The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0108 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2018-20337:
    There is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in LibRaw     0.19.1. Crafted input will lead to a denial of service or possibly unspecified other impact.

    CVE-2019-3825:
    A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an     attacker could bypass the lock screen by selecting the timed login user and waiting for the timer to     expire, at which time they would gain access to the logged-in user's session.

    CVE-2019-3827:
    An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows     reading and modify arbitrary files by privileged users without asking for password when no authentication     agent is running. This vulnerability can be exploited by malicious programs running under privileges of     users belonging to the wheel group to further escalate its privileges by modifying system files without     user's knowledge. Successful exploitation requires uncommon system configuration.

    CVE-2019-12447:
    An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file     ownership because setfsuid is not used.

    CVE-2019-12448:
    An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions     because the admin backend doesn't implement query_info_on_read/write.

    CVE-2019-12449:
    An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's     user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to     file:// URIs, because root privileges are unavailable.

    CVE-2019-12795:
    daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3     opened a private D-Bus server socket without configuring an authorization rule. A local attacker could     connect to this server socket and issue D-Bus method calls.(Note that the server socket only accepts a     single connection, so the attacker would have to discover the server and connect to the socket before its     owner does.)

    CVE-2019-15690:
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.

    CVE-2019-20839:
    libvncclient/sockets.c in LibVNCServer before 0.9.13 has a buffer overflow via a long socket filename.

    CVE-2020-14397:
    An issue was discovered in LibVNCServer before 0.9.13. libvncserver/rfbregion.c has a NULL pointer     dereference.

    CVE-2020-14405:
    An issue was discovered in LibVNCServer before 0.9.13. libvncclient/rfbproto.c does not limit TextChat     size.

    CVE-2020-15503:
    LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp,     postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example,     malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.

    CVE-2020-25708:
    A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw     to send a specially crafted message that, when processed by the VNC server, would lead to a floating point     exception, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Simon McVittie discovered a flaw in gvfs, the Gnome Virtual File System. The gvfsd daemon opened a private D-Bus server socket without configuring an authorization rule. A local attacker could connect to this server socket and issue D-Bus method calls.

(Note that the server socket only accepts a single connection, so the attacker would have to discover the server and connect to the socket before its owner does.)

For Debian 8 'Jessie', this problem has been fixed in version 1.22.2-1+deb8u1.

We recommend that you upgrade your gvfs packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gvfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before     1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3     opened a private D-Bus server socket without     configuring an authorization rule. A local attacker     could connect to this server socket and issue D-Bus     method calls. (Note that the server socket only accepts     a single connection, so the attacker would have to     discover the server and connect to the socket before     its owner does.)(CVE-2019-12795)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:3553 advisory.

  - WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings     when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization.
    This issue was corrected by changing the way livestreams are downloaded. (CVE-2019-11070)

  - The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in     GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to     uninitialized memory use when processing certain TIFF image files. (CVE-2019-11459)

  - daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3     opened a private D-Bus server socket without configuring an authorization rule. A local attacker could     connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a     single connection, so the attacker would have to discover the server and connect to the socket before its     owner does.) (CVE-2019-12795)

  - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all     contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard     shortcuts, and potentially other actions. (CVE-2019-3820)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-6237,     CVE-2019-8571, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596,     CVE-2019-8597, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615, CVE-2019-8619)

  - WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain     JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted     URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge. (CVE-2019-6251)

  - A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS     12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2019-8506)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing     maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-8518, CVE-2019-8558,     CVE-2019-8559, CVE-2019-8563)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2019-8523, CVE-2019-8524)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2,     tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2019-8535)

  - A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2,     tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing     maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-8536, CVE-2019-8544)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari     12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may     lead to universal cross site scripting. (CVE-2019-8551)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for     Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
    (CVE-2019-8583, CVE-2019-8601, CVE-2019-8622, CVE-2019-8623)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13,     iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    (CVE-2019-8666, CVE-2019-8671, CVE-2019-8673, CVE-2019-8677, CVE-2019-8679, CVE-2019-8681, CVE-2019-8686,     CVE-2019-8687)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for     Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary     code execution. (CVE-2019-8672, CVE-2019-8676, CVE-2019-8689)

  - A logic issue existed in the handling of document loads. This issue was addressed with improved state     management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for     Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web     content may lead to universal cross site scripting. (CVE-2019-8690)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in     tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing     maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-8726, CVE-2019-8735)

  - Clear History and Website Data did not clear the history. The issue was addressed with improved data     deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history     items. (CVE-2019-8768)

  - webkitgtk: Out-of-bounds read leading to memory disclosure (CVE-2019-8607)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2019_3553 advisory.

    * evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()     (CVE-2019-11459)

    * gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd (CVE-2019-12795)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2681-1 advisory.

