displayed     URL. This issue could result in the wrong URL being     displayed as a location, which can mislead users to     believe they are on a different site than the one     loaded. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has 389-ds-base packages installed that are affected by multiple vulnerabilities:

  - An out-of-bounds memory read flaw was found in the way     389-ds-base handled certain LDAP search filters. A     remote, unauthenticated attacker could potentially use     this flaw to make ns-slapd crash via a specially crafted     LDAP request, thus resulting in denial of service.
    (CVE-2018-1054)

  - It was found that 389-ds-base did not always handle     internal hash comparison operations correctly during the     authentication process. A remote, unauthenticated     attacker could potentially use this flaw to bypass the     authentication process under very rare and specific     circumstances. (CVE-2017-15135)

  - A stack buffer overflow flaw was found in the way     389-ds-base handled certain LDAP search filters. A     remote, unauthenticated attacker could potentially use     this flaw to make ns-slapd crash via a specially crafted     LDAP request, thus resulting in denial of service.
    (CVE-2017-15134)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has python packages installed that are affected by multiple vulnerabilities:

  - Multiple integer overflows in the imageop module in     Python 2.5.1 and earlier allow context-dependent     attackers to cause a denial of service (application     crash) and possibly obtain sensitive information (memory     contents) via crafted arguments to (1) the tovideo     method, and unspecified other vectors related to (2)     imageop.c, (3) rbgimgmodule.c, and other files, which     trigger heap-based buffer overflows. (CVE-2007-4965)

  - Integer overflow in _hashopenssl.c in the hashlib module     in Python 2.5.2 and earlier might allow context-     dependent attackers to defeat cryptographic digests,     related to partial hashlib hashing of data exceeding     4GB. (CVE-2008-2316)

  - Untrusted search path vulnerability in the PySys_SetArgv     API function in Python 2.6 and earlier, and possibly     later versions, prepends an empty string to sys.path     when the argv[0] argument does not contain a path     separator, which might allow local users to execute     arbitrary code via a Trojan horse Python file in the     current working directory. (CVE-2008-5983)

  - Multiple integer overflows in audioop.c in the audioop     module in Python 2.6, 2.7, 3.1, and 3.2 allow context-     dependent attackers to cause a denial of service     (application crash) via a large fragment, as     demonstrated by a call to audioop.lin2lin with a long     string in the first argument, leading to a buffer     overflow. NOTE: this vulnerability exists because of an     incorrect fix for CVE-2008-3143.5. (CVE-2010-1634)

  - The audioop module in Python 2.7 and 3.2 does not verify     the relationships between size arguments and byte string     lengths, which allows context-dependent attackers to     cause a denial of service (memory corruption and     application crash) via crafted arguments, as     demonstrated by a call to audioop.reverse with a one-     byte string, a different vulnerability than     CVE-2010-1634. (CVE-2010-2089)

  - The ssl.match_hostname function in the SSL module in     Python 2.6 through 3.4 does not properly handle a '\0'     character in a domain name in the Subject Alternative     Name field of an X.509 certificate, which allows man-in-     the-middle attackers to spoof arbitrary SSL servers via     a crafted certificate issued by a legitimate     Certification Authority, a related issue to     CVE-2009-2408. (CVE-2013-4238)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has mailman packages installed that are affected by a vulnerability:

  - A cross-site scripting (XSS) flaw was found in mailman.
    An attacker, able to trick the user into visiting a     specific URL, can execute arbitrary web scripts on the     user's side and force the victim to perform unintended     actions. (CVE-2018-5950)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities:

  - It was found that the timer functionality in the Linux     kernel ALSA subsystem is prone to a race condition     between read and ioctl system call handlers, resulting     in an uninitialized memory disclosure to user space. A     local user could use this flaw to read information     belonging to other users. (CVE-2017-1000380)

  - An industry-wide issue was found in the way many modern     microprocessor designs have implemented speculative     execution of instructions (a commonly used performance     optimization). There are three primary variants of the     issue which differ in the way the speculative execution     can be exploited. Variant CVE-2017-5715 triggers the     speculative execution by utilizing branch target     injection. It relies on the presence of a precisely-     defined instruction sequence in the privileged code as     well as the fact that memory accesses may cause     allocation into the microprocessor's data cache even for     speculatively executed instructions that never actually     commit (retire). As a result, an unprivileged attacker     could use this flaw to cross the syscall and guest/host     boundaries and read privileged memory by conducting     targeted cache side-channel attacks. (CVE-2017-5715)

