The version of python27 installed on the remote host is prior to 2.7.18-2.141. The version of python36 installed on the remote host is prior to 3.6.12-1.20. The version of python38 installed on the remote host is prior to 3.8.5-1.5. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1484 advisory.

    A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided     within Python. Applications that use ctypes without carefully validating the input passed to it may be     vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack and crash the     application. The highest threat from this vulnerability is to system availability. (CVE-2021-3177)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux AMI : python27, python36, python38 (ALAS-2021-1484)

critical Nessus Plugin ID 146819

Version 1.4