mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with     ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function,     Windows executables must contain a relocations table. Despite containing the Dynamic base PE header,     which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table     stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-     oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR     compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
    (CVE-2018-5392)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the crash package has been released.

ID	Name	Product	Family	Severity
251101	Linux Distros Unpatched Vulnerability : CVE-2018-5392	Nessus	Misc.	high
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	critical
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	critical

Detections

Analytics

CVE-2018-5392

high

Tenable Plugins

high

critical

critical