    - CVE-2019-12795: Fixed attack via local D-Bus method calls (bsc#1137930)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06, has gvfs packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions     because the admin backend doesn't implement query_info_on_read/write. (CVE-2019-12448)

  - An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles file     ownership because setfsuid is not used. (CVE-2019-12447)

  - An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles a file's     user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:// to     file:// URIs, because root privileges are unavailable. (CVE-2019-12449)

  - daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3     opened a private D-Bus server socket without configuring an authorization rule. A local attacker could     connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a     single connection, so the attacker would have to discover the server and connect to the socket before its     owner does.) (CVE-2019-12795)

  - An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows     reading and modify arbitrary files by privileged users without asking for password when no authentication     agent is running. This vulnerability can be exploited by malicious programs running under privileges of     users belonging to the wheel group to further escalate its privileges by modifying system files without     user's knowledge. Successful exploitation requires uncommon system configuration. (CVE-2019-3827)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2019:3553 advisory.

  - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all     contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard     shortcuts, and potentially other actions. (CVE-2019-3820)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12.
    Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-6237,     CVE-2019-8571, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596,     CVE-2019-8597, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615, CVE-2019-8619)

  - WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain     JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted     URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge. (CVE-2019-6251)

  - A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS     12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2019-8506)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing     maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-8518, CVE-2019-8558,     CVE-2019-8559, CVE-2019-8563)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously     crafted web content may lead to arbitrary code execution. (CVE-2019-8523, CVE-2019-8524)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2,     tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2019-8535)

  - A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.2,     tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing     maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-8536, CVE-2019-8544)

  - A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari     12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may     lead to universal cross site scripting. (CVE-2019-8551)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for     Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
    (CVE-2019-8583, CVE-2019-8601, CVE-2019-8622, CVE-2019-8623)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13,     iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.
    (CVE-2019-8666, CVE-2019-8671, CVE-2019-8673, CVE-2019-8677, CVE-2019-8679, CVE-2019-8681, CVE-2019-8686,     CVE-2019-8687)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS     12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for     Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary     code execution. (CVE-2019-8672, CVE-2019-8676, CVE-2019-8689)

  - A logic issue existed in the handling of document loads. This issue was addressed with improved state     management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for     Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web     content may lead to universal cross site scripting. (CVE-2019-8690)

  - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in     tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing     maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-8726, CVE-2019-8735)

  - Clear History and Website Data did not clear the history. The issue was addressed with improved data     deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history     items. (CVE-2019-8768)

  - WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings     when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization.
    This issue was corrected by changing the way livestreams are downloaded. (CVE-2019-11070)

  - The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in     GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to     uninitialized memory use when processing certain TIFF image files. (CVE-2019-11459)

  - daemon/gvfsdaemon.c in gvfsd from GNOME gvfs before 1.38.3, 1.40.x before 1.40.2, and 1.41.x before 1.41.3     opened a private D-Bus server socket without configuring an authorization rule. A local attacker could     connect to this server socket and issue D-Bus method calls. (Note that the server socket only accepts a     single connection, so the attacker would have to discover the server and connect to the socket before its     owner does.) (CVE-2019-12795)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
239637	TencentOS Server 3: GNOME (TSSA-2022:0108)	Nessus	Tencent Local Security Checks	6/16/2025	12/5/2025	high
126054	Debian DLA-1827-1 : gvfs security update	Nessus	Debian Local Security Checks	6/20/2019	5/15/2024	high
126876	EulerOS 2.0 SP2 : gvfs (EulerOS-SA-2019-1749)	Nessus	Huawei Local Security Checks	7/22/2019	5/9/2024	high
184895	Rocky Linux 8 : GNOME (RLSA-2019:3553)	Nessus	Rocky Linux Local Security Checks	11/7/2023	11/7/2023	high
355717	Rocky Linux 8 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc Multiple Vulnerabilities (crlsa-2019_3553)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
128830	EulerOS 2.0 SP5 : gvfs (EulerOS-SA-2019-1907)	Nessus	Huawei Local Security Checks	9/16/2019	4/25/2024	high
204931	SUSE SLES12: gvfs / gvfs-backend-samba / gvfs-backends / gvfs-devel / gvfs-fuse / etc (SUSE-SU-2024:2681-1)	Nessus	SuSE Local Security Checks	7/31/2024	6/25/2026	high
330510	NewStart CGSL MAIN 6.06 : gvfs Multiple Vulnerabilities (NS-SA-2026-0060)	Nessus	NewStart CGSL Local Security Checks	7/29/2026	7/29/2026	high
157524	AlmaLinux 8 : GNOME (ALSA-2019:3553)	Nessus	Alma Linux Local Security Checks	2/9/2022	4/25/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high