  - An industry-wide issue was found in the way many modern     microprocessor designs have implemented speculative     execution of instructions (a commonly used performance     optimization). There are three primary variants of the     issue which differ in the way the speculative execution     can be exploited. Variant CVE-2017-5753 triggers the     speculative execution by performing a bounds-check     bypass. It relies on the presence of a precisely-defined     instruction sequence in the privileged code as well as     the fact that memory accesses may cause allocation into     the microprocessor's data cache even for speculatively     executed instructions that never actually commit     (retire). As a result, an unprivileged attacker could     use this flaw to cross the syscall boundary and read     privileged memory by conducting targeted cache side-     channel attacks. (CVE-2017-5753)

  - An industry-wide issue was found in the way many modern     microprocessor designs have implemented speculative     execution of instructions (a commonly used performance     optimization). There are three primary variants of the     issue which differ in the way the speculative execution     can be exploited. Variant CVE-2017-5754 relies on the     fact that, on impacted microprocessors, during     speculative execution of instruction permission faults,     exception generation triggered by a faulting access is     suppressed until the retirement of the whole instruction     block. In a combination with the fact that memory     accesses may populate the cache even when the block is     being dropped and never committed (executed), an     unprivileged local attacker could use this flaw to read     privileged (kernel space) memory by conducting targeted     cache side-channel attacks. Note: CVE-2017-5754 affects     Intel x86-64 microprocessors. AMD x86-64 microprocessors     are not affected by this issue. (CVE-2017-5754)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - A use-after-free vulnerability can occur when flushing     and resizing layout because the PressShell object has     been freed while still in use. This results in a     potentially exploitable crash during these operations.
    This vulnerability affects Firefox < 57, Firefox ESR <     52.5, and Thunderbird < 52.5. (CVE-2017-7828)

  - Memory safety bugs were reported in Firefox 56 and     Firefox ESR 52.4. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Firefox < 57, Firefox     ESR < 52.5, and Thunderbird < 52.5. (CVE-2017-7826)

  - The Resource Timing API incorrectly revealed navigations     in cross-origin iframes. This is a same-origin policy     violation and could allow for data theft of URLs loaded     by users. This vulnerability affects Firefox < 57,     Firefox ESR < 52.5, and Thunderbird < 52.5.
    (CVE-2017-7830)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has postgresql packages installed that are affected by multiple vulnerabilities:

  - Privilege escalation flaws were found in the Red Hat     initialization scripts of PostgreSQL. An attacker with     access to the postgres user account could use these     flaws to obtain root access on the server machine.
    (CVE-2017-15097)

  - Privilege escalation flaws were found in the     initialization scripts of PostgreSQL. An attacker with     access to the postgres user account could use these     flaws to obtain root access on the server machine.
    (CVE-2017-12172)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has qemu-kvm packages installed that are affected by multiple vulnerabilities:

  - Quick Emulator (QEMU), compiled with the PC System     Emulator with multiboot feature support, is vulnerable     to an OOB r/w memory access issue. The issue could occur     due to an integer overflow while loading a kernel image     during a guest boot. A user or process could use this     flaw to potentially achieve arbitrary code execution on     a host. (CVE-2017-14167)

  - Quick emulator (QEMU), compiled with the Cirrus CLGD     54xx VGA Emulator support, is vulnerable to an OOB write     access issue. The issue could occur while writing to VGA     memory via mode4and5 write functions. A privileged user     inside guest could use this flaw to crash the QEMU     process resulting in Denial of Serivce (DoS).
    (CVE-2017-15289)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has procmail packages installed that are affected by a vulnerability:

  - A heap-based buffer overflow flaw was found in     procmail's formail utility. A remote attacker could send     a specially crafted email that, when processed by     formail, could cause formail to crash or, possibly,     execute arbitrary code as the user running formail.
    (CVE-2017-16844)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has liblouis packages installed that are affected by a vulnerability:

  - A missing fix for one stack-based buffer overflow in     findTable() for CVE-2014-8184 was discovered. An     attacker could cause denial of service or potentially     allow arbitrary code execution. (CVE-2017-15101)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has samba packages installed that are affected by multiple vulnerabilities:

  - A memory disclosure flaw was found in samba. An attacker     could retrieve parts of server memory, which could     contain potentially sensitive data, by sending     specially-crafted requests to the samba server.
    (CVE-2017-15275)

  - A use-after-free flaw was found in the way samba servers     handled certain SMB1 requests. An unauthenticated     attacker could send specially-crafted SMB1 requests to     cause the server to crash or execute arbitrary code.
    (CVE-2017-14746)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has java-1.7.0-openjdk packages installed that are affected by multiple vulnerabilities:

