The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0396 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0203 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)

    * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Prepare for the next quarterly OpenJDK upstream release (2023-01, 8u362) (BZ#2150191)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0395 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * i40e sriov virtual functions not created (BZ#2140104)

    * Data corruption on small files served by httpd, which is backed by cifs-mount (BZ#2144470)

    * The kernel BUG at mm/usercopy.c:103! from BZ 2041529 is back on rhel-8.5 (BZ#2153233)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0397 advisory.

    The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote     directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the     Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to     connect to multiple different account sources.

    Security Fix(es):

    * sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters (CVE-2022-4254)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0392 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update RT source tree to the latest RHEL-8.2.z23 Batch (BZ#2150054)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0383 advisory.

    X.Org X11 libXpm runtime library.

    Security Fix(es):

    * libXpm: compression commands depend on $PATH (CVE-2022-4883)

    * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)

    * libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0377 advisory.

    The libXpm packages contain the X Pixmap parser library.

    Security Fix(es):

    * libXpm: compression commands depend on $PATH (CVE-2022-4883)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0384 advisory.

    X.Org X11 libXpm runtime library.

    Security Fix(es):

    * libXpm: compression commands depend on $PATH (CVE-2022-4883)

    * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)

    * libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0380 advisory.

    X.Org X11 libXpm runtime library.

    Security Fix(es):

    * libXpm: compression commands depend on $PATH (CVE-2022-4883)

    * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)

    * libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0209 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)

    * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0205 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)

    * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0379 advisory.

    X.Org X11 libXpm runtime library.

    Security Fix(es):

    * libXpm: compression commands depend on $PATH (CVE-2022-4883)

    * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)

    * libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0207 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)

    * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0381 advisory.

    X.Org X11 libXpm runtime library.

    Security Fix(es):

    * libXpm: compression commands depend on $PATH (CVE-2022-4883)

    * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)

    * libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0378 advisory.

    X.Org X11 libXpm runtime library.

    Security Fix(es):

    * libXpm: compression commands depend on $PATH (CVE-2022-4883)

    * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)

    * libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0382 advisory.

    X.Org X11 libXpm runtime library.

    Security Fix(es):

    * libXpm: compression commands depend on $PATH (CVE-2022-4883)

    * libXpm: Runaway loop on width of 0 and enormous height (CVE-2022-44617)

    * libXpm: Infinite loop on unclosed comments (CVE-2022-46285)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0206 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)

    * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0304 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * libreoffice: Macro URL arbitrary script execution (CVE-2022-3140)

    * libreoffice: Execution of Untrusted Macros Due to Improper Certificate Validation (CVE-2022-26305)

    * libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without     Knowing the Master Password (CVE-2022-26306)

    * libreoffice: Weak Master Keys (CVE-2022-26307)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0293 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0328 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    The golang packages provide the Go programming language compiler.

    Security Fix(es):

    * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879)

    * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)

    * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Internal linking fails on ppc64le (BZ#2144547)

    * crypto testcases fail on golang on s390x [rhel-9] (BZ#2149311)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0294 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.7.0 ESR.

    Security Fix(es):

    * Mozilla: libusrsctp library out of date (CVE-2022-46871)

    * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)

    * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)

    * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)

    * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)

    * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers     (CVE-2023-23602)

    * Mozilla: Fullscreen notification bypass (CVE-2022-46877)

    * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive     (CVE-2023-23603)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0204 advisory.

    The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java     Software Development Kit.

    Security Fix(es):

    * OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)

    * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0337 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate     (CVE-2022-43680)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0348 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)

    * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

    * kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)

    * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0336 advisory.

    The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and     LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for     starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.
    In addition, it supports snapshotting and restoring of the system state, maintains mount and automount     points, and implements an elaborate transactional dependency-based service control logic. It can also work     as a drop-in replacement for sysvinit.

    Security Fix(es):

    * systemd: buffer overrun in format_timespan() function (CVE-2022-3821)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0303 advisory.

    The USBGuard software framework provides system protection against intrusive USB devices by implementing     basic whitelisting and blacklisting capabilities based on device attributes. To enforce a user-defined     policy, USBGuard uses the Linux kernel USB device authorization feature.

