Potential Exposure to BPFDoor (Local Check - Linux)

critical Nessus Plugin ID 161476

Language:

Version 1.208 Nov 3, 2025, 9:25 PM Logic Changes (Corrects handling base64 encoded HTTP cookies) Plugin Feed: 202511032125
Version 1.207 Oct 27, 2025, 3:15 PM Logic Changes (Gate HTTP debugging behind hidden preference) Plugin Feed: 202510271515
Version 1.206 Oct 23, 2025, 3:11 AM Logic Changes (Fix HTTP/1 library to make sure it closes unused Keep-Alive connections) Plugin Feed: 202510230311
Version 1.204 Oct 21, 2025, 3:09 AM Logic Changes (Implement workaround in SSH library to prevent triggering an engine bug.) Plugin Feed: 202510210309
Version 1.203 Oct 16, 2025, 4:39 PM Logic Changes (Implement workaround in HTTP library to prevent triggering an engine bug.) Plugin Feed: 202510161639
Version 1.201 Oct 10, 2025, 2:37 AM Detection (Updated 'PatchLog' extraction. update to support Docker/containerd storage directory inclusions/exclusions) Plugin Feed: 202510100237
Version 1.200 Oct 1, 2025, 9:12 PM Logic Changes (Adding support for user-supplied header added to all HTTP requests.) Plugin Feed: 202510012112
Version 1.199 Sep 30, 2025, 12:41 AM Logic Changes (Add extra checks to see whether plugins should run. Modernisation of the HTTP/1 library. Various corrections and fixes for CPE related Flatline Test Failures. Remove spurious authentication header.) Plugin Feed: 202509300041
Version 1.197 Sep 11, 2025, 2:55 PM Logic Changes (Handle file associations for Snap packages in shared library. Currently active for OpenSSL, Curl and libcurl) Plugin Feed: 202509111455
Version 1.195 Aug 27, 2025, 5:32 PM Logic Changes (Consider findings located in /snap directory as managed by the OS.) Plugin Feed: 202508271732
Version 1.194 Aug 26, 2025, 7:20 AM Logic Changes Plugin Feed: 202508260720
Version 1.193 Jul 28, 2025, 4:47 PM Logic Changes (RSA SSH certificates can use SHA2 signatures when needed) Plugin Feed: 202507281647
Version 1.192 Jul 15, 2025, 2:39 AM Logic Changes Plugin Feed: 202507150239
Version 1.191 Jul 10, 2025, 5:41 PM Logic Changes (Windows CA support) Plugin Feed: 202507101741
Version 1.190 Jun 27, 2025, 8:01 PM Logic Changes Plugin Feed: 202506272001
Version 1.189 Jun 16, 2025, 4:11 PM Logic Changes (Validate X509 certificates against CA's CRL in preference to OCSP.) Plugin Feed: 202506161611
Version 1.188 May 28, 2025, 6:51 PM Detection (Experimental Mode for Apache Log4j detection. Only sets find exclude path, no longer registers the install. detect containerd installed from binaries unmanaged) Plugin Feed: 202505281851
Version 1.187 May 28, 2025, 9:47 AM Logic Changes (Streamline SSH compatibility code) Plugin Feed: 202505280947
Version 1.186 Apr 30, 2025, 5:21 PM Logic Changes (Exclude container storage directories from find searches.) Plugin Feed: 202504301721
Version 1.185 Apr 28, 2025, 4:40 PM Logic Changes (Handling absence of SSH privilege escalation uniformly across products) New Plugin Feed: 202504281640
Version 1.183 Apr 1, 2025, 12:23 AM Logic Changes (Handle Cisco devices that echo command and prompt before command results.) Plugin Feed: 202504010023
Version 1.181 Mar 20, 2025, 7:47 AM Detection (Handle DISA /etc/profile.d/ssh_confirm.sh consent prompt.) Plugin Feed: 202503200747
Version 1.180 Mar 6, 2025, 7:23 AM Detection (Handle long MOTD with pagination on Nokia devices.) Plugin Feed: 202503060723
Version 1.179 Mar 3, 2025, 5:54 PM Logic Changes (improve detection for some devices) Plugin Feed: 202503031754
Version 1.178 Feb 28, 2025, 9:08 PM New Plugin Feed: 202502282108
Version 1.177 Feb 12, 2025, 3:29 PM Logic Changes Plugin Feed: 202502121529
Version 1.176 Feb 12, 2025, 1:58 AM Logic Changes Plugin Feed: 202502120158
Version 1.175 Feb 10, 2025, 4:00 PM Logic Changes Plugin Feed: 202502101600
Version 1.173 Jan 22, 2025, 5:44 PM New Plugin Feed: 202501221744
Version 1.172 Jan 21, 2025, 6:17 PM Detection (Add SSH local checks support for Union Tech UOS) Logic Changes (Tighten recognition of need to escalate.) Plugin Feed: 202501211817
Version 1.168 Jan 13, 2025, 10:27 PM New Plugin Feed: 202501132227
Version 1.164 Dec 30, 2024, 4:30 PM Logic Changes (Catch errors when rehoming find commands under sudo escalation. Ensure escalation user home with tilde.) Plugin Feed: 202412301630
Version 1.163 Dec 18, 2024, 9:32 PM Detection (Set a prompt of our own in 'nix shells to handle misconfigured scan user prompts) Plugin Feed: 202412182132
Version 1.162 Dec 18, 2024, 7:05 AM Detection (Fixed SSH authentication using the "none" method) Plugin Feed: 202412180705
Version 1.161 Dec 16, 2024, 8:47 PM Logic Changes (Handle Alibaba Linux rpm lists the same as other RPM based distros) Plugin Feed: 202412162047
Version 1.160 Dec 6, 2024, 8:13 PM Detection (Better debugging related to local checks evaluations) Plugin Feed: 202412062013
Version 1.159 Dec 3, 2024, 3:59 PM Detection (Support Azure Linux for generated package plugins.) Plugin Feed: 202412031559
Version 1.158 Nov 22, 2024, 6:54 PM Logic Changes (Fixed installation reporting) Plugin Feed: 202411221854
Version 1.157 Nov 12, 2024, 8:29 PM Logic Changes (Adding installs report) Plugin Feed: 202411122029
Version 1.156 Nov 7, 2024, 8:25 PM Logic Changes Plugin Feed: 202411072025
Version 1.155 Nov 6, 2024, 2:41 PM Detection (adding support for Forescout CounterACT) Plugin Feed: 202411061441
Version 1.154 Oct 30, 2024, 4:21 PM Detection (Process file exclusion wildcards in a consistent way across find, locate, etc.) Plugin Feed: 202410301621
Version 1.152 Oct 10, 2024, 11:57 PM New Plugin Feed: 202410102357
Version 1.151 Oct 10, 2024, 4:58 AM Detection (Change dir to $HOME before find commands to handle weird find behavior with escalation.) Plugin Feed: 202410100458
Version 1.150 Sep 26, 2024, 4:34 PM Detection (adding package association overrides) Plugin Feed: 202409261634
Version 1.149 Sep 25, 2024, 3:12 PM Detection (Adding support for user-supplied timeout value for the find command.) Plugin Feed: 202409251512
Version 1.146 Sep 11, 2024, 5:35 PM New (Detects QUIC servers running on the target. Implement a NASL QUIC library to support detection of HTTP/3 and possibly more) Plugin Feed: 202409111735
Version 1.145 Sep 10, 2024, 4:59 PM New Plugin Feed: 202409101659
Version 1.144 Sep 3, 2024, 11:47 PM Logic Changes (additional data collection for runtime scanning. fixed logic bug causing potential false negatives. fixed logic bug causing potential false positives. fixed logic bug with potential to break cyberark logins) Plugin Feed: 202409032347
Version 1.142 Sep 3, 2024, 5:26 PM Detection (Support for Aruba CPPM SSH based local checks) Plugin Feed: 202409031726
Version 1.141 Aug 14, 2024, 8:33 PM Logic Changes (Endianness fix in Kerberos authentication for SCAP scanning) Plugin Feed: 202408142033
Version 1.140 Aug 14, 2024, 2:40 AM New Plugin requirements (Trusted) Plugin Feed: 202408140240
Version 1.138 Aug 8, 2024, 4:43 PM Logic Changes (Support OpenSSH private key formats for authentication.) Plugin Feed: 202408081643
Version 1.134 Jul 24, 2024, 6:31 PM Logic Changes (Modernize SSH usage to optimize behavior on Nessus Agents.. adding AI family) Plugin Feed: 202407241831
Version 1.133 Jul 23, 2024, 9:24 PM New Plugin Feed: 202407232124
Version 1.131 Jul 17, 2024, 11:02 PM Logic Changes Plugin Feed: 202407172302
Version 1.130 Jul 6, 2024, 12:22 AM Detection (Changes to support Juniper Session Smart Router) Plugin Feed: 202407060022
Version 1.129 Jul 5, 2024, 9:04 PM Detection (Adding detection of Juniper SSR devices) Plugin Feed: 202407052104
Version 1.128 Jun 27, 2024, 9:09 PM New (Deploy nessus_utils binaries on the Nessus Agent) Plugin Feed: 202406272109
Version 1.125 Jun 21, 2024, 6:31 PM Detection (updated detection for SonicOS devices) Plugin Feed: 202406211831
Version 1.124 Jun 21, 2024, 2:16 PM Logic Changes Plugin Feed: 202406211416
Version 1.123 May 20, 2024, 10:13 AM Logic Changes Plugin Feed: 202405201013
Version 1.122 May 9, 2024, 6:10 PM New Plugin Feed: 202405091810