  - It was discovered that the Security component of OpenJDK     could fail to properly enforce restrictions defined for     processing of X.509 certificate chains. A remote     attacker could possibly use this flaw to make Java     accept certificate using one of the disabled algorithms.
    (CVE-2017-10198)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: Security). Supported     versions that are affected are Java SE: 6u151, 7u141 and     8u131; Java SE Embedded: 8u131. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized read access to a subset of Java SE, Java SE     Embedded accessible data. Note: This vulnerability     applies to Java deployments, typically in clients     running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability does     not apply to Java deployments, typically in servers,     that load and run only trusted code (e.g., code     installed by an administrator). CVSS 3.0 Base Score 3.1     (Confidentiality impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).
    (CVE-2017-10193)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: JAXP). Supported     versions that are affected are Java SE: 6u161, 7u151,     8u144 and 9; Java SE Embedded: 8u144. Easily exploitable     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability applies     to Java deployments, typically in clients running     sandboxed Java Web Start applications or sandboxed Java     applets, that load and run untrusted code (e.g., code     that comes from the internet) and rely on the Java     sandbox for security. This vulnerability does not apply     to Java deployments, typically in servers, that load and     run only trusted code (e.g., code installed by an     administrator). CVSS 3.0 Base Score 5.3 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2017-10349)

  - It was found that the FtpClient implementation in the     Networking component of OpenJDK did not set connect and     read timeouts by default. A malicious FTP server or a     man-in-the-middle attacker could use this flaw to block     execution of a Java application connecting to an FTP     server. (CVE-2017-10355)

  - It was found that the HttpURLConnection and     HttpsURLConnection classes in the Networking component     of OpenJDK failed to check for newline characters     embedded in URLs. An attacker able to make a Java     application perform an HTTP request using an attacker     provided URL could possibly inject additional headers     into the request. (CVE-2017-10295)

  - It was discovered that the Security component of OpenJDK     generated weak password-based encryption keys used to     protect private keys stored in key stores. This made it     easier to perform password guessing attacks to decrypt     stored keys if an attacker could gain access to a key     store. (CVE-2017-10356)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: Libraries). Supported     versions that are affected are Java SE: 6u161, 7u151,     8u144 and 9; Java SE Embedded: 8u144. Easily exploitable     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability applies     to Java deployments, typically in clients running     sandboxed Java Web Start applications or sandboxed Java     applets, that load and run untrusted code (e.g., code     that comes from the internet) and rely on the Java     sandbox for security. This vulnerability does not apply     to Java deployments, typically in servers, that load and     run only trusted code (e.g., code installed by an     administrator). CVSS 3.0 Base Score 5.3 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2017-10348)

  - Vulnerability in the Java SE, Java SE Embedded, JRockit     component of Oracle Java SE (subcomponent:
    Serialization). Supported versions that are affected are     Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded:
    8u144; JRockit: R28.3.15. Easily exploitable     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded, JRockit. Successful attacks of     this vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded, JRockit. Note: This vulnerability     can be exploited through sandboxed Java Web Start     applications and sandboxed Java applets. It can also be     exploited by supplying data to APIs in the specified     Component without using sandboxed Java Web Start     applications or sandboxed Java applets, such as through     a web service. CVSS 3.0 Base Score 5.3 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2017-10281)

  - Vulnerability in the Java SE, Java SE Embedded, JRockit     component of Oracle Java SE (subcomponent:
    Serialization). Supported versions that are affected are     Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded:
    8u144; JRockit: R28.3.15. Difficult to exploit     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded, JRockit. Successful attacks     require human interaction from a person other than the     attacker. Successful attacks of this vulnerability can     result in unauthorized ability to cause a partial denial     of service (partial DOS) of Java SE, Java SE Embedded,     JRockit. Note: This vulnerability can be exploited     through sandboxed Java Web Start applications and     sandboxed Java applets. It can also be exploited by     supplying data to APIs in the specified Component     without using sandboxed Java Web Start applications or     sandboxed Java applets, such as through a web service.
    CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS     Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
    (CVE-2017-10345)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: Serialization).
    Supported versions that are affected are Java SE: 6u161,     7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily     exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Java SE, Java SE Embedded. Successful attacks     of this vulnerability can result in unauthorized ability     to cause a partial denial of service (partial DOS) of     Java SE, Java SE Embedded. Note: This vulnerability     applies to Java deployments, typically in clients     running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability does     not apply to Java deployments, typically in servers,     that load and run only trusted code (e.g., code     installed by an administrator). CVSS 3.0 Base Score 5.3     (Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2017-10357)

