The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A     security control designed to prevent dictionary attacks, which introduces a 5-second delay during session     setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-     brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently     against user credentials or other authentication mechanisms. (CVE-2023-32251)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-32251

low Nessus Plugin ID 251789

Version 1.6

Version 1.5

Version 1.2

Version 1.1

Version 1.6 Oct 29, 2025, 3:03 AM Detection (updated detection logic) Plugin Feed: 202510290303
Version 1.5 Oct 27, 2025, 11:56 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin Feed: 202510272356
Version 1.2 Sep 1, 2025, 12:37 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202509011237
Version 1.1 Aug 19, 2025, 8:36 AM New Plugin Feed: 202508190836