The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures To have enough space to write all possible     sprintf() args. Currently 'name' size is 16, but the first '%s' specifier may already need at least 16     characters, since 'bnad->netdev->name' is used there. For '%d' specifiers, assume that they require: * 1     char for 'tx_id + tx_info->tcb[i]->id' sum, BNAD_MAX_TXQ_PER_TX is 8 * 2 chars for 'rx_id +     rx_info->rx_ctrl[i].ccb->id', BNAD_MAX_RXP_PER_RX is 16 And replace sprintf with snprintf. Detected using     the static analysis tool - Svace. (CVE-2024-43839)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-43839

high Nessus Plugin ID 228673

Version 1.6

Version 1.1

Version 1.6 Oct 28, 2025, 9:02 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510280902
Version 1.1 Mar 6, 2025, 7:23 AM New Plugin Feed: 202503060723