The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the gzip-1.12-2.el9 build changelog.

  - GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper     reuse of shared global state between different decompression formats within a single execution. GNU gzip     maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not     reinitialized between files processed in the same invocation. By decompressing a specially crafted LZW     file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the     shared global state and subsequently trigger an outofbounds read in the LZH decoder. The LZH     decompression logic follows stale values left in the shared array, causing reads past the end of the     allocated global buffer. This issue has been fixed in the commit 63dbf6b3b9e6e781df1a6a64e609b10e23969681     (CVE-2026-41992)

  - GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When     the mktemp utility is not available in the user's PATH, gzexe falls back to constructing a temporary file     path based solely on the process ID (PID). This predictable filename is created without exclusive access     or existence checks. A local attacker can precreate the predicted temporary file path as a symbolic link     pointing to an arbitrary file writable by the victim. When gzexe runs, it follows the symlink and     overwrites the target file, resulting in a timeofcheck to timeofuse (TOCTOU) condition that allows     arbitrary file overwrite. This issue has been fixed in the commit 4e6f8b24ab823146ab8776f0b7fe486ab34d4269     (CVE-2026-41991)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CentOS 9 : gzip-1.12-2.el9

medium Nessus Plugin ID 339713

Version 1.2

Version 1.1

Version 1.2 Oct 10, 2026, 5:24 AM Plugin metadata (Add IAVM Info) Plugin Feed: 202610100524
Version 1.1 Aug 26, 2026, 1:14 PM New Plugin Feed: 202608261314