  - It was discovered that the Kerberos client     implementation in the Libraries component of OpenJDK     used the sname field from the plain text part rather     than encrypted part of the KDC reply message. A man-in-     the-middle attacker could possibly use this flaw to     impersonate Kerberos services to Java applications     acting as Kerberos clients. (CVE-2017-10388)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: JAX-WS). Supported     versions that are affected are Java SE: 7u151, 8u144 and     9; Java SE Embedded: 8u144. Easily exploitable     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of Java     SE, Java SE Embedded. Note: This vulnerability applies     to Java deployments, typically in clients running     sandboxed Java Web Start applications or sandboxed Java     applets, that load and run untrusted code (e.g., code     that comes from the internet) and rely on the Java     sandbox for security. This vulnerability does not apply     to Java deployments, typically in servers, that load and     run only trusted code (e.g., code installed by an     administrator). CVSS 3.0 Base Score 5.3 (Availability     impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2017-10350)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: Hotspot). Supported     versions that are affected are Java SE: 6u161, 7u151,     8u144 and 9; Java SE Embedded: 8u144. Easily exploitable     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks require human     interaction from a person other than the attacker and     while the vulnerability is in Java SE, Java SE Embedded,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     takeover of Java SE, Java SE Embedded. Note: This     vulnerability applies to Java deployments, typically in     clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability does     not apply to Java deployments, typically in servers,     that load and run only trusted code (e.g., code     installed by an administrator). CVSS 3.0 Base Score 9.6     (Confidentiality, Integrity and Availability impacts).
    CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    (CVE-2017-10346)

  - Vulnerability in the Java SE, Java SE Embedded component     of Oracle Java SE (subcomponent: RMI). Supported     versions that are affected are Java SE: 6u161, 7u151,     8u144 and 9; Java SE Embedded: 8u144. Easily exploitable     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, Java SE Embedded. Successful attacks require human     interaction from a person other than the attacker and     while the vulnerability is in Java SE, Java SE Embedded,     attacks may significantly impact additional products.
    Successful attacks of this vulnerability can result in     takeover of Java SE, Java SE Embedded. Note: This     vulnerability applies to Java deployments, typically in     clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code     (e.g., code that comes from the internet) and rely on     the Java sandbox for security. This vulnerability does     not apply to Java deployments, typically in servers,     that load and run only trusted code (e.g., code     installed by an administrator). CVSS 3.0 Base Score 9.6     (Confidentiality, Integrity and Availability impacts).
    CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
    (CVE-2017-10285)

  - Vulnerability in the Java SE, JRockit component of     Oracle Java SE (subcomponent: Serialization). Supported     versions that are affected are Java SE: 6u161, 7u151,     8u144 and 9; Java SE Embedded: 8u144. Easily exploitable     vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise Java     SE, JRockit. Successful attacks of this vulnerability     can result in unauthorized ability to cause a partial     denial of service (partial DOS) of Java SE, JRockit.
    Note: This vulnerability applies to Java deployments,     typically in clients running sandboxed Java Web Start     applications or sandboxed Java applets, that load and     run untrusted code (e.g., code that comes from the     internet) and rely on the Java sandbox for security.
    This vulnerability does not apply to Java deployments,     typically in servers, that load and run only trusted     code (e.g., code installed by an administrator). CVSS     3.0 Base Score 5.3 (Availability impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
    (CVE-2017-10347)

  - Vulnerability in the Java SE component of Oracle Java SE     (subcomponent: Smart Card IO). Supported versions that     are affected are Java SE: 6u161, 7u151, 8u144 and 9.
    Difficult to exploit vulnerability allows     unauthenticated attacker with network access via     multiple protocols to compromise Java SE. Successful     attacks require human interaction from a person other     than the attacker. Successful attacks of this     vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all     Java SE accessible data as well as unauthorized access     to critical data or complete access to all Java SE     accessible data. Note: This vulnerability applies to     Java deployments, typically in clients running sandboxed     Java Web Start applications or sandboxed Java applets,     that load and run untrusted code (e.g., code that comes     from the internet) and rely on the Java sandbox for     security. This vulnerability does not apply to Java     deployments, typically in servers, that load and run     only trusted code (e.g., code installed by an     administrator). CVSS 3.0 Base Score 6.8 (Confidentiality     and Integrity impacts). CVSS Vector:
    (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N).
    (CVE-2017-10274)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has sssd packages installed that are affected by a vulnerability:

  - It was found that sssd's sysdb_search_user_by_upn_res()     function did not sanitize requests when querying its     local cache and was vulnerable to injection. In a     centralized login environment, if a password hash was     locally cached for a given user, an authenticated     attacker could use this flaw to retrieve it.
    (CVE-2017-12173)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has curl packages installed that are affected by a vulnerability:

