The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3612 advisory.

    libxslt is a library for transforming XML files into other textual formats (including HTML, plain text,     and other XML representations of the underlying data) using the standard XSLT stylesheet transformation     mechanism.

    Security Fix(es):

    * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)

    * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3626 advisory.

    libxslt is a library for transforming XML files into other textual formats (including HTML, plain text,     and other XML representations of the underlying data) using the standard XSLT stylesheet transformation     mechanism.

    Security Fix(es):

    * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)

    * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.(CVE-2025-24855)

    xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes.(CVE-2024-55549)

Tenable has extracted the preceding description block directly from the EulerOS libxslt security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes.(CVE-2024-55549)

    numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal.(CVE-2025-24855)

Tenable has extracted the preceding description block directly from the EulerOS libxslt security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3624 advisory.

    libxslt is a library for transforming XML files into other textual formats (including HTML, plain text,     and other XML representations of the underlying data) using the standard XSLT stylesheet transformation     mechanism.

    Security Fix(es):

    * libxslt: Use-After-Free in libxslt numbers.c (CVE-2025-24855)

    * libxslt: Use-After-Free in libxslt (xsltGetInheritedNsList) (CVE-2024-55549)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libxslt installed on the remote host is prior to 1.1.28-6.16. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1968 advisory.

    xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes. (CVE-2024-55549)

    numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal. (CVE-2025-24855)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
234270	RHEL 7 : libxslt (RHSA-2025:3612)	Nessus	Red Hat Local Security Checks	4/13/2025	6/5/2025	high
234273	RHEL 8 : libxslt (RHSA-2025:3626)	Nessus	Red Hat Local Security Checks	4/13/2025	6/5/2025	high
235775	EulerOS 2.0 SP10 : libxslt (EulerOS-SA-2025-1529)	Nessus	Huawei Local Security Checks	5/12/2025	5/12/2025	high
238189	EulerOS 2.0 SP13 : libxslt (EulerOS-SA-2025-1621)	Nessus	Huawei Local Security Checks	6/11/2025	6/11/2025	high
238406	EulerOS 2.0 SP11 : libxslt (EulerOS-SA-2025-1672)	Nessus	Huawei Local Security Checks	6/12/2025	6/12/2025	high
234257	RHEL 8 : libxslt (RHSA-2025:3624)	Nessus	Red Hat Local Security Checks	4/13/2025	6/5/2025	high
234704	Amazon Linux AMI : libxslt (ALAS-2025-1968)	Nessus	Amazon Linux Local Security Checks	4/22/2025	4/22/2025	high
238221	EulerOS 2.0 SP13 : libxslt (EulerOS-SA-2025-1638)	Nessus	Huawei Local Security Checks	6/11/2025	6/11/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high