    Security Fix(es):

    * usbguard: Fix unauthorized access via D-Bus (CVE-2019-25058)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0335 advisory.

    D-Bus is a system for sending messages between applications. It is used both for the system-wide message     bus service, and as a per-user-login-session messaging facility.

    Security Fix(es):

    * dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets     (CVE-2022-42010)

    * dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type     (CVE-2022-42011)

    * dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with foreign endianness correctly     (CVE-2022-42012)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0339 advisory.

    SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A     complete database is stored in a single disk file. The API is designed for convenience and ease of use.
    Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the     administrative hassles of supporting a separate database server.

    Security Fix(es):

    * sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API     (CVE-2022-35737)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0300 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)

    * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

    * kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)

    * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)

    * kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)

    * kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * DELL EMC: System is not booting into RT Kernel with perc12 [kernel-rt] (BZ#2139863)

    * kernel-rt: update RT source tree to the latest RHEL-9.1.z1 Batch (BZ#2141817)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0290 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.7.0 ESR.

    Security Fix(es):

    * Mozilla: libusrsctp library out of date (CVE-2022-46871)

    * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)

    * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)

    * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)

    * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)

    * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers     (CVE-2023-23602)

    * Mozilla: Fullscreen notification bypass (CVE-2022-46877)

    * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive     (CVE-2023-23603)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0343 advisory.

    A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T     recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690)     encoding and decoding functions.

    Security Fix(es):

    * libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0302 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)

    * libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)

    * libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)

    * libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)

    * libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0318 advisory.

    PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package     includes the .jar files needed for Java programs to access a PostgreSQL database.

    Security Fix(es):

    * postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names (CVE-2022-31197)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0321 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    The following packages have been upgraded to a later upstream version: nodejs (16.18.1), nodejs-nodemon     (2.0.20).

    Security Fix(es):

    * minimist: prototype pollution (CVE-2021-44906)

    * nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)

    * nodejs: HTTP Request Smuggling due to incorrect parsing of header fields (CVE-2022-35256)

    * nodejs: DNS rebinding in inspect via invalid octal IP address (CVE-2022-43548)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * nodejs: Packaged version of undici does not fit with declared version. [rhel-9] (BZ#2151627)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0194 advisory.

    The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java     Software Development Kit.

    Security Fix(es):

    * OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)

    * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only     mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS     database.  This update allows more control over database use using two new properties - fips.nssdb.path     and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via     command-line arguments to the Java virtual machine (RHBZ#2147476)

    * Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [rhel-9] (BZ#2153097)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0334 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: watch queue race condition can lead to privilege escalation (CVE-2022-2959)

    * kernel: memory corruption in AX88179_178A based USB ethernet device. (CVE-2022-2964)

    * kernel: i915: Incorrect GPU TLB flush can lead to random memory access (CVE-2022-4139)

    * kernel: nfsd buffer overflow by RPC message over TCP with garbage data (CVE-2022-43945)

    * kernel: i2c: unbounded length leads to buffer overflow in ismt_access() (CVE-2022-3077)

    * kernel: Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Intel 9.2: Important iavf bug fixes (BZ#2127884)

    * vfio zero page mappings fail after 2M instances (BZ#2128514)

    * nvme-tcp automatic reconnect fails intermittently during EMC powerstore NDU operation (BZ#2131359)

    * ice: Driver Update to 5.19 (BZ#2132070)

    * WARNING: CPU: 116 PID: 3440 at arch/x86/mm/extable.c:105 ex_handler_fprestore+0x3f/0x50 (BZ#2134588)

    * drm: duplicated call of drm_privacy_screen_register_notifier() in drm_connector_register() (BZ#2134619)

    * updating the appid field through sysfs is returning an -EINVAL error (BZ#2136914)

    * DELL EMC: System is not booting into RT Kernel with perc12. (BZ#2139213)

    * No signal showed in the VGA monitor when installing RHEL9 in the legacy bios mode (BZ#2140153)

    * Practically limit Dummy wait workaround to old Intel systems (BZ#2142168)

    * ppc64le: unexpected oom panic when there's enough memory left in zswap test (BZ#2143976)

    * fatal error: error in backend: Branch target out of insn range (BZ#2144902)

    * AMdCLIENT: The kernel command line parameter nomodeset not working properly (BZ#2145217)

    * Azure: PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (BZ#2150910)

    * Azure z-stream: Sometimes newly deployed VMs are not getting accelerated network during provisioning     (BZ#2151605)

    * DELL 9.0 RT - On PE R760 system, call traces are observed dmesg when system is running stress     (BZ#2154407)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0333 advisory.

