In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with     absolute pathnames or .. directory traversal. (CVE-2023-28371)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202407-18 (Stellarium: Arbitrary File Write)

    A vulnerability has been discovered in Stellarium. Please review the CVE identifier referenced below for     details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0097-1 advisory.

  - In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with     absolute pathnames or .. directory traversal. (CVE-2023-28371)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-2cf272ad72 advisory.

    Patches for CVE-2023-28371

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-57f5e7c000 advisory.

    Patches for CVE-2023-28371

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b7e90bc682 advisory.

    Patches for CVE-2023-28371

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
227187	Linux Distros Unpatched Vulnerability : CVE-2023-28371	Nessus	Misc.	Local	critical
201928	GLSA-202407-18 : Stellarium: Arbitrary File Write	Nessus	Gentoo Local Security Checks	Local	critical
174927	openSUSE 15 Security Update : stellarium (openSUSE-SU-2023:0097-1)	Nessus	SuSE Local Security Checks	Local	critical
173622	Fedora 37 : stellarium (2023-2cf272ad72)	Nessus	Fedora Local Security Checks	Local	critical
173616	Fedora 38 : stellarium (2023-57f5e7c000)	Nessus	Fedora Local Security Checks	Local	critical
173614	Fedora 36 : stellarium (2023-b7e90bc682)	Nessus	Fedora Local Security Checks	Local	critical

Detections

Analytics

CVE-2023-28371

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical