The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2764 advisory.

    * python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading     to DoS (CVE-2020-10735)

    * python: open redirection vulnerability in lib/http/server.py may lead to information disclosure     (CVE-2021-28861)

    * python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RockyLinux 8 : python39:3.9 and python39-devel:3.9 (RLSA-2023:2764)

high Nessus Plugin ID 279076

Version 1.2

Version 1.1

Version 1.2 Dec 19, 2025, 7:37 PM Detection (updated detection logic) Plugin Feed: 202512191937
Version 1.1 Dec 18, 2025, 6:32 PM New Plugin Feed: 202512181832