The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6372 advisory.

    The GNU Debugger (GDB) allows users to debug programs written in various programming languages including     C, C++, and Fortran.

    Security Fix(es):

    * libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c (CVE-2021-3826)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6621 advisory.

    The protobuf-c packages provide C bindings for Google's Protocol Buffers.

    Security Fix(es):

    * protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6632 advisory.

    The shadow-utils packages include programs for converting UNIX password files to the shadow password     format, as well as utilities for managing user and group accounts.

    Security Fix(es):

    * shadow-utils: possible password leak during passwd(1) change (CVE-2023-4641)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6482 advisory.

    The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows     you to communicate with AMQP servers using protocol version 0-9-1.

    Security Fix(es):

    * rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6324 advisory.

    pip is a package management system used to install and manage software packages written in Python. Many     packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for     either Pip Installs Packages or Pip Installs Python.

    Security Fix(es):

    * python: tarfile module directory traversal (CVE-2007-4559)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6635 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    The following packages have been upgraded to a later upstream version: c-ares (1.19.1). (BZ#2210370)

    Security Fix(es):

    * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)

    * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)

    * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)

    * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6746 advisory.

    libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C.

    Security Fix(es):

    * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)     (CVE-2023-44487)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6679 advisory.

    The curl packages provide the libcurl library and the curl utility for downloading files from servers     using various protocols, including HTTP, FTP, and LDAP.

    Security Fix(es):

    * curl: GSS delegation too eager connection re-use (CVE-2023-27536)

    * curl: TELNET option IAC injection (CVE-2023-27533)

    * curl: SFTP path ~ resolving discrepancy (CVE-2023-27534)

    * curl: SSH connection too eager reuse still (CVE-2023-27538)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6316 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6292 advisory.

    The curl packages provide the libcurl library and the curl utility for downloading files from servers     using various protocols, including HTTP, FTP, and LDAP.

    Security Fix(es):

    * curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321)

    * curl: cookie injection with none file (CVE-2023-38546)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6291 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6290 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: TLS handshake bypass (CVE-2023-40217)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6264 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6267 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)

    * SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6284 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6266 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)

    * SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

    * SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6268 advisory.

    Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data     objects.

    Security Fix(es):

    * SQUID-2023:3 squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847)

    * SQUID-2023:1 squid: Request/Response smuggling in HTTP/1.1 and ICAP (CVE-2023-46846)

    * SQUID-2023:5 squid: denial of Service in FTP (CVE-2023-46848)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6246 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.113 and .NET Runtime 7.0.13.

    Security Fix(es):

    * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6265 advisory.

    The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript     translates PostScript code to common bitmap formats so that the code can be displayed or printed.

    Security Fix(es):

    * Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents     (CVE-2023-43115)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6282 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6283 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6247 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.113 and .NET Runtime 7.0.13.

    Security Fix(es):

    * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6245 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.124 and .NET Runtime 6.0.24.

    Security Fix(es):

    * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6249 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.124 and .NET Runtime 6.0.24.

    Security Fix(es):

    * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6242 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.124 and .NET Runtime 6.0.24.

    Security Fix(es):

    * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6236 advisory.

    The binutils packages provide a collection of binary utilities for the manipulation of object code in     various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf,     size, strings, strip, and addr2line utilities.

    Security Fix(es):

    * binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault     (CVE-2022-4285)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6227 advisory.

    Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of     architectures. The qemu-kvm packages provide the user-space component for running virtual machines that     use KVM.

    Security Fix(es):

    * QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of     service (CVE-2023-3354)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6206 advisory.

    Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web     applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster),     the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.

    This release of Red Hat JBoss Web Server 5.7.6 serves as a replacement for Red Hat JBoss Web Server 5.7.5.
    This release includes bug fixes, enhancements and component upgrades, which are documented in the Release     Notes, linked to in the References section.

    Security Fix(es):

    * tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)

    * tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6209 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    Security Fix(es):

    * samba: smbd allows client access to unix domain sockets on the file system as root (CVE-2023-3961)

    * samba: SMB clients can truncate files with read-only permissions (CVE-2023-4091)

    * samba: rpcecho development server allows denial of service via sleep() call on AD DC (CVE-2023-42669)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6195 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.4.1.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6189 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.4.0 ESR.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6191 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.4.1.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6188 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.4.0 ESR.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6199 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.4.0 ESR.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6197 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.4.1.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6194 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.4.1.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6190 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.4.0 ESR.

    Security Fix(es):

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6196 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.4.1.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6192 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.4.1.

    Security Fix(es):

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6186 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.4.0 ESR.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6187 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.4.0 ESR.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6185 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.4.0 ESR.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6198 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 115.4.1.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:6162 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 115.4.0 ESR.

    Security Fix(es):

    * Mozilla: Queued up rendering could have allowed websites to clickjack (CVE-2023-5721)

    * Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4     (CVE-2023-5730)

    * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

    * Mozilla: Large WebGL draw could have led to a crash (CVE-2023-5724)

    * Mozilla: WebExtensions could open arbitrary URLs (CVE-2023-5725)

    * Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    (CVE-2023-5728)

    * Mozilla: Address bar spoofing via bidirectional characters (CVE-2023-5732)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6167 advisory.

    The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and     libraries allowing users to access and modify virtual machine (VM) disk images.

