ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from     stl_remove_degenerate) in connect.c in libadmesh.a. (CVE-2018-25033)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from
    stl_remove_degenerate) in connect.c in libadmesh.a. (CVE-2018-25033)

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3019 advisory.

  - ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from     stl_remove_degenerate) in connect.c in libadmesh.a. (CVE-2018-25033)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
222663	Linux Distros Unpatched Vulnerability : CVE-2018-25033	Nessus	Misc.	high
410904	SCA: security update for admesh (GHSA-5jrq-582v-9767)	Tenable Cloud Security	SCA Checks	high
410904	SCA: security update for admesh (GHSA-5jrq-582v-9767)	Tenable Self-Hosted Container Security	SCA Checks	high
161435	Debian DLA-3019-1 : admesh - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2018-25033

high

Tenable Plugins

high

high

high

high