The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the     Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the     efficient handling of large HTTP responses by reading the content in chunks, rather than loading the     entire response body into memory at once. When streaming a compressed response, urllib3 can perform     decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd).
    The library must read compressed data from the network and decompress it until the requested chunk size is     met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for     the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of     highly compressed data in a single operation. This can result in excessive resource consumption (high CPU     usage and massive memory allocation for the decompressed data. (CVE-2025-66471)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-66471

high Nessus Plugin ID 277697

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.6 Jan 21, 2026, 10:50 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601211050
Version 1.5 Jan 13, 2026, 11:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601131135
Version 1.4 Jan 8, 2026, 11:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202601082325
Version 1.3 Dec 12, 2025, 5:16 PM Detection (updated detection logic) Plugin Feed: 202512121716
Version 1.2 Dec 10, 2025, 9:29 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512100929
Version 1.1 Dec 9, 2025, 2:31 AM New Plugin Feed: 202512090231