The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6989 advisory.

    - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314]
    - Fix CVE-2024-45492 integer overflow
    - Fix CVE-2024-45491 Integer Overflow or Wraparound
    - Fix CVE-2024-45490 Negative Length Parsing Vulnerability

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3538-1 advisory.

    - CVE-2024-45490: Fixed negative len for XML_ParseBuffer in embedded expat (bnc#1230036)
    - CVE-2024-45491: Fixed integer overflow in dtdCopy in embedded expat (bnc#1230037)
    - CVE-2024-45492: Fixed integer overflow in function nextScaffoldPart in embedded expat (bnc#1230038)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3554-1 advisory.

    - CVE-2024-45490: Fixed negative len for XML_ParseBuffer in embedded expat (bnc#1230036)
    - CVE-2024-45491: Fixed integer overflow in dtdCopy in embedded expat (bnc#1230037)
    - CVE-2024-45492: Fixed integer overflow in function nextScaffoldPart in embedded expat (bnc#1230038)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile     time.(CVE-2023-52426)

    An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for     XML_ParseBuffer.(CVE-2024-45490)

    An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for     nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).(CVE-2024-45491)

    An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).(CVE-2024-45492)

Tenable has extracted the preceding description block directly from the EulerOS expat security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for     XML_ParseBuffer.(CVE-2024-45490)

    An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for     nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).(CVE-2024-45491)

    An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).(CVE-2024-45492)

Tenable has extracted the preceding description block directly from the EulerOS expat security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f652468298 advisory.

    This is a security release of Python 3.11
    -----------------------------------------

    **Note:** The release you're looking at is Python 3.11.10, a **security bugfix release** for the legacy     3.11 series. *Python 3.12* is now the latest feature release series of Python 3.

    Security content in this release
    --------------------------------

    -   [gh-123067](https://github.com/python/cpython/issues/123067): Fix quadratic complexity in parsing     ``-quoted cookie values with backslashes by     [`http.cookies`](https://docs.python.org/3/library/http.cookies.html#module-http.cookies). Fixes     CVE-2024-7592.
    -   [gh-113171](https://github.com/python/cpython/issues/113171): Fixed various false positives and false     negatives in IPv4Address.is_private, IPv4Address.is_global, IPv6Address.is_private, IPv6Address.is_global.
    Fixes CVE-2024-4032.
    -   [gh-67693](https://github.com/python/cpython/issues/67693): Fix     [`urllib.parse.urlunparse()`](https://docs.python.org/3/library/urllib.parse.html#urllib.parse.urlunparse)     and     [`urllib.parse.urlunsplit()`](https://docs.python.org/3/library/urllib.parse.html#urllib.parse.urlunsplit)     for URIs with path starting with multiple slashes and no authority. Fixes CVE-2015-2104.
    -   [gh-121957](https://github.com/python/cpython/issues/121957): Fixed missing audit events around     interactive use of Python, now also properly firing for `python -i`, as well as for `python -m asyncio`.
    The event in question is `cpython.run_stdin`.
    -   [gh-122133](https://github.com/python/cpython/issues/122133): Authenticate the socket connection for     the `socket.socketpair()` fallback on platforms where `AF_UNIX` is not available like Windows.
    -   [gh-121285](https://github.com/python/cpython/issues/121285): Remove backtracking from tarfile header     parsing for `hdrcharset`, PAX, and GNU sparse headers. That's CVE-2024-6232.
    -   [gh-114572](https://github.com/python/cpython/issues/114572): [`ssl.SSLContext.cert_store_stats()`](ht     tps://docs.python.org/3/library/ssl.html#ssl.SSLContext.cert_store_stats) and     [`ssl.SSLContext.get_ca_certs()`](https://docs.python.org/3/library/ssl.html#ssl.SSLContext.get_ca_certs)     now correctly lock access to the certificate store, when the     [`ssl.SSLContext`](https://docs.python.org/3/library/ssl.html#ssl.SSLContext) is shared across multiple     threads.
    -   [gh-102988](https://github.com/python/cpython/issues/102988): [`email.utils.getaddresses()`](https://d     ocs.python.org/3/library/email.utils.html#email.utils.getaddresses) and     [`email.utils.parseaddr()`](https://docs.python.org/3/library/email.utils.html#email.utils.parseaddr) now     return `('', '')` 2-tuples in more situations where invalid email addresses are encountered instead of     potentially inaccurate values. Add optional *strict* parameter to these two functions: use `strict=False`     to get the old behavior, accept malformed inputs. `getattr(email.utils, 'supports_strict_parsing', False)`     can be use to check if the *strict* paramater is available. This improves the CVE-2023-27043 fix.
    -   [gh-123270](https://github.com/python/cpython/issues/123270): Sanitize names in     [`zipfile.Path`](https://docs.python.org/3/library/zipfile.html#zipfile.Path) to avoid infinite loops     ([gh-122905](https://github.com/python/cpython/issues/122905)) without breaking contents using legitimate     characters. That's CVE-2024-8088.
    -   [gh-121650](https://github.com/python/cpython/issues/121650):
    [`email`](https://docs.python.org/3/library/email.html#module-email) headers with embedded newlines are     now quoted on output. The [`generator`](https://docs.python.org/3/library/email.generator.html#module-     email.generator) will now refuse to serialize (write) headers that are unsafely folded or delimited; see [     `verify_generated_headers`](https://docs.python.org/3/library/email.policy.html#email.policy.Policy.verify
    _generated_headers). That's CVE-2024-6923.
    -   [gh-119690](https://github.com/python/cpython/issues/119690): Fixes data type confusion in audit     events raised by `_winapi.CreateFile` and `_winapi.CreateNamedPipe`.
    -   [gh-116773](https://github.com/python/cpython/issues/116773): Fix instances of     `<_overlapped.Overlapped object at 0xXXX> still has pending operation at deallocation, the process may     crash`.
    -   [gh-112275](https://github.com/python/cpython/issues/112275): A deadlock involving `pystate.c`'s     `HEAD_LOCK` in `posixmodule.c` at fork is now fixed.This is a security release of Python 3.9
    ----------------------------------------

