The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - kdb: Fix buffer overflow during tab-complete Currently, when the user attempts symbol completion with the     Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it     passes the size of the source buffer rather than the destination to strncpy() with predictably horrible     results. Most obviously if the command buffer is already full but cp, the cursor position, is in the     middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the     dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have     enough space before we start moving characters around. (CVE-2024-39480)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2024-39480

high Nessus Plugin ID 245707

Version 1.8

Version 1.7

Version 1.3

Version 1.1

Version 1.8 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202510290303
Version 1.7 Oct 28, 2025, 5:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510281756
Version 1.3 Sep 6, 2025, 2:03 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509060203
Version 1.1 Aug 8, 2025, 11:45 PM New Plugin Feed: 202508082345