The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9601 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9819 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9820 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges.(CVE-2024-9632)

Tenable has extracted the preceding description block directly from the EulerOS xorg-x11-server security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:10090 advisory.

    * xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability (CVE-2024-9632)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0252 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-9632:
    A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0238 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-9632:
    A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a     local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading     to denial of service or local privilege escalation in distributions where the X.org server is run with     root privileges.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7163 advisory.

    - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),                    CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),                    CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),                    CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)
    - CVE fix for CVE-2024-9632

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
210921	RHEL 9 : tigervnc (RHSA-2024:9601)	Nessus	Red Hat Local Security Checks	11/13/2024	11/13/2024	high
211765	RHEL 8 : tigervnc (RHSA-2024:9819)	Nessus	Red Hat Local Security Checks	11/24/2024	11/24/2024	high
211769	RHEL 8 : tigervnc (RHSA-2024:9820)	Nessus	Red Hat Local Security Checks	11/24/2024	11/24/2024	high
215994	EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2025-1149)	Nessus	Huawei Local Security Checks	2/10/2025	2/28/2025	high
216034	EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2025-1168)	Nessus	Huawei Local Security Checks	2/10/2025	2/28/2025	high
216039	EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2025-1184)	Nessus	Huawei Local Security Checks	2/10/2025	2/28/2025	high
232894	RockyLinux 9 : tigervnc (RLSA-2024:10090)	Nessus	Rocky Linux Local Security Checks	3/19/2025	3/19/2025	high
236363	Alibaba Cloud Linux 3 : 0252: tigervnc (ALINUX3-SA-2024:0252)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	high
236368	Alibaba Cloud Linux 3 : 0238: xorg-x11-server (ALINUX3-SA-2024:0238)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	high
237050	Oracle Linux 9 : xorg-x11-server (ELSA-2025-7163)	Nessus	Oracle Linux Local Security Checks	5/22/2025	9/11/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high