The version of AOS installed on the remote host is prior to 5.18. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.18 advisory.

  - When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to     Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP     connection. If such connections are available to an attacker, they can be exploited in ways that may be     surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped     with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected     (and recommended in the security guide) that this Connector would be disabled if not required. This     vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the     web application - processing any file in the web application as a JSP Further, if the web application     allowed file upload and stored those files within the web application (or the attacker was able to control     the content of the web application by some other means) then this, along with the ability to process a     file as a JSP, made remote code execution possible. It is important to note that mitigation is only     required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth     approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to     Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP     Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading     to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.
    (CVE-2020-1938)

  - rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a     certain upper-bound check, leading to a buffer overflow. (CVE-2019-17666)

  - The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-     free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c,     include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can     occur with FUSE requests. (CVE-2019-11487)

  - A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where,     the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error     occurs. When a guest is running on a host CPU affected by the TAA flaw (TAA_NO=0), but is not affected by     the MDS issue (MDS_NO=1), the guest was to clear the affected buffers by using a VERW instruction     mechanism. But when the MDS_NO=1 bit was exported to the guests, the guests did not use the VERW mechanism     to clear the affected buffers. This issue affects guests running on Cascade Lake CPUs and requires that     host has 'TSX' enabled. Confidentiality of data is the highest threat associated with this vulnerability.
    (CVE-2019-19338)

  - The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which     allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.
    (CVE-2015-8035)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has expat packages installed that are affected by a vulnerability:

  - Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and     Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of     compressed XML data, a related issue to CVE-2015-1283. (CVE-2015-2716)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4551:01 advisory.

    * expat: Integer overflow leading to buffer overflow in XML_GetBuffer() (CVE-2015-2716)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Mozilla Project reports :

MFSA-2015-46 Miscellaneous memory safety hazards (rv:38.0 / rv:31.7)

MFSA-2015-47 Buffer overflow parsing H.264 video with Linux Gstreamer

MFSA-2015-48 Buffer overflow with SVG content and CSS

MFSA-2015-49 Referrer policy ignored when links opened by middle-click and context menu

MFSA-2015-50 Out-of-bounds read and write in asm.js validation

MFSA-2015-51 Use-after-free during text processing with vertical text enabled

MFSA-2015-52 Sensitive URL encoded information written to Android logcat

MFSA-2015-53 Use-after-free due to Media Decoder Thread creation during shutdown

MFSA-2015-54 Buffer overflow when parsing compressed XML

MFSA-2015-55 Buffer overflow and out-of-bounds read while parsing MP4 video metadata

MFSA-2015-56 Untrusted site hosting trusted page can intercept webchannel responses

MFSA-2015-57 Privilege escalation through IPC channel messages

MFSA-2015-58 Mozilla Windows updater can be run outside of application directory

MFSA 2015-93 Integer overflows in libstagefright while processing MP4 video metadata

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-0988 advisory.

    [38.0-3.0.1.el7_1]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [38.0-3]
    - Enabled system nss
    - Removed unused patches

    [38.0-2]
    - Update to 38.0 ESR

    [38.0b8-0.11]
    - Update to 38.0 Beta 8

    [38.0b6-0.10]
    - Added patch for mozbz#1152515

    [38.0b6-0.9]
    - Update to 38.0 Beta 6

    [38.0b5-0.8]
    - Update to 38.0 Beta 5

    [38.0b3-0.7]
    - Update to 38.0 Beta 3

    [38.0b1-0.6]
    - Added patch for mozbz#1152391

    [38.0b1-0.5]
    - Fix build on AArch64 (based on upstream skia changes)

    [38.0b1-0.4]
    - Enabled debug build

    [38.0b1-1]
    - Update to 38.0b1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2015-2708, CVE-2015-2710, CVE-2015-2713)

A heap-based buffer overflow flaw was found in the way Thunderbird processed compressed XML data. An attacker could create specially crafted compressed XML content that, when processed by Thunderbird, could cause it to crash or execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2015-2716)

Note: All of the above issues cannot be exploited by a specially crafted HTML mail message as JavaScript is disabled by default for mail messages. They could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed.

The Mozilla Firefox web browser was updated to version 38.0.1 to fix several security and non-security issues. This update also includes a Mozilla Network Security Services (NSS) update to version 3.18.1.

