The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable     Network Graphics) raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's     simplified API allows reading up to 1012 bytes beyond the png_sRGB_base[512] array when processing valid     palette PNG images with partial transparency and gamma correction. The PNG files that trigger this     vulnerability are valid per the PNG specification; the bug is in libpng's internal state management.
    Upgrade to libpng 1.6.52 or later. (CVE-2025-66293)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-66293

high Nessus Plugin ID 277411

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.1

Version 1.6 Dec 5, 2025, 1:34 PM CVSS metrics ("CVSSv2 score" set to 4.3) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512051334
Version 1.5 Dec 5, 2025, 5:34 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512050534
Version 1.4 Dec 4, 2025, 10:27 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512042227
Version 1.3 Dec 4, 2025, 7:43 PM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:P") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512041943
Version 1.1 Dec 4, 2025, 9:12 AM New Plugin Feed: 202512040912