The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This     vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of     BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the     implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to     allowing access to functionality. An attacker can leverage this vulnerability to execute code in the     context of the current user. Was ZDI-CAN-25177. (CVE-2024-8805)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-8805

high Nessus Plugin ID 231961

Version 1.6

Version 1.5

Version 1.3

Version 1.1

Version 1.6 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.5 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510281756
Version 1.3 Aug 31, 2025, 9:16 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202508310916
Version 1.1 Mar 6, 2025, 5:02 PM New Plugin Feed: 202503061702