The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3582 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.118 and .NET Runtime 6.0.18.

    The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212378)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3593 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.107 and .NET Runtime 7.0.7.

    The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211876)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument     (CVE-2023-32032)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3591 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3583 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3592 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.107 and .NET Runtime 7.0.7.

    The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.107). (BZ#2211877)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument     (CVE-2023-32032)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3585 advisory.

    Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an     emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of     third-party libraries.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3587 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3577 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)

    * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)

    * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3595 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3581 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.118 and .NET Runtime 6.0.18.

    The following packages have been upgraded to a later upstream version: dotnet6.0 (6.0.118). (BZ#2212379)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3586 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    * c-ares: Buffer Underwrite in ares_inet_net_pton() (CVE-2023-31130)

    * c-ares: Insufficient randomness in generation of DNS query IDs (CVE-2023-31147)

    * c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation (CVE-2023-31124)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3589 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3580 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.118 and .NET Runtime 6.0.18.

    The following packages have been upgraded to a later upstream version: rh-dotnet60-dotnet (6.0.118).
    (BZ#2211715)

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML (CVE-2023-24936)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3596 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3584 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3597 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3566 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3559 advisory.

    The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving     API.

    Security Fix(es):

    * c-ares: 0-byte UDP payload Denial of Service (CVE-2023-32067)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3561 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3565 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3564 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3567 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3562 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3560 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.12.0 ESR.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3563 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 102.12.0.

    Security Fix(es):

    * Mozilla: Click-jacking certificate exceptions through rendering lag (CVE-2023-34414)

    * Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 (CVE-2023-34416)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3556 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3550 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:3525 advisory.

    Flask is a lightweight but extensible web development framework for Python based on the Werkzeug WSGI     toolkit, and the Jinja 2 template engine.

    Security Fix(es):

    * flask: Possible disclosure of permanent session cookie due to missing Vary: Cookie header     (CVE-2023-30861)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3481 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command injection vulnerability in htmlfontify.el (CVE-2022-48339)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3491 advisory.

    Security Fix(es):

    * kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

    * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)

    * samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

    * kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222)

    * kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

    * openvswitch: ip proto 0 triggers incorrect handling (CVE-2023-1668)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3517 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c     (CVE-2022-42896)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3490 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

    * kernel: udmabuf: improper validation of array index leading to local privilege escalation     (CVE-2023-2008)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3462 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c     (CVE-2022-42896)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt: update RT source tree to the RHEL-8.4.z17 source tree (BZ#2185910)

    * RHEL-8.7 kernel-rt: INFO: task deadline_test:2526 blocked for more than 600 seconds. (BZ#2188652)

    * Crash: kernel BUG at kernel/locking/rtmutex.c:1338! (BZ#2188725)

    * kernel-rt: workqueue: Fix divergence from stock 8.4 (BZ#2209152)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3470 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

    * kernel: udmabuf: improper validation of array index leading to local privilege escalation     (CVE-2023-2008)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * kernel-rt-debug: BUG: MAX_LOCKDEP_CHAINS too low (BZ#2181286)

    * kernel-rt: update RT source tree to the latest RHEL-9.0.z9 Batch (BZ#2186491)

    * kernel-rt: INFO: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188662)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3465 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

    * kernel: udmabuf: improper validation of array index leading to local privilege escalation     (CVE-2023-2008)

    * kernel: use-after-free in Netfilter nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Intel QAT Update - (kernel changes) (BZ#2176848)

    * Significant performance drop for getrandom system call when FIPS is enabled (compared to RHEL 8)     (BZ#2183477)

    * Azure RHEL9 Backport upstream commit 93827a0a36396f2fd6368a54a020f420c8916e9b [KVM: VMX: Fix crash due     to uninitialized current_vmcs] (BZ#2186824)

    * kernel[-rt]: task deadline_test:1778 blocked for more than 622 seconds (BZ#2188657)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3460 advisory.

