The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4468 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.14.0 ESR.

    Security Fix(es):

    * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

    * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

    * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

    * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

    * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

    * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird     115.1, and Thunderbird 102.14 (CVE-2023-4056)

    * Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)

    * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4461 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.14.0 ESR.

    Security Fix(es):

    * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

    * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

    * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

    * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

    * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

    * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird     115.1, and Thunderbird 102.14 (CVE-2023-4056)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1     (CVE-2023-4057)

    * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4460 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.14.0 ESR.

    Security Fix(es):

    * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

    * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

    * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

    * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

    * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

    * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird     115.1, and Thunderbird 102.14 (CVE-2023-4056)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1     (CVE-2023-4057)

    * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4465 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.14.0 ESR.

    Security Fix(es):

    * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

    * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

    * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

    * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

    * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

    * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird     115.1, and Thunderbird 102.14 (CVE-2023-4056)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1     (CVE-2023-4057)

    * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4463 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.14.0 ESR.

    Security Fix(es):

    * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

    * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

    * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

    * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

    * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

    * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird     115.1, and Thunderbird 102.14 (CVE-2023-4056)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1     (CVE-2023-4057)

    * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4464 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 102.14.0 ESR.

    Security Fix(es):

    * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

    * Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

    * Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

    * Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

    * Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

    * Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird     115.1, and Thunderbird 102.14 (CVE-2023-4056)

    * Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1     (CVE-2023-4057)

    * Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4340 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * automation controller: Html injection in custom login info (CVE-2023-3971)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional changes:

    * Org admin users are no longer shown an error on Instances list. (AAP-11195)
    * Fixed workflow job within workflow approval to display correct details. (AAP-11433)
    * Credential name search in ad-hoc commands prompt no longer requires case-sensitive input. (AAP-11442)
    * The 'Back to list' button in the controller UI now maintains previous search filters. (AAP-11527)
    * Topology view and Instances are only available as sidebar menu options to System Administrators and     System Auditors. (AAP-11585)
    * Fixed the frequency of the scheduler to run on the correct day of the week as specified by the user.
    (AAP-11776)
    * Fixed an issue with slow database 'UPDATE' statements when using nested tasks(include_tasks) causing     task manager timeout. (AAP-12586)
    * Added setting to enable queuing for Rsyslog to handle higher work     volumes(LOG_AGGREGATOR_ACTION_MAX_DISK_USAGE_GB) (AAP-12726)
    * Allow execution and hop nodes to be added to VM-based Controller installations from the UI (AAP-12849)
    * Add awx-manage command for creating future events table partitions (AAP-12907)
    * Re-enabled Pendo support by providing the correct pendo api key (AAP-13415)
    * Fix for filter experience when assigning access to teams: In the dialog for granting teams to access a     resource, it should be possible to filter teams using partial names. (AAP-13557)
    * Fixed bug where a weekly rrule string without a BYDAY would result in the UI throwing a TypeError     (AAP-13670)
    * Fix server error that happens when deleting workflow jobs ran before event partitioning migration     (AAP-13806)
    * Added api reference documentation for new bulk api endpoint. (AAP-13980)
    * Fixed bug where forms provided in the custom login info would render and execute. (AAP-14013)
    * Fix issue where related items were not visible in some cases: job template instance groups, organization     galaxy credentials, and organization instance groups. (AAP-14057)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4449 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.120 and .NET Runtime 6.0.20.

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4448 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.120 and .NET Runtime 6.0.20.

    Security Fix(es):

    * dotnet: .NET Kestrel: Denial of Service processing X509 Certificates (CVE-2023-29331)

    * dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack     (CVE-2023-29337)

    * dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap     corruption (CVE-2023-33128)

    * dotnet: race condition in Core SignInManager<TUser> PasswordSignInAsync method (CVE-2023-33170)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4431 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: memory allocation hazard and crash (CVE-2023-38403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4432 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: memory allocation hazard and crash (CVE-2023-38403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4428 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4429 advisory.

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an     Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

    Security Fix(es):

    * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE     (CVE-2023-37464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4418 advisory.

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an     Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

    Security Fix(es):

    * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE     (CVE-2023-37464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4413 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4417 advisory.

    CJose is C library implementing the Javascript Object Signing and Encryption (JOSE).

