The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer     overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away,     a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes     into it, producing a heap buffer overflow. (CVE-2025-14181)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2025-14181

medium Nessus Plugin ID 349712

Version 1.12