There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match()
    in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report,
    noting that there are options that can be used to limit the amount of stack that is used (CVE-2017-16231)

  - LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service
    (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were
    unable to reproduce the issue (CVE-2017-16232)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion
    (uncontrolled recursion) when processing a crafted regular expression. (CVE-2017-11164)

  - In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match()
    in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report,
    noting that there are options that can be used to limit the amount of stack that is used (CVE-2017-16231)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 PCRE 8.41中，pcretest 負載測試 PoC 在編譯後，會在 pcre_exec.c 的 match() 函式中產生損毀溢位，這是因為自我遞回呼叫所致。注意：第三方對此報告的相關性有爭議，並指出有些選項可用於限制使用的堆疊數量 (CVE-2017-16231)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 PCRE 8.41中，编译之后，pcretest 负载测试 PoC 由于自我递归调用，会在 pcre_exec.c 的函数 match() 中产生崩溃溢出。注意：第三方对该报告的相关性提出异同，指出存在可用于限制所使用的堆栈数量的选项 (CVE-2017-16231)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - PCRE 8.41では、コンパイル後に厳密なロードテストのPoCを行うと、自己再帰呼び出しのため、pcre_exec.cのmatch()関数にクラッシュオーバーフローが発生します。注：サードパーティは、使用するスタックの量を制限するために使用できるオプションがあると指摘し、このレポートの妥当性に異議を唱えています（CVE-2017-16231）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match()     in pcre_exec.c because of a self-recursive call. NOTE: third parties dispute the relevance of this report,     noting that there are options that can be used to limit the amount of stack that is used (CVE-2017-16231)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
424604	Alpine: libtiffxx, multiple tiff packages: security update to 4.0.9-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	4/4/2025	7/2/2026	high
424331	Alpine: multiple libpcre16 packages, multiple pcre packages: security update to 7.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	4/4/2025	7/2/2026	high
400790	Alpine: libtiffxx, multiple tiff packages: security update to 4.0.8-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	8/16/2023	7/2/2026	high
400790	Alpine: libtiffxx, multiple tiff packages: security update to 4.0.8-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	8/16/2023	7/2/2026	high
424604	Alpine: libtiffxx, multiple tiff packages: security update to 4.0.9-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	4/4/2025	7/2/2026	high
424331	Alpine: multiple libpcre16 packages, multiple pcre packages: security update to 7.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	4/4/2025	7/2/2026	high
220914	Linux Distros 未修補弱點：CVE-2017-16231	Nessus	Misc.	3/4/2025	8/4/2026	medium
220914	Linux Distros 未修补的漏洞: CVE-2017-16231	Nessus	Misc.	3/4/2025	8/4/2026	medium
220914	Linux Distros のパッチ未適用の脆弱性: CVE-2017-16231	Nessus	Misc.	3/4/2025	8/4/2026	medium
220914	Linux Distros Unpatched Vulnerability : CVE-2017-16231	Nessus	Misc.	3/4/2025	8/4/2026	medium

Detections

Analytics

Plugins Search

high

high

high

high

high

high

medium

medium

medium

medium