The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER     environment variable, which might allow remote attackers to conduct argument-injection attacks via a     crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-     dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os.lua.
    (CVE-2017-17513)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2017-17513

high Nessus Plugin ID 220899

Version 1.6

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.3 Sep 4, 2025, 5:30 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509041730
Version 1.2 Aug 31, 2025, 9:16 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508310916
Version 1.1 Mar 5, 2025, 1:16 AM New Plugin Feed: 202503050116