The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-640:02 advisory.

    * ibus: missing authorization allows local attacker to access the input bus of     another user (CVE-2019-14822)     CVE-2019-14822     A flaw was discovered in ibus that allows any unprivileged user to monitor and     send method calls to the ibus bus of another user due to a misconfiguration in     the DBus server setup. A local attacker may use this flaw to intercept all     keystrokes of a victim user who is using the graphical interface, change the     input method engine, or modify other input related configurations of the victim     user.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for ibus fixes the following issues :

Security issue fixed :

CVE-2019-14822: Fixed a misconfiguration of the DBus server that allowed an unprivileged user to monitor and send method calls to the ibus bus of another user. (bsc#1150011)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Simon McVittie reported a flaw in ibus, the Intelligent Input Bus. Due to a misconfiguration during the setup of the DBus, any unprivileged user could monitor and send method calls to the ibus bus of another user, if able to discover the UNIX socket used by another user connected on a graphical environment. The attacker can take advantage of this flaw to intercept keystrokes of the victim user or modify input related configurations through DBus method calls.

This update for ibus fixes the following issues :

  - CVE-2019-14822: Fixed misconfiguration of the DBus     server allows to unprivileged user could monitor and     send method calls to the ibus bus of another user     (bsc#1150011).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

The version of AOS installed on the remote host is prior to 5.15.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.15.5 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of ibus installed on the remote host is prior to 1.5.17-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1555 advisory.

    A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the     ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this     flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input     method engine, or modify other input related configurations of the victim user. (CVE-2019-14822)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the ibus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - A flaw was discovered in ibus that allows any     unprivileged user to monitor and send method calls to     the ibus bus of another user due to a misconfiguration     in the DBus server setup. A local attacker may use this     flaw to intercept all keystrokes of a victim user who     is using the graphical interface, change the input     method engine, or modify other input related     configurations of the victim user.(CVE-2019-14822)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of AOS installed on the remote host is prior to 5.19.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.0.5 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
294363	MiracleLinux 8 : ibus-1.5.19-11.el8 (AXSA:2020-640:02)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
128988	SUSE SLED15 / SLES15 Security Update : ibus (SUSE-SU-2019:2387-1)	Nessus	SuSE Local Security Checks	9/18/2019	4/24/2024	high
129026	Debian DSA-4525-1 : ibus - security update	Nessus	Debian Local Security Checks	9/19/2019	4/24/2024	high
129398	openSUSE Security Update : ibus (openSUSE-2019-2199)	Nessus	SuSE Local Security Checks	9/27/2019	4/22/2024	high
164599	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.5)	Nessus	Misc.	9/1/2022	7/22/2025	critical
142725	Amazon Linux 2 : ibus (ALAS-2020-1555)	Nessus	Amazon Linux Local Security Checks	11/11/2020	12/11/2024	high
147518	EulerOS Virtualization 3.0.6.6 : ibus (EulerOS-SA-2021-1483)	Nessus	Huawei Local Security Checks	3/10/2021	1/11/2024	high
164556	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.0.5)	Nessus	Misc.	9/1/2022	7/22/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

critical

high

high

critical