    Security Fix(es):

    * NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image     (CVE-2022-40284)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6168 advisory.

    The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and     libraries allowing users to access and modify virtual machine (VM) disk images.

    Security Fix(es):

    * NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image     (CVE-2022-40284)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:5992 advisory.

    Python is an interpreted, interactive, object-oriented programming language that supports modules,     classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a     stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and     PostgreSQL.

    Security Fix(es):

    * python: TLS handshake bypass (CVE-2023-40217)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6022 advisory.

    Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't     have to create the same web page over and over again, giving the website a significant speed up.

    Security Fix(es):

    * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)     (CVE-2023-44487)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6021 advisory.

    Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't     have to create the same web page over and over again, giving the website a significant speed up.

    Security Fix(es):

    * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)     (CVE-2023-44487)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6105 advisory.

    Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This     software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under     Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update     experience.

    This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 1 serves as a     replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.57, and includes bug fixes and     enhancements, which are documented in the Release Notes linked to in the References section.

    Security Fix(es):

    * nghttp2: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset     Attack) [Major Incident] (CVE-2023-44487)

    A Red Hat Security Bulletin which addresses further details about this flaw is available in the References     section.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
185096	RHEL 9 : gdb (RHSA-2023:6372)	medium
185095	RHEL 9 : protobuf-c (RHSA-2023:6621)	medium
185094	RHEL 9 : shadow-utils (RHSA-2023:6632)	medium
185093	RHEL 9 : librabbitmq (RHSA-2023:6482)	medium
185092	RHEL 9 : python3.11-pip (RHSA-2023:6324)	critical
185091	RHEL 9 : c-ares (RHSA-2023:6635)	high
185090	RHEL 9 : nghttp2 (RHSA-2023:6746)	critical
185089	RHEL 9 : curl (RHSA-2023:6679)	high
185088	RHEL 9 : pcs (RHSA-2023:6316)	high
184277	RHEL 8 : curl (RHSA-2023:6292)	medium
184276	RHEL 9 : c-ares (RHSA-2023:6291)	high
184275	RHEL 6 : python (RHSA-2023:6290)	critical
184208	RHEL 8 : insights-client (RHSA-2023:6264)	high
184207	RHEL 8 : squid:4 (RHSA-2023:6267)	medium
184206	RHEL 8 : insights-client (RHSA-2023:6284)	high
184205	RHEL 9 : squid (RHSA-2023:6266)	medium
184204	RHEL 9 : squid (RHSA-2023:6268)	medium
184203	RHEL 9 : .NET 7.0 (RHSA-2023:6246)	medium
184202	RHEL 9 : ghostscript (RHSA-2023:6265)	high
184201	RHEL 9 : insights-client (RHSA-2023:6282)	high
184200	RHEL 8 : insights-client (RHSA-2023:6283)	high
184174	RHEL 8 : .NET 7.0 (RHSA-2023:6247)	medium
184173	RHEL 8 : .NET 6.0 (RHSA-2023:6245)	medium
184172	RHEL 7 : .NET 6.0 (RHSA-2023:6249)	medium
184171	RHEL 9 : .NET 6.0 (RHSA-2023:6242)	medium
184134	RHEL 8 : binutils (RHSA-2023:6236)	medium
184133	RHEL 9 : qemu-kvm (RHSA-2023:6227)	high
184077	RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.7.6 (RHSA-2023:6206)	medium
184076	RHEL 9 : samba (RHSA-2023:6209)	critical
184051	RHEL 8 : thunderbird (RHSA-2023:6195)	critical
184050	RHEL 8 : firefox (RHSA-2023:6189)	critical
184049	RHEL 9 : thunderbird (RHSA-2023:6191)	critical
184048	RHEL 9 : firefox (RHSA-2023:6188)	critical
184047	RHEL 9 : firefox (RHSA-2023:6199)	critical
184046	RHEL 8 : thunderbird (RHSA-2023:6197)	critical
184045	RHEL 8 : thunderbird (RHSA-2023:6194)	critical
184044	RHEL 8 : firefox (RHSA-2023:6190)	high
184043	RHEL 8 : thunderbird (RHSA-2023:6196)	critical
184042	RHEL 9 : thunderbird (RHSA-2023:6192)	high
184041	RHEL 8 : firefox (RHSA-2023:6186)	critical
184040	RHEL 8 : firefox (RHSA-2023:6187)	critical
184039	RHEL 8 : firefox (RHSA-2023:6185)	critical
184038	RHEL 8 : thunderbird (RHSA-2023:6198)	critical
184022	RHEL 7 : firefox (RHSA-2023:6162)	critical
184021	RHEL 9 : libguestfs-winsupport (RHSA-2023:6167)	high
184020	RHEL 9 : libguestfs-winsupport (RHSA-2023:6168)	high
183995	RHEL 8 : python27:2.7 (RHSA-2023:5992)	critical
183972	RHEL 8 : varnish:6 (RHSA-2023:6022)	critical
183971	RHEL 8 : varnish:6 (RHSA-2023:6021)	critical
183922	RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP1 (RHSA-2023:6105)	critical

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

medium

medium

medium

medium

critical

high

critical

high

high

medium

high

critical

high

medium

high

medium

medium

medium

high

high

high

medium

medium

medium

medium

medium

high

medium

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

high

critical

critical

critical

critical

critical

high

high

critical

critical

critical

critical