    Security Fix(es):

    * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE     (CVE-2023-37464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4419 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4377 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090)

    * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)

    * kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)

    * kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)

    * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * HPEMC RHEL 9 BUG: acpi-cpufreq: Skip initializtion if a cpufreq driver exists (BZ#2186562)

    * RHEL 9.3: Update locking code to upstream 6.1 and further fixes (BZ#2187507)

    * Getting kernel: RIP: 0010:nvme_setup_discard+0x172/0x1e0 [nvme_core] when I/O and DISCARD commands are     sent to the file system on NVMe/TCP multipath device (BZ#2192632)

    * RHEL 9.2 OS cannot boot successfully when enabling VMD in UEFI setup (BZ#2196230)

    * Intel E810 card unable to create a MACVLAN on interface already configured as SRIOV (BZ#2209284)

    * Trouble getting callstacks when signal has interrupted clock_gettime (BZ#2210074)

    * DELL 9.3 BUG: HDMI/DP audio output device lost on some new wn21 series graphic card(Discrete mode).
    (BZ#2211656)

    * DELL RHEL 9.2 BUG: Observed device_dax related probe errors in dmesg when HBM CPU is set to flat mode     and creating duplicate device_dax ids and hence probe is failing (BZ#2212386)

    * ice: The response of the ubxtool -p <PRESET> command may not correspond to the command: (BZ#2213186)

    * Update lpfc 14.2.0.12 for RHEL 9.3 Inbox with three bug fixes from 14.2.0.13 (BZ#2213616)

    * avoid unnecessary page fault retires on shared memory types (BZ#2213894)

    * jitter: Fix RCT/APT health test during initialization (BZ#2215080)

    * coretemp driver causes RDMSR interruption on isolated CPU (BZ#2215552)

    * rbd: avoid fast-diff corruption in snapshot-based mirroring (BZ#2216569)

    * Hyper-V RHEL-9: Fix VM crash/hang Issues due to fast VF add/remove events (BZ#2217066)

    * OVS ERSPAN2: ip6erspan incorrect erspan version in GRE header (BZ#2217493)

    * kernel-rt: system hung during stress-ng (BZ#2217939)

    * kvm/sriov: high latency after soft reboot (BZ#2218871)

    * CPU slushiness observed with lots of kworkers being created on host when more than 2 vm spawned in     single shot (BZ#2218935)

    * Wrong hwlat CPU affinity when started from a container. (BZ#2221157)

    * cifs: check the lease context if we actually got a lease (BZ#2221159)

    Enhancement(s):

    * Intel 9.3 FEAT SPR power: Intel SST SNC4 support (BZ#2185605)

    * Dell 9.3 Feat dell-wmi-privacy: The microphone still have function when press F4 Microphone Mute hotkey     on Orchid Bay MLK (BZ#2209808)

    * RFE: Support for a 'source-load-balancing' bonding mode (BZ#2221169)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4412 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4415 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: memory allocation hazard and crash (CVE-2023-38403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4410 advisory.

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an     Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

    Security Fix(es):

    * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE     (CVE-2023-37464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4349 advisory.

    The libxml2 library is a development toolbox providing the implementation of various XML standards.

    Security Fix(es):

    * libxml2: NULL dereference in xmlSchemaFixupComplexType (CVE-2023-28484)

    * libxml2: Hashing of empty dict strings isn't deterministic (CVE-2023-29469)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4416 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: memory allocation hazard and crash (CVE-2023-38403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4409 advisory.

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an     Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

    Security Fix(es):

    * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE     (CVE-2023-37464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4381 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4378 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090)

    * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)

    * kernel: KVM: x86/mmu: race condition in direct_page_fault() (CVE-2022-45869)

    * kernel: speculative pointer dereference in do_prlimit() in kernel/sys.c (CVE-2023-0458)

    * kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * RHEL9 rt: blktests block/024 failed (BZ#2209920)

    * Backport pinned timers RT specific behavior for FIFO tasks (BZ#2210071)

    * kernel-rt: update RT source tree to the RHEL-9.2z2 source tree (BZ#2215122)

    * kernel-rt: update RT source tree to the RHEL-9.2z2b source tree (BZ#2222796)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4347 advisory.

    Libeconf is a highly flexible and configurable library to parse and manage key=value configuration files.
    It reads configuration file snippets from different directories and builds the final configuration file     from it.

    Security Fix(es):

    * libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c (CVE-2023-22652)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4354 advisory.

