According to the version of the brotli package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A buffer overflow exists in the Brotli library versions     prior to 1.0.8 where an attacker controlling the input     length of a 'one-shot' decompression request to a     script can trigger a crash, which happens when copying     over chunks of data larger than 2 GiB. It is     recommended to update your Brotli library to 1.0.8 or     later. If one cannot update, we recommend to use the     'streaming' API as opposed to the 'one-shot' API, and     impose chunk size limits.(CVE-2020-8927)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1702 advisory.

    Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a     modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression     ratio comparable to the best currently available general-purpose compression methods. It is similar in     speed with deflate but offers more dense compression.

    Security Fix(es):

    * brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3942-1 advisory.

  - A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the     input length of a one-shot decompression request to a script can trigger a crash, which happens when     copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or     later. If one cannot update, we recommend to use the streaming API as opposed to the one-shot API, and     impose chunk size limits. (CVE-2020-8927)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0118 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2020-8927:
    A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the     input length of a one-shot decompression request to a script can trigger a crash, which happens when     copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or     later. If one cannot update, we recommend to use the streaming API as opposed to the one-shot API, and     impose chunk size limits.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1702 advisory.

  - A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the     input length of a one-shot decompression request to a script can trigger a crash, which happens when     copying over chunks of data larger than 2 GiB. It is recommended to update your Brotli library to 1.0.8 or     later. If one cannot update, we recommend to use the streaming API as opposed to the one-shot API, and     impose chunk size limits. (CVE-2020-8927)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the powershell package has been released.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can     exploit this issue to cause the affected component to     deny system or application services. (CVE-2022-24464)

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-8927,     CVE-2022-24512)

    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version     number.

The Microsoft .NET core installations on the remote host are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected     component to deny system or application services. (CVE-2022-24464)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2020-8927, CVE-2022-24512)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0828 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 5.0.212 and .NET Runtime 5.0.15.

    Security Fix(es):

    * dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)

    * dotnet: double parser stack buffer overrun (CVE-2022-24512)

    * brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0827 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 3.1.417 and .NET Runtime 3.1.23.

    Security Fix(es):

    * dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)

    * dotnet: double parser stack buffer overrun (CVE-2022-24512)

    * brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities including the following:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-24513)

  - A buffer overflow vulnerability. An attacker can exploit this to trigger crash in the system.     (CVE-2020-8927)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

ID	Name	Product	Family	Published	Updated	Severity
144131	EulerOS 2.0 SP8 : brotli (EulerOS-SA-2020-2508)	Nessus	Huawei Local Security Checks	12/14/2020	2/2/2024	medium
149655	RHEL 8 : brotli (RHSA-2021:1702)	Nessus	Red Hat Local Security Checks	5/19/2021	11/7/2024	medium
155903	SUSE SLED15 / SLES15 Security Update : brotli (SUSE-SU-2021:3942-1)	Nessus	SuSE Local Security Checks	12/7/2021	7/13/2023	medium
236717	Alibaba Cloud Linux 3 : 0118: brotli (ALINUX3-SA-2022:0118)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	medium
184629	Rocky Linux 8 : brotli (RLSA-2021:1702)	Nessus	Rocky Linux Local Security Checks	11/6/2023	12/22/2023	medium
204031	Photon OS 3.0: Powershell PHSA-2022-3.0-0488	Nessus	PhotonOS Local Security Checks	7/24/2024	11/26/2024	medium
158715	Security Updates for Microsoft Visual Studio Products (March 2022)	Nessus	Windows : Microsoft Bulletins	3/8/2022	4/18/2023	medium
158744	Security Updates for Microsoft .NET core (March 2022)	Nessus	Misc.	3/9/2022	4/18/2023	medium
158806	RHEL 7 : .NET 5.0 on RHEL 7 (RHSA-2022:0828)	Nessus	Red Hat Local Security Checks	3/11/2022	11/7/2024	medium
158810	RHEL 8 : .NET Core 3.1 (RHSA-2022:0827)	Nessus	Red Hat Local Security Checks	3/11/2022	3/21/2025	medium
159887	Security Update for Visual Studio 2019 (April 2022) (macOS)	Nessus	MacOS X Local Security Checks	4/19/2022	11/27/2024	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium