The version of AOS installed on the remote host is prior to 5.20.4. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.20.4 advisory.

  - In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. (CVE-2022-25315)

  - CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw     V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists. (CVE-2022-23307)

  - NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow     when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures     encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for     certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how     they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and     PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and     Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
    (CVE-2021-43527)

  - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS     extended attributes or tmpfs ACLs), because of a heap-based buffer overflow. (CVE-2021-45417)

  - It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-     default configurations. This could allows attackers with control over Thread Context Map (MDC) input data     when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for     example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input     data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some     environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix     this issue by removing support for message lookup patterns and disabling JNDI functionality by default.
    (CVE-2021-45046)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.20.4)

critical Nessus Plugin ID 164601

Version 1.21

Version 1.20

Version 1.19

Version 1.18

Version 1.17

Version 1.16

Version 1.16

Version 1.15

Version 1.15

Version 1.14

Version 1.13

Version 1.13

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.21 Jan 22, 2025, 5:44 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202501221744
Version 1.20 Mar 25, 2024, 5:51 PM Plugin metadata Plugin Feed: 202403251751
Version 1.19 Mar 6, 2024, 11:28 AM Plugin metadata Plugin Feed: 202403061128
Version 1.18 Feb 21, 2024, 1:42 PM Plugin metadata Plugin Feed: 202402211342
Version 1.17 Feb 21, 2024, 1:18 AM Plugin metadata Plugin Feed: 202402210118
Version 1.16 Dec 14, 2023, 4:32 PM Plugin metadata Plugin Feed: 202312141632
Version 1.16 Feb 20, 2024, 11:27 PM Plugin metadata Plugin Feed: 202402202327
Version 1.15 Dec 13, 2023, 5:47 AM Plugin metadata Plugin Feed: 202312130547
Version 1.15 Dec 14, 2023, 2:28 PM Plugin metadata Plugin Feed: 202312141428
Version 1.14 Dec 12, 2023, 6:07 AM Plugin metadata Plugin Feed: 202312120607
Version 1.13 Oct 7, 2023, 4:08 PM Detection Plugin Feed: 202310071608
Version 1.13 Dec 12, 2023, 4:04 AM Plugin metadata Plugin Feed: 202312120404
Version 1.12 May 1, 2023, 9:07 PM CISA reference Plugin Feed: 202305012107
Version 1.11 Apr 7, 2023, 10:11 AM Plugin metadata (spelling) Plugin Feed: 202304071011
Version 1.10 Feb 23, 2023, 6:16 PM Plugin metadata Plugin Feed: 202302231816
Version 1.9 Feb 6, 2023, 9:36 PM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202302062136
Version 1.8 Feb 3, 2023, 2:05 PM Regenerated based on advisory update Plugin Feed: 202302031405
Version 1.7 Jan 26, 2023, 2:58 AM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202301260258
Version 1.6 Jan 25, 2023, 7:54 AM Regenerated based on advisory update Plugin Feed: 202301250754
Version 1.5 Jan 12, 2023, 6:19 PM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202301121819
Version 1.4 Dec 6, 2022, 4:40 AM Reference Plugin Feed: 202212060440