    The curl packages provide the libcurl library and the curl utility for downloading files from servers     using various protocols, including HTTP, FTP, and LDAP.

    Security Fix(es):

    * curl: HTTP compression denial of service (CVE-2022-32206)

    * curl: HTTP multi-header compression denial of service (CVE-2023-23916)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3461 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c     (CVE-2022-42896)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Ethernet Port Configuration Tool (EPCT) not supported with in-tree ice driver (BZ#2176867)

    * Proactively Backport MM fixes for el8.5 - 2nd round (BZ#2188306)

    * kernel[-rt]: task deadline_test:2526 blocked for more than 600 seconds. (BZ#2188626)

    * Dying percpu kworkers cause issues on isolated CPUs [rhel-8] (BZ#2189598)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3433 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: a use-after-free when processing maliciously crafted web content (CVE-2023-32373)

    * webkitgtk: an out-of-bounds read when processing malicious content (CVE-2023-28204)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3425 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3431 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

    * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3426 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3432 advisory.

    WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

    Security Fix(es):

    * webkitgtk: a use-after-free when processing maliciously crafted web content (CVE-2023-32373)

    * webkitgtk: an out-of-bounds read when processing malicious content (CVE-2023-28204)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3428 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3429 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3423 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3354 advisory.

    Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This     software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged     under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent     update experience.

    This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.51 Service Pack 2 serves as a     replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.51 Service Pack 1, and includes bug     fixes and enhancements, which are documented in the Release Notes document linked to in the References.

    Security Fix(es):

    * apr-util: out-of-bounds writes in the apr_base64 (CVE-2022-25147)
    * curl: HSTS bypass via IDN (CVE-2022-43551)
    * curl: HTTP Proxy deny use-after-free (CVE-2022-43552)
    * curl: HSTS ignored on multiple requests (CVE-2023-23914)
    * curl: HSTS amnesia with --parallel (CVE-2023-23915)
    * curl: HTTP multi-header compression denial of service (CVE-2023-23916)
    * curl: TELNET option IAC injection (CVE-2023-27533)
    * curl: SFTP path ~ resolving discrepancy (CVE-2023-27534)
    * httpd: mod_dav: out-of-bounds read/write of zero byte (CVE-2006-20001)
    * httpd: HTTP request splitting with mod_rewrite and mod_proxy (CVE-2023-25690)
    * openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)
    * openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450)
    * openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)
    * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3420 advisory.

    Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web     applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster),     the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.

    This release of Red Hat JBoss Web Server 5.7.3 serves as a replacement for Red Hat JBoss Web Server 5.7.2.
    This release includes bug fixes, enhancements and component upgrades, which are documented in the Release     Notes, linked to in the References.

    Security Fix(es):

    * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)
    * openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)
    * openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450)
    * openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3427 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3424 advisory.

    The cups-filters package contains back ends, filters, and other software that was once part of the core     Common UNIX Printing System (CUPS) distribution but is now maintained independently.

    Security Fix(es):

    * cups-filters: remote code execution in cups-filters, beh CUPS backend (CVE-2023-24805)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3349 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * The qede driver changes rx-usecs: to 256 causing performance impact (BZ#2176104)

    * Intel QAT Update - (kernel changes) (BZ#2176850)

    * In FIPS mode, kernel does not transition into error state when RCT or APT health tests fail (BZ#2181730)

