The remote SUSE Linux SLED15 / SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0221-1 advisory.

  - xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and     therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed     in the xterm default configurations of some Linux distributions. (CVE-2022-45063)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xterm (SUSE-SU-2023:0221-1)

critical Nessus Plugin ID 170951

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Mar 7, 2023, 10:48 PM Logic Changes (Added support for additional SUSE Platforms)
Version 1.2 Feb 4, 2023, 12:45 AM Logic Changes (Added missing service packs to plugin checks)
Version 1.1 Feb 3, 2023, 7:54 PM Regenerated based on advisory update
Version 1.0 Feb 2, 2023, 2:12 PM New