The version of AHV installed on the remote host is prior to 10.3.1.1 / AHV-10.3.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.1 advisory.

  - A vulnerability has been identified in the libarchive library, specifically within the     archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately     lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption,     enabling an attacker to execute arbitrary code or cause a denial-of-service condition. (CVE-2025-5914)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - There is a defect in the CPython tarfile module affecting the TarFile extraction and entry enumeration     APIs. The tar implementation would process tar archives with negative offsets without error, resulting in     an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability     can be mitigated by including the following patch after importing the tarfile module:
    https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1 (CVE-2025-8194)

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
    Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer     dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service     (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to     potential disruptions in system availability and stability. This vulnerability has been patched in version     41.0.6. (CVE-2023-49083)

  - AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output     neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal     escape sequences to hide the addition or removal of the file from the report and/or tamper with the log     output. A local user might exploit this to bypass the AIDE detection of malicious files. Additionally the     output of extended attribute key names and symbolic links targets are also not properly neutralized. This     issue has been patched in version 0.19.2. A workaround involves configuring AIDE to write the report     output to a regular file, redirecting stdout to a regular file, or redirecting the log output written to     stderr to a regular file. (CVE-2025-54389)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.1)

high Nessus Plugin ID 272045

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Jul 15, 2026, 11:41 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607152341
Version 1.2 May 27, 2026, 1:37 PM CVSS metrics ("CVSSv2 score" set to 7.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv3 score" set to 7.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") Plugin metadata Plugin Feed: 202605271337
Version 1.1 Oct 30, 2025, 11:01 PM New Plugin Feed: 202510302301