    * smpboot: Scheduler frequency invariance went wobbly, disabling! on nohz_full CPUs after long run     (BZ#2188067)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
177316	RHEL 8 : .NET 6.0 (RHSA-2023:3582)	high
177315	RHEL 8 : .NET 7.0 (RHSA-2023:3593)	high
177314	RHEL 8 : python3 (RHSA-2023:3591)	high
177313	RHEL 9 : c-ares (RHSA-2023:3583)	high
177311	RHEL 9 : .NET 7.0 (RHSA-2023:3592)	high
177310	RHEL 9 : python3.11 (RHSA-2023:3585)	high
177309	RHEL 9 : thunderbird (RHSA-2023:3587)	critical
177308	RHEL 9 : nodejs:18 (RHSA-2023:3577)	medium
177306	RHEL 9 : python3.9 (RHSA-2023:3595)	high
177304	RHEL 9 : .NET 6.0 (RHSA-2023:3581)	high
177303	RHEL 9 : nodejs (RHSA-2023:3586)	medium
177302	RHEL 9 : firefox (RHSA-2023:3589)	critical
177301	RHEL 7 : .NET 6.0 (RHSA-2023:3580)	high
177300	RHEL 8 : thunderbird (RHSA-2023:3596)	critical
177299	RHEL 8 : c-ares (RHSA-2023:3584)	high
177298	RHEL 8 : firefox (RHSA-2023:3597)	critical
177292	RHEL 8 : thunderbird (RHSA-2023:3566)	critical
177291	RHEL 9 : c-ares (RHSA-2023:3559)	high
177290	RHEL 8 : firefox (RHSA-2023:3561)	critical
177289	RHEL 8 : thunderbird (RHSA-2023:3565)	critical
177288	RHEL 8 : thunderbird (RHSA-2023:3564)	critical
177287	RHEL 9 : thunderbird (RHSA-2023:3567)	critical
177286	RHEL 9 : firefox (RHSA-2023:3562)	critical
177285	RHEL 8 : firefox (RHSA-2023:3560)	critical
177284	RHEL 7 : thunderbird (RHSA-2023:3563)	critical
177096	RHEL 7 : python3 (RHSA-2023:3556)	high
176983	RHEL 6 : python (RHSA-2023:3550)	high
176891	RHEL 7 : python-flask (RHSA-2023:3525)	high
176770	RHEL 7 : emacs (RHSA-2023:3481)	high
176768	RHEL 8 : Red Hat Virtualization Host 4.4.z SP 1 (RHSA-2023:3491)	high
176760	RHEL 8 : kpatch-patch (RHSA-2023:3517)	high
176751	RHEL 9 : kpatch-patch (RHSA-2023:3490)	high
176750	RHEL 8 : kernel-rt (RHSA-2023:3462)	high
176749	RHEL 9 : kernel-rt (RHSA-2023:3470)	high
176748	RHEL 9 : kernel (RHSA-2023:3465)	high
176738	RHEL 8 : curl (RHSA-2023:3460)	medium
176737	RHEL 8 : kernel (RHSA-2023:3461)	high
176728	RHEL 8 : webkit2gtk3 (RHSA-2023:3433)	high
176727	RHEL 8 : cups-filters (RHSA-2023:3425)	high
176723	RHEL 8 : kpatch-patch (RHSA-2023:3431)	high
176722	RHEL 8 : cups-filters (RHSA-2023:3426)	high
176721	RHEL 9 : webkit2gtk3 (RHSA-2023:3432)	high
176720	RHEL 8 : cups-filters (RHSA-2023:3428)	high
176719	RHEL 8 : cups-filters (RHSA-2023:3429)	high
176718	RHEL 9 : cups-filters (RHSA-2023:3423)	high
176683	RHEL 7 / 8 : Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP2 (RHSA-2023:3354)	critical
176682	RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.7.3 (RHSA-2023:3420)	critical
176681	RHEL 8 : cups-filters (RHSA-2023:3427)	high
176680	RHEL 9 : cups-filters (RHSA-2023:3424)	high
176656	RHEL 8 : kernel (RHSA-2023:3349)	high

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

high

high

high

high

high

high

critical

medium

high

high

medium

critical

high

critical

high

critical

critical

high

critical

critical

critical

critical

critical

critical

critical

high

high

high

high

high

high

high

high

high

high

medium

high

high

high

high

high

high

high

high

high

critical

critical

high

high

high