    The curl packages provide the libcurl library and the curl utility for downloading files from servers     using various protocols, including HTTP, FTP, and LDAP.

    Security Fix(es):

    * curl: POST following PUT confusion (CVE-2022-32221)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0289 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.7.0 ESR.

    Security Fix(es):

    * Mozilla: libusrsctp library out of date (CVE-2022-46871)

    * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)

    * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)

    * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)

    * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)

    * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers     (CVE-2023-23602)

    * Mozilla: Fullscreen notification bypass (CVE-2022-46877)

    * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive     (CVE-2023-23603)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0340 advisory.

    The bash packages provide Bash (Bourne-again shell), which is the default shell for Red Hat Enterprise     Linux.

    Security Fix(es):

    * bash: a heap-buffer-overflow in valid_parameter_transform (CVE-2022-3715)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0338 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: integer overflows with XML_PARSE_HUGE (CVE-2022-40303)

    * libxml2: dict corruption caused by entity reference cycles (CVE-2022-40304)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0287 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0280 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0282 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0286 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.7.0 ESR.

    Security Fix(es):

    * Mozilla: libusrsctp library out of date (CVE-2022-46871)

    * Mozilla: Arbitrary file read from GTK drag and drop on Linux (CVE-2023-23598)

    * Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 (CVE-2023-23605)

    * Mozilla: Malicious command could be hidden in devtools output (CVE-2023-23599)

    * Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation (CVE-2023-23601)

    * Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers     (CVE-2023-23602)

    * Mozilla: Fullscreen notification bypass (CVE-2022-46877)

    * Mozilla: Calls to <code>console.log</code> allowed bypasing Content Security Policy via format directive     (CVE-2023-23603)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0281 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:8860 advisory.

    Security Fix(es):

    * Incorrect parsing of nullchar in the proto symbol leads to Nullptr     dereference (CVE-2021-22570)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:8863 advisory.

    Paramiko (a combination of the esperanto words for paranoid and friend) is     a module for python 2.3 or greater that implements the SSH2 protocol for     secure (encrypted and authenticated) connections to remote machines. Unlike     SSL (aka TLS), the SSH2 protocol does not require heirarchical certificates     signed by a powerful central authority. You may know SSH2 as the protocol     that replaced telnet and rsh for secure access to remote shells, but the     protocol also includes the ability to open arbitrary channels to remote     services across an encrypted tunnel. (This is how sftp works, for example.)

    Security Fix(es):

    * Race condition in the write_private_key_file function (CVE-2022-24302)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6531 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.10.33. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHBA-2022:6532

    Security Fix(es):

    * jenkins-plugin: Arbitrary file write vulnerability in Pipeline Input Step     Plugin (CVE-2022-34177)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s)     listed in the References section.

    All OpenShift Container Platform 4.10 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8846 advisory.

    Puppet lets you centrally manage every important aspect of your system using a     cross-platform specification language that manages all the separate elements     normally aggregated in different files, like users, cron jobs, and hosts,     along with obviously discrete elements like packages, services, and files. Provides the central puppet     server daemon which provides manifests to clients.
    The server can also function as a certificate authority and file server. This puppet headless subpackage     may be used when there is no need to     have puppet agent running as a service, for example, in a container     image.

    Security fix(es):

    puppet: silent configuration failure in agent: (CVE-2021-27025)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments,     and other related information, refer to the CVE page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8873 advisory.

    The OpenStack Oslo Utility library.

