根據其自我報告的版本號碼，遠端主機上執行的 Nessus Network Monitor 低於 6.2.2 版。因此，會受到 TNS-2023-23 公告中所提及的多個弱點影響。由於發現多個第三方元件中存在弱點，廠商已提供更新版。出於慎重和符合良好實務，Tenable 選擇升級這些元件，以解決這些問題的潛在影響。Nessus Network Monitor 6.2.2 更新了下列元件：

  - 1.10.0 版到 1.19.1 版的 c-ares。
  - 7.79.1 版到 8.1.2 版的 curl。
  - 1.0.6 版到 1.0.8 版的 libbzip2。
  - 8.42 版到 8.44 版的 libpcre。
  - 2.7.7 版到 2.11.1 版的 libxml2。
  - 1.1.26 版到 1.1.37 版的 libxslt。
  - 1.2.18 版到 1.2.37 版的 libxmlsec。
  - 3.27.2 版到 3.40.1 版的 sqlite。
  - 1.3.1 版到 1.4.1 版的 jQuery Cookie。
  - 1.13.0 版到 1.13.2 版的 jQuery UI。
  - 3.0.8 版到 3.0.9 版的 OpenSSL。

This update for nodejs4 fixes the following issues: Security issues fixed :

  - CVE-2016-5180: c-ares: Fix for single-byte buffer     overwrite (bsc#1007728). Bug fixes :

  - bsc#1009011: npm4 should provide versioned nodejs-npm     and npm allowing nodejs-packaging to continue to     function properly in Leap 42.2

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the c-ares package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in c-ares. A hostname with an     escaped trailing dot (such as 'hello\\.') would have     its size calculated incorrectly, leading to a single     byte written beyond the end of a buffer on the heap. An     attacker able to provide such a hostname to an     application using c-ares, could potentially cause that     application to crash.(CVE-2016-5180)

  - The c-ares function `ares_parse_naptr_reply()`, which     is used for parsing NAPTR responses, could be triggered     to read memory outside of the given input buffer if the     passed in DNS response packet was crafted in a     particular way.(CVE-2017-1000381)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the c-ares packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in c-ares. A hostname with an     escaped trailing dot (such as 'hello\.') would have its     size calculated incorrectly, leading to a single byte     written beyond the end of a buffer on the heap. An     attacker able to provide such a hostname to an     application using c-ares, could potentially cause that     application to crash.(CVE-2016-5180)

  - The c-ares function `ares_parse_naptr_reply()`, which     is used for parsing NAPTR responses, could be triggered     to read memory outside of the given input buffer if the     passed in DNS response packet was crafted in a     particular way.(CVE-2017-1000381)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201701-28 (c-ares: Heap-based buffer overflow)

    A hostname with an escaped trailing dot (such as &ldquo;hello\\.&rdquo;) would       have its size calculated incorrectly leading to a single byte written       beyond the end of a buffer on the heap.
  Impact :

    A remote attacker, able to provide a specially crafted hostname to an       application using c-ares, could potentially cause a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

Security fix for CVE-2016-5180

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libcares2 fixes the following issues :

  - Add patch to fix single byte out of buffer write     (CVE-2016-5180, bsc#1007728)

This update was imported from the SUSE:SLE-12:Update update project.

This update for libcares2 fixes the following issues :

  - ares_create_query() single byte out of buffer write     (CVE-2016-5180, boo#1007728)

This update for nodejs4 fixes the following issues :

Security issues fixed :

  - CVE-2016-5180: c-ares: Fix for single-byte buffer     overwrite (bsc#1007728).

Bug fixes :

  - bsc#1009011: npm4 should provide versioned nodejs-npm     and npm allowing nodejs-packaging to continue to     function properly in Leap 42.2

This update was imported from the SUSE:SLE-12:Update update project.

根据其自我报告的版本，远程主机上运行的 Nessus Network Monitor 版本低于 6.2.2 版。因此，它受到 TNS-2023-23 公告中提及的多个漏洞影响。已发现多个第三方组件包含漏洞，供应商已提供更新版本。出于谨慎考虑且符合最佳实践，Tenable 选择升级这些组件，以解决这些问题的潜在影响。Nessus Network Monitor 6.2.2 更新了以下组件：

  - 将 c-ares 版本从 1.10.0 更新到 1.19.1。
  - 将 curl 版本从 7.79.1 更新到 8.1.2。
  - 将 libbzip2 版本从 1.0.6 更新到 1.0.8。
  - 将 libpcre 版本从 8.42 更新到 8.44。
  - 将 libxml2 版本从 2.7.7 更新到 2.11.1。
  - 将 libxslt 版本从 1.1.26 更新到 1.1.37。
  - 将 libxmlsec 版本从 1.2.18 更新到 1.2.37。
  - 将 sqlite 版本从 3.27.2 更新到 3.40.1。
  - 将 jQuery Cookie 版本从 1.3.1 更新到 1.4.1。
  - 将 jQuery UI 版本从 1.13.0 更新到 1.13.2。
  - 将 OpenSSL 版本从 3.0.8 更新到 3.0.9。