    The curl packages provide the libcurl library and the curl utility for downloading files from servers     using various protocols, including HTTP, FTP, and LDAP.

    Security Fix(es):

    * curl: IDN wildcard match may lead to Improper Cerificate Validation (CVE-2023-28321)

    * curl: more POST-after-PUT confusion (CVE-2023-28322)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4382 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4411 advisory.

    CJose is C library implementing the Javascript Object Signing and Encryption (JOSE).

    Security Fix(es):

    * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE     (CVE-2023-37464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4408 advisory.

    The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an     Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.

    Security Fix(es):

    * cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE     (CVE-2023-37464)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4414 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: memory allocation hazard and crash (CVE-2023-38403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4383 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4350 advisory.

    The python-requests package contains a library designed to make HTTP requests easy for developers.

    Security Fix(es):

    * python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4384 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4380 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: ipvlan: out-of-bounds write caused by unclear skb->cb (CVE-2023-3090)

    * kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt() (CVE-2023-35788)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4328 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    Security Fix(es):

    * samba: SMB2 packet signing is not enforced when server signing = required is set (CVE-2023-3347)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * The trust relationship between this workstation and the primary domain failed (BZ#2223601)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4326 advisory.

    Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP     characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.

    Security Fix(es):

    * iperf3: memory allocation hazard and crash (CVE-2023-38403)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4331 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    The package has been upgraded to a later upstream version: nodejs (16.20.1). (BZ#2223334, BZ#2223336,     BZ#2223338, BZ#2223340, BZ#2223342, BZ#2223344)

    Security Fix(es):

    * nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581)

    * nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588)

    * nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589)

    * nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4327 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)

    * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4330 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    The package has been upgraded to a later upstream version: nodejs (18). (BZ#2223314, BZ#2223316,     BZ#2223318, BZ#2223319, BZ#2223320, BZ#2223354)

    Security Fix(es):

    * nodejs: mainModule.proto bypass experimental policy mechanism (CVE-2023-30581)

    * nodejs: process interuption due to invalid Public Key information in x509 certificates (CVE-2023-30588)

    * nodejs: HTTP Request Smuggling via Empty headers separated by CR (CVE-2023-30589)

    * nodejs: DiffieHellman do not generate keys after setting a private key (CVE-2023-30590)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4329 advisory.

    OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating     systems. It includes the core files necessary for both the OpenSSH client and server.

    Security Fix(es):

    * openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4160 advisory.

    IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

    This update upgrades IBM Java SE 8 to version 8 SR8-FP5.

    Security Fix(es):

    * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)

    * OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)

    * OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)

    * OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)

    * OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)

    * OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4324 advisory.

    The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript     translates PostScript code to common bitmap formats so that the code can be displayed or printed.

    Security Fix(es):

    * ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices     (CVE-2023-36664)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4332 advisory.

    The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols.
    BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing     with DNS); and tools for verifying that the DNS server is operating correctly.

    Security Fix(es):

    * bind: named's configured cache size limit can be significantly exceeded (CVE-2023-2828)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4325 advisory.

    Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common     Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and     various information.

    Security Fix(es):

    * samba: SMB2 packet signing is not enforced when server signing = required is set (CVE-2023-3347)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * The trust relationship between this workstation and the primary domain failed (BZ#2223600)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4313 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: schema_element defeats protective search_path changes (CVE-2023-2454)

    * postgresql: row security policies disregard user ID changes after inlining. (CVE-2023-2455)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4282 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    Security Fix(es):

    * python: urllib.parse url blocklisting bypass (CVE-2023-24329)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4252 advisory.

    EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package     contains a sample 64-bit UEFI firmware for QEMU and KVM.

    Security Fix(es):

    * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4256 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege     escalation (CVE-2023-1281)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * s390/qeth: cache link_info for ethtool (BZ#2174365)

    * RHEL8.4 - kernel: fix __clear_user() inline assembly constraints (BZ#2192605)

    * ice: ptp4l cpu usage spikes (BZ#2203288)

    * 40%~70% block performance regression for localfs backend write between kernel-4.18.0-235.el8.x86_64 and     kernel-4.18.0-277.el8.x86_64 (BZ#2204516)

    * Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst     (BZ#2208287)

    * simultaneous writes to a page on xfs can result in zero-byte data (BZ#2208413)

