The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.101026 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers     option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
    (CVE-2023-45234)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101026)

medium Nessus Plugin ID 206824

Version 1.8

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.8 Oct 6, 2025, 9:07 AM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202510060907
Version 1.5 Oct 21, 2024, 9:27 AM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202410210927
Version 1.4 Sep 18, 2024, 8:52 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A") Plugin Feed: 202409180852
Version 1.3 Sep 10, 2024, 9:34 PM CEA reference Plugin Feed: 202409102134
Version 1.2 Sep 10, 2024, 7:53 AM Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202409100753
Version 1.1 Sep 10, 2024, 3:10 AM New Plugin Feed: 202409100310