  - A buffer overrun flaw was found in the IMAP handler of     libcurl. By tricking an unsuspecting user into     connecting to a malicious IMAP server, an attacker could     exploit this flaw to potentially cause information     disclosure or crash the application. (CVE-2017-1000257)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities:

  - A privacy flaw was discovered in Firefox. In Private     Browsing mode, a web worker could write persistent data     to IndexedDB, which was not cleared when exiting and     would persist across multiple sessions. A malicious     website could exploit the flaw to bypass private-     browsing protections and uniquely fingerprint visitors.
    (CVE-2017-7843)

  - A use-after-free vulnerability can occur when flushing     and resizing layout because the PressShell object has     been freed while still in use. This results in a     potentially exploitable crash during these operations.
    This vulnerability affects Firefox < 57, Firefox ESR <     52.5, and Thunderbird < 52.5. (CVE-2017-7828)

  - Memory safety bugs were reported in Firefox 56 and     Firefox ESR 52.4. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Firefox < 57, Firefox     ESR < 52.5, and Thunderbird < 52.5. (CVE-2017-7826)

  - The Resource Timing API incorrectly revealed navigations     in cross-origin iframes. This is a same-origin policy     violation and could allow for data theft of URLs loaded     by users. This vulnerability affects Firefox < 57,     Firefox ESR < 52.5, and Thunderbird < 52.5.
    (CVE-2017-7830)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has apr packages installed that are affected by a vulnerability:

  - An out-of-bounds array dereference was found in     apr_time_exp_get(). An attacker could abuse an     unvalidated usage of this function to cause a denial of     service or potentially lead to data leak.
    (CVE-2017-12613)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
127165	NewStart CGSL MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0014)	high
127164	NewStart CGSL MAIN 5.04 : ruby Multiple Vulnerabilities (NS-SA-2019-0013)	critical
127163	NewStart CGSL MAIN 5.04 : libreoffice Vulnerability (NS-SA-2019-0013)	critical
127162	NewStart CGSL MAIN 5.04 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0012)	high
127161	NewStart CGSL MAIN 5.04 : glibc Multiple Vulnerabilities (NS-SA-2019-0012)	high
127160	NewStart CGSL MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0011)	critical
127159	NewStart CGSL MAIN 5.04 : bind Vulnerability (NS-SA-2019-0011)	high
127158	NewStart CGSL MAIN 5.04 : quagga Vulnerability (NS-SA-2019-0010)	critical
127157	NewStart CGSL MAIN 5.04 : dhcp Multiple Vulnerabilities (NS-SA-2019-0010)	high
127156	NewStart CGSL MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0009)	critical
127155	NewStart CGSL MAIN 5.04 : 389-ds-base Multiple Vulnerabilities (NS-SA-2019-0009)	high
127154	NewStart CGSL MAIN 5.04 : python Multiple Vulnerabilities (NS-SA-2019-0008)	high
127153	NewStart CGSL MAIN 5.04 : mailman Vulnerability (NS-SA-2019-0008)	medium
127152	NewStart CGSL MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0007)	medium
127151	NewStart CGSL MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0006)	critical
127150	NewStart CGSL MAIN 5.04 : postgresql Multiple Vulnerabilities (NS-SA-2019-0006)	medium
127149	NewStart CGSL MAIN 5.04 : qemu-kvm Multiple Vulnerabilities (NS-SA-2019-0005)	high
127148	NewStart CGSL MAIN 5.04 : procmail Vulnerability (NS-SA-2019-0005)	critical
127147	NewStart CGSL MAIN 5.04 : liblouis Vulnerability (NS-SA-2019-0004)	critical
127146	NewStart CGSL MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0004)	high
127145	NewStart CGSL MAIN 5.04 : samba Multiple Vulnerabilities (NS-SA-2019-0003)	critical
127144	NewStart CGSL MAIN 5.04 : java-1.7.0-openjdk Multiple Vulnerabilities (NS-SA-2019-0003)	critical
127143	NewStart CGSL MAIN 5.04 : sssd Vulnerability (NS-SA-2019-0002)	high
127142	NewStart CGSL MAIN 5.04 : curl Vulnerability (NS-SA-2019-0002)	critical
127141	NewStart CGSL MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0001)	critical
127140	NewStart CGSL MAIN 5.04 : apr Vulnerability (NS-SA-2019-0001)	high

Detections

Analytics

NewStart CGSL Local Security Checks Family for Nessus

high

critical

critical

high

high

critical

high

critical

high

critical

high

high

medium

medium

critical

medium

high

critical

critical

high

critical

critical

high

critical

critical

high