    * Windows Server 2019 guest randomly pauses with KVM: entry failed, hardware error 0x80000021     [rhel8.8GA] (BZ#2211662)

    * [Marvell 8.7 Bug] qedi shutdown handler hangs upon reboot (BZ#2215333)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Severity
179325	RHEL 8 : firefox (RHSA-2023:4468)	critical
179324	RHEL 7 : firefox (RHSA-2023:4461)	critical
179323	RHEL 8 : firefox (RHSA-2023:4460)	critical
179322	RHEL 9 : firefox (RHSA-2023:4465)	critical
179321	RHEL 8 : firefox (RHSA-2023:4463)	critical
179320	RHEL 8 : firefox (RHSA-2023:4464)	critical
179316	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2023:4340)	medium
179308	RHEL 9 : .NET 6.0 (RHSA-2023:4449)	high
179307	RHEL 8 : .NET 6.0 (RHSA-2023:4448)	high
179216	RHEL 9 : iperf3 (RHSA-2023:4431)	high
179215	RHEL 8 : iperf3 (RHSA-2023:4432)	high
179206	RHEL 6 : openssh (RHSA-2023:4428)	critical
179201	RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:4429)	high
179182	RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:4418)	high
179181	RHEL 8 : openssh (RHSA-2023:4413)	critical
179180	RHEL 9 : cjose (RHSA-2023:4417)	high
179179	RHEL 8 : openssh (RHSA-2023:4419)	critical
179165	RHEL 9 : kernel (RHSA-2023:4377)	critical
179164	RHEL 9 : openssh (RHSA-2023:4412)	critical
179163	RHEL 8 : iperf3 (RHSA-2023:4415)	high
179162	RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:4410)	high
179161	RHEL 9 : libxml2 (RHSA-2023:4349)	medium
179160	RHEL 8 : iperf3 (RHSA-2023:4416)	high
179159	RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:4409)	high
179158	RHEL 8 : openssh (RHSA-2023:4381)	critical
179157	RHEL 9 : kernel-rt (RHSA-2023:4378)	critical
179156	RHEL 9 : libeconf (RHSA-2023:4347)	medium
179155	RHEL 9 : curl (RHSA-2023:4354)	medium
179154	RHEL 7 : openssh (RHSA-2023:4382)	critical
179153	RHEL 9 : cjose (RHSA-2023:4411)	high
179152	RHEL 8 : mod_auth_openidc:2.3 (RHSA-2023:4408)	high
179151	RHEL 8 : iperf3 (RHSA-2023:4414)	high
179150	RHEL 8 : openssh (RHSA-2023:4383)	critical
179149	RHEL 9 : python-requests (RHSA-2023:4350)	high
179148	RHEL 8 : openssh (RHSA-2023:4384)	critical
179147	RHEL 9 : kpatch-patch (RHSA-2023:4380)	critical
179060	RHEL 8 : samba (RHSA-2023:4328)	medium
179059	RHEL 7 : iperf3 (RHSA-2023:4326)	high
179058	RHEL 9 : nodejs (RHSA-2023:4331)	high
179057	RHEL 9 : postgresql:15 (RHSA-2023:4327)	high
179056	RHEL 9 : nodejs:18 (RHSA-2023:4330)	high
179055	RHEL 9 : openssh (RHSA-2023:4329)	critical
179054	RHEL 7 : java-1.8.0-ibm (RHSA-2023:4160)	critical
179053	RHEL 9 : ghostscript (RHSA-2023:4324)	high
179052	RHEL 8 : bind (RHSA-2023:4332)	high
179051	RHEL 9 : samba (RHSA-2023:4325)	medium
178949	RHEL 7 : rh-postgresql12-postgresql (RHSA-2023:4313)	high
178904	RHEL 8 : Red Hat Virtualization Host 4.4.z SP 1 (RHSA-2023:4282)	high
178768	RHEL 8 : edk2 (RHSA-2023:4252)	critical
178767	RHEL 8 : kernel (RHSA-2023:4256)	high

Detections

Analytics

Red Hat Local Security Checks Family for Nessus

critical

critical

critical

critical

critical

critical

medium

high

high

high

high

critical

high

high

critical

high

critical

critical

critical

high

high

medium

high

high

critical

critical

medium

medium

critical

high

high

high

critical

high

critical

critical

medium

high

high

high

high

critical

critical

high

high

medium

high

high

critical

high