    **Note:** The release you're looking at is Python 3.9.20, a **security bugfix release** for the legacy 3.9     series. *Python 3.12* is now the latest feature release series of Python 3. [Get the latest release of     3.12.x here](https://www.python.org/downloads/).

    Security content in this release
    --------------------------------

    -   [gh-123678](https://github.com/python/cpython/issues/123678) and     [gh-116741](https://github.com/python/cpython/issues/116741): Upgrade bundled libexpat to 2.6.3 to fix     [CVE-2024-28757](https://github.com/advisories/GHSA-ch5v-h69f-mxc8),     [CVE-2024-45490](https://github.com/advisories/GHSA-4hvh-m426-wv8w),     [CVE-2024-45491](https://github.com/advisories/GHSA-784x-7qm2-gp97) and     [CVE-2024-45492](https://github.com/advisories/GHSA-5qxm-qvmj-8v79).
    -   [gh-118486](https://github.com/python/cpython/issues/118486):
    [`os.mkdir()`](https://docs.python.org/3/library/os.html#os.mkdir) on Windows now accepts *mode* of     `0o700` to restrict the new directory to the current user. This fixes CVE-2024-4030 affecting     [`tempfile.mkdtemp()`](https://docs.python.org/3/library/tempfile.html#tempfile.mkdtemp) in scenarios     where the base temporary directory is more permissive than the default.
    -   [gh-123067](https://github.com/python/cpython/issues/123067): Fix quadratic complexity in parsing     ``-quoted cookie values with backslashes by     [`http.cookies`](https://docs.python.org/3/library/http.cookies.html#module-http.cookies). Fixes     CVE-2024-7592.
    -   [gh-113171](https://github.com/python/cpython/issues/113171): Fixed various false positives and false     negatives in IPv4Address.is_private, IPv4Address.is_global, IPv6Address.is_private, IPv6Address.is_global.
    Fixes CVE-2024-4032.
    -   [gh-67693](https://github.com/python/cpython/issues/67693): Fix     [`urllib.parse.urlunparse()`](https://docs.python.org/3/library/urllib.parse.html#urllib.parse.urlunparse)     and     [`urllib.parse.urlunsplit()`](https://docs.python.org/3/library/urllib.parse.html#urllib.parse.urlunsplit)     for URIs with path starting with multiple slashes and no authority. Fixes CVE-2015-2104.
    -   [gh-121957](https://github.com/python/cpython/issues/121957): Fixed missing audit events around     interactive use of Python, now also properly firing for `python -i`, as well as for `python -m asyncio`.
    The event in question is `cpython.run_stdin`.
    -   [gh-122133](https://github.com/python/cpython/issues/122133): Authenticate the socket connection for     the `socket.socketpair()` fallback on platforms where `AF_UNIX` is not available like Windows.
    -   [gh-121285](https://github.com/python/cpython/issues/121285): Remove backtracking from tarfile header     parsing for `hdrcharset`, PAX, and GNU sparse headers. That's CVE-2024-6232.
    -   [gh-114572](https://github.com/python/cpython/issues/114572): [`ssl.SSLContext.cert_store_stats()`](ht     tps://docs.python.org/3/library/ssl.html#ssl.SSLContext.cert_store_stats) and     [`ssl.SSLContext.get_ca_certs()`](https://docs.python.org/3/library/ssl.html#ssl.SSLContext.get_ca_certs)     now correctly lock access to the certificate store, when the     [`ssl.SSLContext`](https://docs.python.org/3/library/ssl.html#ssl.SSLContext) is shared across multiple     threads.
    -   [gh-102988](https://github.com/python/cpython/issues/102988): [`email.utils.getaddresses()`](https://d     ocs.python.org/3/library/email.utils.html#email.utils.getaddresses) and     [`email.utils.parseaddr()`](https://docs.python.org/3/library/email.utils.html#email.utils.parseaddr) now     return `('', '')` 2-tuples in more situations where invalid email addresses are encountered instead of     potentially inaccurate values. Add optional *strict* parameter to these two functions: use `strict=False`     to get the old behavior, accept malformed inputs. `getattr(email.utils, 'supports_strict_parsing', False)`     can be use to check if the *strict* paramater is available. This improves the CVE-2023-27043 fix.
    -   [gh-123270](https://github.com/python/cpython/issues/123270): Sanitize names in     [`zipfile.Path`](https://docs.python.org/3/library/zipfile.html#zipfile.Path) to avoid infinite loops     ([gh-122905](https://github.com/python/cpython/issues/122905)) without breaking contents using legitimate     characters. That's CVE-2024-8088.
    -   [gh-121650](https://github.com/python/cpython/issues/121650):
    [`email`](https://docs.python.org/3/library/email.html#module-email) headers with embedded newlines are     now quoted on output. The [`generator`](https://docs.python.org/3/library/email.generator.html#module-     email.generator) will now refuse to serialize (write) headers that are unsafely folded or delimited; see     [`ver

