The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:12980 advisory.

    * glibc: Double free in glibc (CVE-2025-8058)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 6.10.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.10 advisory.

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - Perl threads have a working directory race condition where file operations may target unintended paths. If     a directory handle is open at thread creation, the process-wide current working directory is temporarily     changed in order to clone that handle for the new thread, which is visible from any third (or more) thread     already running. This may lead to unintended operations such as loading code or accessing files from     unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit     11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6 (CVE-2025-40909)

  - The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some     previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed     malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how     the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.
    (CVE-2025-8058)

  - Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc     credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4     to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with     `trust_env=False` on one's Requests Session. (CVE-2024-47081)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007101 advisory.

    The regcomp function in the GNU C library version from 2.4 to 2.41 is     subject to a double free if some previous allocation fails. It can be     accomplished either by a malloc failure or by using an interposed malloc      that injects random malloc failures. The double free can allow buffer     manipulation depending of how the regex is constructed. This issue     affects all architectures and ABIs supported by the GNU C library.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    The regcomp function in the GNU C library version from 2.4 to 2.41 is     subject to a double free if some previous allocation fails. It can be     accomplished either by a malloc failure or by using an interposed malloc      that injects random malloc failures. The double free can allow buffer     manipulation depending of how the regex is constructed. This issue     affects all architectures and ABIs supported by the GNU C library.(CVE-2025-8058)

Tenable has extracted the preceding description block directly from the EulerOS glibc security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign,     aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could     consequently result in a heap corruption.

    Note that the attacker must have control over both, the size as well as the alignment arguments of the     memalign function to be able to exploit this.  The size parameter must be close enough to PTRDIFF_MAX so     as to overflow size_t along with the large alignment argument.  This limits the malicious inputs for the     alignment for memalign to the range [162+ 1, 163] and exactly 163 for posix_memalign and     aligned_alloc.

    Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size,     block size, struct sizes) and is not attacker controlled, because of which this may not be easily     exploitable in practice.  An application bug could potentially result in the input alignment being too     large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent     libraries, but that is again an uncommon usage pattern given typical sources of alignments.(CVE-2026-0861)

    Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to     version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on     subsequent calls to wordfree may abort the process.(CVE-2025-15281)

    The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some     previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed     malloc  that injects random malloc failures. The double free can allow buffer manipulation depending of     how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C     library.(CVE-2025-8058)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization glibc security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the glibc package has been released.

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some     previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed     malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how     the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C     library.(CVE-2025-8058)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization glibc security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1179 advisory.

    The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some     previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed     malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how     the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.
    (CVE-2025-8058)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202509-04 (glibc: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12980 advisory.

    The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard     math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system.
    Without these libraries, the Linux system cannot function correctly.

    Security Fix(es):

    * glibc: Double free in glibc (CVE-2025-8058)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
261715	RockyLinux 8 : glibc (RLSA-2025:12980)	Nessus	Rocky Linux Local Security Checks	9/8/2025	9/8/2025	medium
271420	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.10)	Nessus	Misc.	10/24/2025	5/26/2026	high
305971	Unity Linux 20.1070a Security Update: glibc (UTSA-2026-007101)	Nessus	Unity Linux Local Security Checks	4/10/2026	4/10/2026	medium
282358	EulerOS 2.0 SP9 : glibc (EulerOS-SA-2026-1013)	Nessus	Huawei Local Security Checks	1/7/2026	1/7/2026	medium
302732	EulerOS Virtualization 2.12.1 : glibc (EulerOS-SA-2026-1426)	Nessus	Huawei Local Security Checks	3/17/2026	3/17/2026	medium
304843	Photon OS 4.0: Glibc PHSA-2026-4.0-0984	Nessus	PhotonOS Local Security Checks	4/4/2026	4/4/2026	medium
279337	EulerOS Virtualization 2.13.0 : glibc (EulerOS-SA-2025-2575)	Nessus	Huawei Local Security Checks	12/18/2025	12/18/2025	medium
302706	EulerOS Virtualization 2.12.0 : glibc (EulerOS-SA-2026-1483)	Nessus	Huawei Local Security Checks	3/17/2026	3/17/2026	medium
264828	Amazon Linux 2023 : compat-libpthread-nonshared, glibc, glibc-all-langpacks (ALAS2023-2025-1179)	Nessus	Amazon Linux Local Security Checks	9/15/2025	2/24/2026	medium
265362	GLSA-202509-04 : glibc: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	9/18/2025	9/18/2025	medium
243573	RHEL 8 : glibc (RHSA-2025:12980)	Nessus	Red Hat Local Security Checks	8/5/2025	8/5/2025	medium

Detections

Analytics

Plugins Search

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium