The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup aqc111_rx_fixup() contains several out-of-bounds     accesses that can be triggered by a malicious (or defective) USB device, in particular: - The metadata     array (desc_offset..desc_offset+2*pkt_count) can be out of bounds, causing OOB reads and (on big-endian     systems) OOB endianness flips. - A packet can overlap the metadata array, causing a later OOB endianness     flip to corrupt data used by a cloned SKB that has already been handed off into the network stack. - A     packet SKB can be constructed whose tail is far beyond its end, causing out-of-bounds heap data to be     considered part of the SKB's data. Found doing variant analysis. Tested it with another driver     (ax88179_178a), since I don't have a aqc111 device to test it, but the code looks very similar.
    (CVE-2022-49051)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-49051

medium Nessus Plugin ID 225551

Version 1.2

Version 1.1

Version 1.2 Aug 7, 2025, 6:51 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508071851
Version 1.1 Mar 5, 2025, 4:35 PM New Plugin Feed: 202503051635