远程 Redhat Enterprise Linux 6 / 7 主机上安装的程序包受到 RHSA-2017:0002 公告中提及的多个漏洞影响。

    Node.js 是一个构建在 Chrome 的 JavaScript 运行时基础上的平台，用于轻松构建快速、可扩展的网络应用程序。Node.js 使用事件驱动的非阻断 I/O 模型，这使其轻便而高效，非常适合于在分散的设备上运行的数据密集型实时应用程序。

    下列程序包已升级至更新的上游版本：rh-nodejs4-nodejs (4.6.2)、rh-nodejs4-http-parser (2.7.0)。(BZ#1388097)

    安全修复：

    * 已发现 Node.js 的 tls.checkServerIdentity() 函数未能正确验证含有通配符的服务器证书。恶意 TLS 服务器可以利用此缺陷来获取可由 Node.js TLS 客户端接受的特制证书。(CVE-2016-7099)

    * 已发现当分配新的内存（Zone::New() 和 Zone::NewExpand()）时，V8 Zone 类容易受到整数溢出影响。有能力操控大型区域的攻击者可造成应用程序崩溃，或可能以应用程序权限执行任意代码。(CVE-2016-1669)

    * 在 Node.js 随附的 DNS 解析器库 c-ares 中发现一个漏洞。具有转义末尾点的主机名称会不正确计算其大小，进而导致单一字节在堆上的写入位置超过缓冲区末端。能够向使用 c-ares 的应用程序提供此类主机名的攻击者可能导致该应用程序崩溃。(CVE-2016-5180)

    * 发现 ServerResponse#writeHead() 中的 reason 参数未经过正确验证。远程攻击者可能利用此缺陷通过特制的 HTTP 请求执行 HTTP 响应拆分攻击。(CVE-2016-5325)

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Gzob Qq 发现 c-ares（异步 DNS 请求库）中的查询构建函数未正确处理构建的查询名称，从而导致堆缓冲区溢出，并可能导致任意代码执行。

Gzob Qq 发现 c-ares 未能正确处理某些主机名。
远程攻击者可利用此问题造成应用程序崩溃，从而导致拒绝服务或可能执行任意代码。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

ID	Name	Product	Family	Published	Updated	Severity
177842	Nessus Network Monitor < 6.2.2 多個弱點 (TNS-2023-23)	Nessus	Misc.	6/30/2023	7/6/2023	critical
119986	SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2016:2898-1)	Nessus	SuSE Local Security Checks	1/2/2019	7/11/2024	critical
128953	EulerOS Virtualization for ARM 64 3.0.2.0 : c-ares (EulerOS-SA-2019-1950)	Nessus	Huawei Local Security Checks	9/17/2019	4/25/2024	critical
128097	EulerOS 2.0 SP5 : c-ares (EulerOS-SA-2019-1805)	Nessus	Huawei Local Security Checks	8/23/2019	5/2/2024	critical
96422	GLSA-201701-28 : c-ares: Heap-based buffer overflow	Nessus	Gentoo Local Security Checks	1/12/2017	1/11/2021	critical
93920	Fedora 23 : mingw-c-ares (2016-66d9389548)	Nessus	Fedora Local Security Checks	10/10/2016	1/11/2021	critical
96379	openSUSE Security Update : libcares2 (openSUSE-2017-58)	Nessus	SuSE Local Security Checks	1/10/2017	1/19/2021	critical
95463	openSUSE Security Update : libcares2 (openSUSE-2016-1373)	Nessus	SuSE Local Security Checks	12/2/2016	1/19/2021	critical
95557	openSUSE Security Update : nodejs4 (openSUSE-2016-1403)	Nessus	SuSE Local Security Checks	12/6/2016	1/19/2021	critical
177842	Nessus Network Monitor < 6.2.2 多个漏洞 (TNS-2023-23)	Nessus	Misc.	6/30/2023	7/6/2023	critical
210197	RHEL 6/7：rh-nodejs4-nodejs 和 rh-nodejs4-http-parser (RHSA-2017:0002)	Nessus	Red Hat Local Security Checks	11/4/2024	11/5/2024	critical
93836	Debian DSA-3682-1：c-ares - 安全更新	Nessus	Debian Local Security Checks	10/4/2016	1/11/2021	critical
95428	Ubuntu 14.04 LTS / 16.04 LTS：c-ares 漏洞 (USN-3143-1)	Nessus	Ubuntu Local Security Checks	12/1/2016	8/27/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical