The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry     contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while     being read. This vulnerability is fixed in 7.5.2. (CVE-2025-64118)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-64118

medium Nessus Plugin ID 272185

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Jan 30, 2026, 4:02 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601301602
Version 1.3 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.1 Nov 3, 2025, 9:25 PM New Plugin Feed: 202511032125