    Security Fix(es):

    * incorrect password masking in debug output (CVE-2022-0718)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
170491	RHEL 8 : kpatch-patch (RHSA-2023:0396)	high
170490	RHEL 7 : java-1.8.0-openjdk (RHSA-2023:0203)	medium
170480	RHEL 8 : kernel (RHSA-2023:0395)	high
170479	RHEL 8 : sssd (RHSA-2023:0397)	high
170475	RHEL 8 : kernel-rt (RHSA-2023:0392)	high
170470	RHEL 9 : libXpm (RHSA-2023:0383)	high
170468	RHEL 7 : libXpm (RHSA-2023:0377)	high
170466	RHEL 8 : libXpm (RHSA-2023:0384)	high
170465	RHEL 8 : libXpm (RHSA-2023:0380)	high
170463	RHEL 9 : java-1.8.0-openjdk (RHSA-2023:0209)	medium
170456	RHEL 8 : java-1.8.0-openjdk (RHSA-2023:0205)	medium
170455	RHEL 8 : libXpm (RHSA-2023:0379)	high
170454	RHEL 8 : java-1.8.0-openjdk (RHSA-2023:0207)	medium
170449	RHEL 9 : libXpm (RHSA-2023:0381)	high
170446	RHEL 8 : libXpm (RHSA-2023:0378)	high
170435	RHEL 8 : libXpm (RHSA-2023:0382)	high
170429	RHEL 8 : java-1.8.0-openjdk (RHSA-2023:0206)	medium
170427	RHEL 9 : libreoffice (RHSA-2023:0304)	high
170426	RHEL 8 : sudo (RHSA-2023:0293)	high
170425	RHEL 9 : go-toolset and golang (RHSA-2023:0328)	high
170424	RHEL 8 : firefox (RHSA-2023:0294)	high
170423	RHEL 8 : java-1.8.0-openjdk (RHSA-2023:0204)	medium
170422	RHEL 9 : expat (RHSA-2023:0337)	high
170421	RHEL 9 : kpatch-patch (RHSA-2023:0348)	high
170420	RHEL 9 : systemd (RHSA-2023:0336)	medium
170419	RHEL 9 : usbguard (RHSA-2023:0303)	high
170418	RHEL 9 : dbus (RHSA-2023:0335)	medium
170416	RHEL 9 : sqlite (RHSA-2023:0339)	high
170414	RHEL 9 : kernel-rt (RHSA-2023:0300)	high
170411	RHEL 8 : firefox (RHSA-2023:0290)	high
170410	RHEL 9 : libtasn1 (RHSA-2023:0343)	critical
170408	RHEL 9 : libtiff (RHSA-2023:0302)	medium
170407	RHEL 9 : postgresql-jdbc (RHSA-2023:0318)	high
170406	RHEL 9 : nodejs and nodejs-nodemon (RHSA-2023:0321)	critical
170405	RHEL 9 : java-17-openjdk (RHSA-2023:0194)	low
170404	RHEL 9 : kernel (RHSA-2023:0334)	high
170403	RHEL 9 : curl (RHSA-2023:0333)	critical
170402	RHEL 8 : firefox (RHSA-2023:0289)	high
170401	RHEL 9 : bash (RHSA-2023:0340)	high
170400	RHEL 9 : libxml2 (RHSA-2023:0338)	high
170394	RHEL 6 : sudo (RHSA-2023:0287)	high
170393	RHEL 8 : sudo (RHSA-2023:0280)	high
170392	RHEL 9 : sudo (RHSA-2023:0282)	high
170390	RHEL 9 : firefox (RHSA-2023:0286)	high
170389	RHEL 9 : sudo (RHSA-2023:0281)	high
170388	RHEL 8 : Red Hat OpenStack Platform 16.1.9 (protobuf) (RHSA-2022:8860)	medium
170387	RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-paramiko) (RHSA-2022:8863)	medium
170386	RHEL 8 : OpenShift Container Platform 4.10.33 (RHSA-2022:6531)	high
170385	RHEL 8 : Red Hat OpenStack Platform 16.2.4 (puppet) (RHSA-2022:8846)	medium
170384	RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-oslo-utils) (RHSA-2022:8873)	medium

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

medium

high

high

high

high

high

high

high

medium

medium

high

medium

high

high

high

medium

high

high

high

high

medium

high

high

medium

high

medium

high

high

high

critical

medium

high

critical

low

high

critical

high

high

high

high

high

high

high

high

medium

medium

high

medium

medium