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory.

  - Vulnerability in the Oracle Spatial and Graph (libcurl2) component of Oracle Database Server. Supported     versions that are affected are 19.3-19.24, 21.3-21.15 and 23.4-23.5. Difficult to exploit vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Oracle Spatial and Graph     (libcurl2). Successful attacks require human interaction from a person other than the attacker. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of Oracle Spatial and Graph (libcurl2). (CVE-2024-7264)

  - Vulnerability in the Oracle Database Security (OpenSSL) component of Oracle Database Server. Supported     versions that are affected are 23.4-23.5. Easily exploitable vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise Oracle Database Security (OpenSSL). Successful     attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service     (partial DOS) of Oracle Database Security (OpenSSL). (CVE-2024-5535, CVE-2024-6119)

  - Vulnerability in the Fleet Patching and Provisioning - Micronaut (Netty) component of Oracle Database     Server. Supported versions that are affected are 23.4-23.5. Easily exploitable vulnerability allows low     privileged attacker having Authenticated User privilege with network access via HTTP to compromise Fleet     Patching and Provisioning - Micronaut (Netty). Successful attacks of this vulnerability can result in     unauthorized ability to cause a partial denial of service (partial DOS) of Fleet Patching and Provisioning
    - Micronaut (Netty). (CVE-2024-29025)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0 advisory.

  - squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different     vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link     and then contents under the same filename in a filesystem can cause unsquashfs to first create the     symbolic link pointing outside the expected directory, and then the subsequent write operation will cause     the unsquashfs process to write through the symbolic link elsewhere in the filesystem. (CVE-2021-41072)

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache     Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers     correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect     infinite timeout which allowed connections to remain open which should have been closed. This issue     affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1     through 9.0.89. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the     issue. (CVE-2024-34750)

  - Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of     service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of     Service (ReDoS) in package_index.py. (CVE-2022-40897)

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In     affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol,     but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated,     thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an     exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.
    (CVE-2023-23931)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
207710	Oracle Linux 8 : expat (ELSA-2024-6989)	Nessus	Oracle Linux Local Security Checks	9/24/2024	3/21/2025	critical
208251	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mozjs115 (SUSE-SU-2024:3538-1)	Nessus	SuSE Local Security Checks	10/8/2024	10/8/2024	critical
208673	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mozjs78 (SUSE-SU-2024:3554-1)	Nessus	SuSE Local Security Checks	10/10/2024	10/10/2024	critical
210680	EulerOS 2.0 SP9 : expat (EulerOS-SA-2024-2827)	Nessus	Huawei Local Security Checks	11/8/2024	3/21/2025	critical
212634	EulerOS 2.0 SP11 : expat (EulerOS-SA-2024-2980)	Nessus	Huawei Local Security Checks	12/12/2024	3/21/2025	critical
229213	Linux Distros Unpatched Vulnerability : CVE-2024-45492	Nessus	Misc.	3/5/2025	3/5/2025	critical
207485	Fedora 39 : python3.8 (2024-f652468298)	Nessus	Fedora Local Security Checks	9/20/2024	9/20/2024	critical
209306	Oracle Database Server (October 2024 CPU)	Nessus	Databases	10/18/2024	1/24/2025	medium
212124	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0)	Nessus	Misc.	12/6/2024	2/5/2025	medium

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

medium

medium