The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() If the 'buf' array     received from the user contains an empty string, the 'length' variable will be zero. Accessing the 'buf'     array element with index 'length - 1' will result in a buffer overflow. Add a check for an empty string.
    Found by Linux Verification Center (linuxtesting.org) with SVACE. (CVE-2025-38077)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-38077

high Nessus Plugin ID 244997

Version 1.2