The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02049-1 advisory.

    python311 was updated from version 3.11.10 to 3.11.13:

    - Security issues fixed:

      * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS     (bsc#1243273).
      * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed     tarfile         extraction filters to be bypassed using crafted symlinks and hard links         (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032)

    - Other bugs fixed:

      * Improved handling of system call failures that OpenSSL reports (bsc#1241067)
      * Disable GC during thread operations to prevent deadlocks.
      * Fixed a potential denial of service vulnerability in the imaplib module.
      * Fixed bugs in the in the folding of rfc2047 encoded-words and in the folding of quoted strings when     flattening an         email message using a modern email policy.
      * Fixed parsing long IPv6 addresses with embedded IPv4 address.
      * Fixed ipaddress.IPv6Address.reverse_pointer output according to RFC 3596.
      * Improved the textual representation of IPv4-mapped IPv6 addresses in ipaddress.
      * ipaddress: fixed hash collisions for IPv4Network and IPv6Network objects
      * os.path.realpath() now accepts a strict keyword-only argument.
      * Stop the processing of long IPv6 addresses early in ipaddress to prevent excessive memory consumption     and a minor         denial-of-service.
      * Updated bundled libexpat to 2.7.1
      * Writers of CPython documentation can now use next as the version for the versionchanged, versionadded,         deprecated directives.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02057-1 advisory.

    python311 was updated from version 3.11.10 to 3.11.13:

    - Security issues fixed:

      * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS     (bsc#1243273).
      * CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4517: Fixed multiple issues that allowed     tarfile         extraction filters to be bypassed using crafted symlinks and hard links         (bsc#1244056, bsc#1244059, bsc#1244060, bsc#1244032)


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has python3.11 packages installed that are affected by multiple vulnerabilities:

  - A vulnerability has been found in the CPython `venv` module and CLI where path names provided when     creating a virtual environment were not quoted properly, allowing the creator to inject commands into     virtual environment activation scripts (ie source venv/bin/activate). This means that attacker-     controlled virtual environments are able to run commands when the virtual environment is activated.
    Virtual environments which are not created by an attacker or which aren't activated before being used (ie     ./venv/bin/python) are not affected. (CVE-2024-9287)

  - The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special     character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some     applications, an attacker can bypass a protection mechanism in which application access is granted only     after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be     used for signup). This occurs in email/_parseaddr.py in recent versions of Python. (CVE-2023-27043)

  - A defect was discovered in the Python ssl module where there is a memory race condition with the     ssl.SSLContext methods cert_store_stats() and get_ca_certs(). The race condition can be triggered if     the methods are called at the same time as certificates are loaded into the SSLContext, such as during the     TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9,     3.12.3, and 3.13.0a5. (CVE-2024-0397)

  - An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and     3.8.18 and prior. The zipfile module is vulnerable to quoted-overlap zip-bombs which exploit the zip     format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile     module reject zip archives which overlap entries in the archive. (CVE-2024-0450)

  - The ipaddress module contained incorrect information about whether certain IPv4 and IPv6 addresses were     designated as globally reachable or private. This affected the is_private and is_global properties of     the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network     classes, where values wouldn't be returned in accordance with the latest information from the IANA     Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these     registries and thus have the intended behavior. (CVE-2024-4032)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.103068. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103068 advisory.

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17,     iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14.
    Processing web content may disclose sensitive information. (CVE-2023-40403)

  - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines. (CVE-2025-32462)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

  - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata. You are affected by this vulnerability if using the     tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the     filter= parameter with a value of data or tar. See the tarfile extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that     for Python 3.14 or later the default value of filter= changed from no filtering to `data, so if you     are relying on this new default behavior then your usage is also affected. Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links. (CVE-2025-4138, CVE-2025-4330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7583-1 advisory.

    It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An     attacker could possibly use this issue to modify files in arbitrary filesystem locations and cause data     loss.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10136 advisory.

    [3.9.21-2.1]
    - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435     Resolves: RHEL-98053, RHEL-98025, RHEL-98243, RHEL-98195, RHEL-98219

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10140 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

    * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)

    * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

    * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

    * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction     directory (CVE-2025-4138)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10140 advisory.

    - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10399 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

    * cpython: python: Bypass extraction filter to modify file metadata outside extraction directory     (CVE-2024-12718)

    * cpython: python: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

    * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

    * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction     directory (CVE-2025-4138)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0121 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-12718:
    Allows modifying some file metadata (e.g. last modified) with filter=dataor file permissions (chmod)     with filter=tarof files outside the extraction directory.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only     Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the     extraction filter feature.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4138:
    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4330:
    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4435:
    When using a TarFile.errorlevel = 0and extracting with a filter the documented behavior is that any     filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel =     0in affected versions is that the member would still be extracted and not skipped.

    CVE-2025-4517:
    Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=data.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10140 advisory.

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
      * cpython: Bypass extraction filter to modify file metadata outside extraction directory     (CVE-2024-12718)
      * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
      * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
      * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside     extraction directory (CVE-2025-4138)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10028 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

    * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)

    * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

    * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

    * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction     directory (CVE-2025-4138)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
240606	SUSE SLES15 Security Update : python311 (SUSE-SU-2025:02049-1)	Nessus	SuSE Local Security Checks	6/26/2025	7/8/2025	critical
241096	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2025:02057-1)	Nessus	SuSE Local Security Checks	7/1/2025	7/1/2025	critical
242797	NewStart CGSL MAIN 7.02 : python3.11 Multiple Vulnerabilities (NS-SA-2025-0109)	Nessus	NewStart CGSL Local Security Checks	7/25/2025	7/25/2025	high
258028	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103068)	Nessus	Misc.	8/27/2025	8/27/2025	critical
240210	Ubuntu 24.04 LTS / 24.10 / 25.04 : Python vulnerabilities (USN-7583-1)	Nessus	Ubuntu Local Security Checks	6/20/2025	7/8/2025	critical
241136	Oracle Linux 9 : python3.9 (ELSA-2025-10136)	Nessus	Oracle Linux Local Security Checks	7/2/2025	7/2/2025	critical
241138	RHEL 10 : python3.12 (RHSA-2025:10140)	Nessus	Red Hat Local Security Checks	7/2/2025	10/9/2025	critical
241226	Oracle Linux 10 : python3.12 (ELSA-2025-10140)	Nessus	Oracle Linux Local Security Checks	7/3/2025	7/3/2025	critical
241449	RHEL 9 : python3.9 (RHSA-2025:10399)	Nessus	Red Hat Local Security Checks	7/7/2025	7/7/2025	critical
242490	Alibaba Cloud Linux 3 : 0121: python3.11 (ALINUX3-SA-2025:0121)	Nessus	Alibaba Cloud Linux Local Security Checks	7/22/2025	7/22/2025	critical
269851	AlmaLinux 10 : python3.12 (ALSA-2025:10140)	Nessus	Alma Linux Local Security Checks	10/9/2025	10/9/2025	critical
241077	RHEL 9 : python3.12 (RHSA-2025:10028)	Nessus	Red Hat Local Security Checks	7/1/2025	7/1/2025	critical

Detections

Analytics

Plugins Search

critical

critical

high

critical

critical

critical

critical

critical

critical

critical

critical

critical