The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0029 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-41043:
    Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 61f416ff-aa00-11ec-b439-000d3a450398 advisory.

  - Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. (CVE-2021-41043)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1090 advisory.

    The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can     capture and display the packet headers on a particular network interface or on all interfaces.

    Security Fix(es):

    * tcpslice: use-after-free in extract_slice() (CVE-2021-41043)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.100187 advisory.

  - A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside     the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to     port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to     manipulate a running instance, potentially altering forwarders, allowing them to track all queries     forwarded by the local resolver, and, in some cases, disrupting resolving altogether. (CVE-2024-1488)

  - Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact. (CVE-2021-41043)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2024: 0571 公告中提及的漏洞影响。

  - tcpslice 中的释放后使用漏洞会触发 AddressSanitizer，其他影响尚未确认。(CVE-2021-41043)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 RockyLinux 9 主机上存在安装的程序包该程序包受到公告 RLSA-2024:2211 中提及的漏洞的影响。

    * tcpsliceextract_slice() 中的释放后使用 (CVE-2021-41043)

Tenable 已直接从 RockyLinux 安全公告中提取了上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 AHV 版本低于 20230302.102005。因此，它受到 NXSA-AHV-20230302.2024 公告中提及的多个漏洞影响。

  - 此缺陷允许恶意 HTTP 服务器在 curl 中设置超级 cookie，然后将其传回比允许或可能的更多来源。这可允许站点设置 cookie，然后将其发送至不同且不相关的站点或域。它可以通过利用 curl 函数中的混合大小写缺陷来实现这一点，该函数根据公共后缀列表 (PSL) 验证给定的 cookie 域。例如，当 URL 使用小写主机名“curl.co.uk”时，可以使用“domain=co.UK”设置 cookie，即使“co.uk”被列为 PSL 域。(CVE-2023-46218)

  - tcpslice 中的释放后使用漏洞会触发 AddressSanitizer，其他影响尚未确认。(CVE-2021-41043)

  - 远程攻击者可利用 DNS 协议的某些 DNSSEC 方面（在 RFC 4033、4034、4035、6840 和相关 RFC 中），通过一个或多个 DNSSEC 响应造成拒绝服务情形（CPU 消耗），也称为 KeyTrap 问题。其中一个问题是，当存在包含多条 DNSKEY 和 RRSIG 记录的区域时，协议规范意味着算法必须评估 DNSKEY 和 RRSIG 记录的所有组合。(CVE-2023-50387)

  - 远程攻击者可利用 DNS 协议的最近封装体验证方面（在跳过 RFC 9276 指南时的 RFC 5155 中），通过随机子域攻击中的 DNSSEC 响应造成拒绝服务情形（SHA-1 计算的 CPU 消耗），也称为 NSEC3 问题。RFC 5155 规范意味着算法在某些情况下必须执行数千次的哈希函数迭代。(CVE-2023-50868)

  - 在 606 之前的 less 中，filename.c 中的 close_altfile 忽略用于 LESSCLOSE 的 shell_quote 调用。(CVE-2022-48624)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

遠端 Redhat Enterprise Linux 9 主機上安裝的套件受到 RHSA-2024:1090 公告中提及的一個弱點影響。

  - tcpslice 觸發 AddressSanitizer 時會發生釋放後使用，未確認有其他影響。(CVE-2021-41043)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機上安裝的 AHV 低於 20230302.102005 版。因此，它受到 NXSA-AHV-20230302.100187 公告中所提及的多個弱點影響。

  - 在 Unbound 中發現一個弱點，這是由於預設權限不正確所致，可允許 unbound 群組之外的任何處理程序修改 unbound 執行階段設定。如果處理程序可透過 localhost 連線至連接埠 8953，則可變更 unbound.service 的設定。無權限的攻擊者可利用此缺陷操控執行中的執行個體，進而可能變更轉送工具，追踪本機解析器轉送的所有查詢，且在某些情況下，甚至會一起中斷解析。(CVE-2024-1488)

  - tcpslice 觸發 AddressSanitizer 時會發生釋放後使用，未確認有其他影響。(CVE-2021-41043)

  - 遠端攻擊者可利用 DNS 通訊協定 (在 RFC 4033、4034、4035、6840 和相關 RFC 中) 的特定 DNSSEC 方面，透過一或多個 DNSSEC 回應造成拒絕服務 (CPU 消耗)，即 KeyTrap 問題。其中一個問題是，當某個區域具有多個 DNSKEY 和 RRSIG 記錄時，通訊協定規格即表示演算法必須評估 DNSKEY 和 RRSIG 記錄的所有組合。(CVE-2023-50387)

  - 遠端攻擊者可利用 DNS 通訊協定 (略過 RFC 9276 指南時為 RFC 5155) 的最近封裝證明部分，透過隨機子網域攻擊中的 DNSSEC 回應造成拒絕服務 (SHA-1 計算的 CPU 消耗)，即 NSEC3 問題。RFC 5155 規格即表示，演算法必須在某些情況下執行雜湊函式的數千次反覆運算。(CVE-2023-50868)

  - 在 606 版之前的 less 中，filename.c 的 close_altfile 省略了對 LESSCLOSE 的 shell_quote 呼叫。(CVE-2022-48624)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	Name	Product	Family	Published	Updated	Severity
236540	Alibaba Cloud Linux 3 : 0029: tcpdump (ALINUX3-SA-2024:0029)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	medium
184460	FreeBSD : tcpslice -- heap-based use-after-free in extract_slice() (61f416ff-aa00-11ec-b439-000d3a450398)	Nessus	FreeBSD Local Security Checks	11/6/2023	11/6/2023	medium
191546	RHEL 9 : tcpdump (RHSA-2024:1090)	Nessus	Red Hat Local Security Checks	3/5/2024	11/7/2024	medium
206821	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.100187)	Nessus	Misc.	9/9/2024	10/6/2025	critical
189788	RHEL 8：tcpdump (RHSA-2024: 0571)	Nessus	Red Hat Local Security Checks	1/30/2024	11/7/2024	medium
235581	RockyLinux 9tcpdump (RLSA-2024:2211)	Nessus	Rocky Linux Local Security Checks	5/7/2025	5/7/2025	medium
206822	Nutanix AHV：多个漏洞 (NXSA-AHV-20230302.2024)	Nessus	Misc.	9/9/2024	3/28/2025	critical
191546	RHEL 9：tcpdump (RHSA-2024:1090)	Nessus	Red Hat Local Security Checks	3/5/2024	11/7/2024	medium
206821	Nutanix AHV：多個弱點 (NXSA-AHV-20230302.100187)	Nessus	Misc.	9/9/2024	10/6/2025	critical

Detections

Analytics

Plugins Search

medium

medium

medium

critical

medium

medium

critical

medium

critical