Possible XSS in SafeBuffer#bytesplice [fedora-all]

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2781-1 advisory.

  - A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise     Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Server 4.1; openSUSE Leap     15.3, openSUSE Leap 15.4 allows local attackers with access to the _rmt user to escalate to root. This     issue affects: SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.10. SUSE Linux     Enterprise Server for SAP 15-SP1 rmt-server versions prior to 2.10. SUSE Manager Server 4.1 rmt-server     versions prior to 2.10. openSUSE Leap 15.3 rmt-server versions prior to 2.10. openSUSE Leap 15.4 rmt-     server versions prior to 2.10. (CVE-2022-31254)

  - A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart     MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart     parsing to take longer than expected. (CVE-2023-27530)

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2304-1 advisory.

  - A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart     MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart     parsing to take longer than expected. (CVE-2023-27530)

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2294-1 advisory.

  - A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart     MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart     parsing to take longer than expected. (CVE-2023-27530)

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2295-1 advisory.

  - A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart     MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart     parsing to take longer than expected. (CVE-2023-27530)

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2280-1 advisory.

  - A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart     MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart     parsing to take longer than expected. (CVE-2023-27530)

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5389 advisory.

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-7002afbbb8 advisory.

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-d6157bb1e2 advisory.

  - Possible XSS in SafeBuffer#bytesplice [fedora-all] (CVE-2023-28120)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
177990	SUSE SLES15 / openSUSE 15 Security Update : rmt-server (SUSE-SU-2023:2781-1)	Nessus	SuSE Local Security Checks	high
176411	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:2304-1)	Nessus	SuSE Local Security Checks	high
176407	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:2294-1)	Nessus	SuSE Local Security Checks	high
176406	SUSE SLES15 / openSUSE 15 Security Update : rmt-server (SUSE-SU-2023:2295-1)	Nessus	SuSE Local Security Checks	high
176351	SUSE SLES15 Security Update : rmt-server (SUSE-SU-2023:2280-1)	Nessus	SuSE Local Security Checks	high
174384	Debian DSA-5389-1 : rails - security update	Nessus	Debian Local Security Checks	medium
173886	Fedora 37 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2023-7002afbbb8)	Nessus	Fedora Local Security Checks	medium
173746	Fedora 38 : rubygem-actioncable / rubygem-actionmailbox / rubygem-actionmailer / etc (2023-d6157bb1e2)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2023-28120

medium

Tenable Plugins

high

high

high

high

high

medium

medium

medium