Version 1.118 Mar 30, 2024, 4:20 PM New Plugin Feed: 202403301620
Version 1.117 Mar 30, 2024, 1:01 AM New Plugin Feed: 202403300101
Version 1.116 Mar 19, 2024, 6:40 PM Logic Changes (Improving logging to reduce disk space usage) Plugin Feed: 202403191840
Version 1.110 Feb 9, 2024, 11:22 AM New Plugin Feed: 202402091122
Version 1.109 Jan 16, 2024, 8:55 PM Logic Changes (Improving debug logging) Plugin Feed: 202401162055
Version 1.107 Jan 16, 2024, 5:39 PM Detection (Add carrier grade NAT IPs to the IPv4 private address ranges.. Support privacy mode DCOM over Kerberos) Logic Changes (Improving debug logging) Plugin Feed: 202401161739
Version 1.105 Jan 15, 2024, 9:56 AM Detection (improved regex) Plugin Feed: 202401150956
Version 1.104 Jan 8, 2024, 6:41 PM Detection (retooled detection to better handle managed installs) Plugin Feed: 202401081841
Version 1.100 Dec 11, 2023, 6:11 PM Detection (Fix error handling for find_cmd. Remove bash error from the output of commands that timed out) Plugin Feed: 202312111811
Version 1.99 Dec 6, 2023, 12:08 AM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312060008
Version 1.98 Dec 5, 2023, 9:49 PM Logic Changes (Fixes bug in special case shell handling logic.) Plugin Feed: 202312052149
Version 1.96 Nov 28, 2023, 11:17 AM Detection (Fixing detection of Cisco Firepower devices) Plugin Feed: 202311281117
Version 1.95 Nov 27, 2023, 6:11 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271811
Version 1.94 Nov 14, 2023, 4:21 PM Detection (Support SHA2 based encryption for Kerberos) Plugin Feed: 202311141621
Version 1.94 Nov 27, 2023, 4:16 PM Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.) Plugin Feed: 202311271616
Version 1.92 Oct 30, 2023, 1:08 PM Detection (Fixed detection of JUNOS) Plugin Feed: 202310301308
Version 1.91 Oct 25, 2023, 5:17 PM Detection (Handle SSH exec hang and pagination ctrl codes for PanOS) Plugin Feed: 202310251717
Version 1.89 Oct 18, 2023, 7:26 PM New Plugin Feed: 202310181926
Version 1.82 Oct 9, 2023, 8:58 PM New Plugin Feed: 202310092058
Version 1.80 Oct 4, 2023, 11:07 PM Detection (Fixed Cisco Firepower detection) Plugin Feed: 202310042307
Version 1.79 Oct 3, 2023, 9:02 PM Detection (Added Alma Linux to package association checks) Plugin Feed: 202310032102
Version 1.78 Sep 26, 2023, 8:16 PM Logic Changes Plugin Feed: 202309262016
Version 1.76 Aug 9, 2023, 11:01 PM Logic Changes Plugin Feed: 202308092301
Version 1.71 Jul 24, 2023, 7:10 PM Logic Changes (added debugging) Plugin Feed: 202307241910
Version 1.69 Jul 17, 2023, 5:15 PM Logic Changes (Make torture_cgi library PCP clean and consolidate utf16_to_ascii(). Permit CIDR entries in target priority list) Plugin Feed: 202307171715
Version 1.67 Jul 10, 2023, 7:11 PM Logic Changes (Restrict ClientHello ciphersuites by encapsulation) Plugin Feed: 202307101911
Version 1.66 Jul 5, 2023, 9:03 PM Logic Changes (added ingestion and ability of target priority lists for SSH credentials) Plugin Feed: 202307052103
Version 1.64 Jun 20, 2023, 9:07 PM Logic Changes (Temporarily limit debug logging) Plugin Feed: 202306202107
Version 1.58 Jun 1, 2023, 5:27 AM Logic Changes (Better logging) Plugin Feed: 202306010527
Version 1.56 May 18, 2023, 1:08 AM Detection (Port Alcatel-Lucent OmniSwitch support from ssh_get_info.nasl to ssh_lib as a rate limited device.) Plugin Feed: 202305180108
Version 1.54 May 16, 2023, 7:02 PM Detection (Authenticate WMI/DCOM using Kerberos credentials.) Plugin Feed: 202305161902
Version 1.51 May 1, 2023, 9:07 PM Detection (Make and use compatibility wrapper for running commands on scanner localhost to handle deprecation of pread().) Plugin Feed: 202305012107
Version 1.48 Apr 6, 2023, 6:58 PM Detection (Add Kerberos debug logging) Plugin Feed: 202304061858
Version 1.46 Mar 8, 2023, 1:05 AM Logic Changes Plugin Feed: 202303080105

* Changelogs are generally available for changes made after Nov 1, 2022

Detections

Analytics

Potential Exposure to BPFDoor (Local Check - Linux)

critical Nessus Plugin ID 161476