The following vulnerabilities and issues were fixed :

Changes in Mozilla Firefox :

  - update to Firefox 38.0.1 stability and regression fixes

  - Systems with first generation NVidia Optimus graphics     cards may crash on start-up

  - Users who import cookies from Google Chrome can end up     with broken websites

  - Large animated images may fail to play and may stop     other images from loading

  - update to Firefox 38.0 (bnc#930622)

  - New tab-based preferences

  - Ruby annotation support

  - more info:
    https://www.mozilla.org/en-US/firefox/38.0/releasenotes/     security fixes :

  - MFSA 2015-46/CVE-2015-2708/CVE-2015-2709 Miscellaneous     memory safety hazards

  - MFSA 2015-47/VE-2015-0797 (bmo#1080995) Buffer overflow     parsing H.264 video with Linux Gstreamer

  - MFSA 2015-48/CVE-2015-2710 (bmo#1149542) Buffer overflow     with SVG content and CSS

  - MFSA 2015-49/CVE-2015-2711 (bmo#1113431) Referrer policy     ignored when links opened by middle-click and context     menu

  - MFSA 2015-50/CVE-2015-2712 (bmo#1152280) Out-of-bounds     read and write in asm.js validation

  - MFSA 2015-51/CVE-2015-2713 (bmo#1153478) Use-after-free     during text processing with vertical text enabled

  - MFSA 2015-53/CVE-2015-2715 (bmo#988698) Use-after-free     due to Media Decoder Thread creation during shutdown

  - MFSA 2015-54/CVE-2015-2716 (bmo#1140537) Buffer overflow     when parsing compressed XML

  - MFSA 2015-55/CVE-2015-2717 (bmo#1154683) Buffer overflow     and out-of-bounds read while parsing MP4 video metadata

  - MFSA 2015-56/CVE-2015-2718 (bmo#1146724) Untrusted site     hosting trusted page can intercept webchannel responses

  - MFSA 2015-57/CVE-2011-3079 (bmo#1087565) Privilege     escalation through IPC channel messages

Changes in Mozilla NSS :

  - update to 3.18.1

  - Firefox target release 38

  - No new functionality is introduced in this release.
    Notable Changes :

  - The following CA certificate had the Websites and Code     Signing trust bits restored to their original state to     allow more time to develop a better transition strategy     for affected sites :

  - OU = Equifax Secure Certificate Authority

  - The following CA certificate was removed :

  - CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi

  - The following intermediate CA certificate has been added     as actively distrusted because it was mis-used to issue     certificates for domain names the holder did not own or     control :

  - CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG

  - The version number of the updated root CA list has been     set to 2.4

  - update to 3.18

  - Firefox target release 38 New functionality :

  - When importing certificates and keys from a PKCS#12     source, it's now possible to override the nicknames,     prior to importing them into the NSS database, using new     API SEC_PKCS12DecoderRenameCertNicknames.

  - The tstclnt test utility program has new command-line     options

    -C, -D, -b and -R. Use -C one, two or three times to     print information about the certificates received from a     server, and information about the locally found and     trusted issuer certificates, to diagnose server side     configuration issues. It is possible to run tstclnt

ID	Name	Product	Family	Published	Updated	Severity
164595	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.18)	Nessus	Misc.	9/1/2022	9/1/2025	critical
143942	NewStart CGSL CORE 5.04 / MAIN 5.04 : expat Vulnerability (NS-SA-2020-0077)	Nessus	NewStart CGSL Local Security Checks	12/9/2020	12/10/2020	high
294683	MiracleLinux 7 : expat-2.1.0-11.el7 (AXSA:2020-4551:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	medium
83389	FreeBSD : mozilla -- multiple vulnerabilities (d9b43004-f5fd-4807-b1d7-dbf66455b244)	Nessus	FreeBSD Local Security Checks	5/13/2015	1/6/2021	critical
83403	Oracle Linux 5 / 6 / 7 : firefox (ELSA-2015-0988)	Nessus	Oracle Linux Local Security Checks	5/13/2015	4/29/2025	critical
83538	Scientific Linux Security Update : thunderbird on SL5.x, SL6.x, SL7.x i386/x86_64 (20150518)	Nessus	Scientific Linux Local Security Checks	5/19/2015	1/14/2021	high
83801	openSUSE Security Update : MozillaFirefox (openSUSE-2015-375)	Nessus	SuSE Local Security Checks	5/26/2015	1/19/2021	critical

Detections

Analytics

Plugins Search

critical

high

medium

critical

critical

high

critical