According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-     based client subscribes to signals from a trusted system service such as NetworkManager on a shared     computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will     wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based     client behaving incorrectly, with an application-dependent impact.(CVE-2024-34397)

Tenable has extracted the preceding description block directly from the EulerOS glib2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-     based client subscribes to signals from a trusted system service such as NetworkManager on a shared     computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will     wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based     client behaving incorrectly, with an application-dependent impact.(CVE-2024-34397)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization glib2 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3208-1 advisory.

    - Hardening of the patch for the previously fixed CVE-2024-34397. The previous patch introduced a     regression which might lead to a use-after-free bug. (bsc#1224044).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds     memory access, allowing an attacker to potentially perform path traversal or access private temporary file     content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths     and access unauthorized data. The core issue stems from insufficient validation of file path lengths     during temporary file operations.(CVE-2025-7039)

    An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-     based client subscribes to signals from a trusted system service such as NetworkManager on a shared     computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will     wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based     client behaving incorrectly, with an application-dependent impact.(CVE-2024-34397)

    A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar()     function. When the position at which to insert the character is large, the position will overflow, leading     to a buffer underwrite.(CVE-2025-4373)

    A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO     8601 timestamp with the g_date_time_new_from_iso8601() function.(CVE-2025-3360)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization glib2 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11327 advisory.

    * glib2: Signal subscription vulnerabilities (CVE-2024-34397)
      * glib: buffer overflow in set_connect_msg() (CVE-2024-52533)
      * glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar     (CVE-2025-4373)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the glib2-2.68.4-15.el9 build changelog.

  - An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-     based client subscribes to signals from a trusted system service such as NetworkManager on a shared     computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will     wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based     client behaving incorrectly, with an application-dependent impact. (CVE-2024-34397)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2ce1c754f7 advisory.

    Update glib2 to fix CVE-2024-34397.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06, has glib2 packages installed that are affected by multiple vulnerabilities:

  - file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file     permissions while a copy operation is in progress. Instead, default permissions are used. (CVE-2019-12450)

  - GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead     of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled.
    This bug is timing-dependent and may occur only sporadically depending on network delays. The greatest     security relevance is in use cases where a proxy is used to help with privacy/anonymity, even though there     is no technical barrier to a direct connection. NOTE: versions before 2.60 are unaffected. (CVE-2020-6750)

  - Rejected reason: Rejected by upstream. (CVE-2023-24593, CVE-2023-25180)

  - An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-     based client subscribes to signals from a trusted system service such as NetworkManager on a shared     computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will     wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based     client behaving incorrectly, with an application-dependent impact. (CVE-2024-34397)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.3.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.0.6 advisory.

  - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data     corruption.) NOTE: the vendor states only a few specific / uncommon usages of the API are at risk.
    (CVE-2019-17543)

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451,     8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle     GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle     GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java     SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java     deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets,     that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox     for security. This vulnerability does not apply to Java deployments, typically in servers, that load and     run only trusted code (e.g., code installed by an administrator). (CVE-2025-30749)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451,     8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle     GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or     delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition     accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments,     typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load     and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for     security. This vulnerability does not apply to Java deployments, typically in servers, that load and run     only trusted code (e.g., code installed by an administrator). (CVE-2025-30754)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE     (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and     11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows     unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle     GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition     accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g.,     through a web service which supplies data to the APIs. This vulnerability also applies to Java     deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets,     that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox     for security. (CVE-2025-30761)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5 advisory.

  - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data     corruption.) NOTE: the vendor states only a few specific / uncommon usages of the API are at risk.
    (CVE-2019-17543)

  - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above. (CVE-2025-6965)

  - A vulnerability has been identified in the libarchive library, specifically within the     archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately     lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption,     enabling an attacker to execute arbitrary code or cause a denial-of-service condition. (CVE-2025-5914)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451,     8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle     GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle     GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java     SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java     deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets,     that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox     for security. This vulnerability does not apply to Java deployments, typically in servers, that load and     run only trusted code (e.g., code installed by an administrator). (CVE-2025-30749)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451,     8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle     GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or     delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition     accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments,     typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load     and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for     security. This vulnerability does not apply to Java deployments, typically in servers, that load and run     only trusted code (e.g., code installed by an administrator). (CVE-2025-30754)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
208411	EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2024-2579)	Nessus	Huawei Local Security Checks	10/9/2024	6/19/2025	medium
209792	EulerOS Virtualization 2.12.1 : glib2 (EulerOS-SA-2024-2750)	Nessus	Huawei Local Security Checks	10/27/2024	6/19/2025	medium
207053	SUSE SLED12: glib2-devel / glib2-devel-static / glib2-lang / glib2-tools / etc (SUSE-SU-2024:3208-1)	Nessus	SuSE Local Security Checks	9/12/2024	6/25/2026	medium
235738	EulerOS 2.0 SP10 : glib2 (EulerOS-SA-2025-1515)	Nessus	Huawei Local Security Checks	5/12/2025	5/12/2025	medium
297331	EulerOS Virtualization 2.10.0 : glib2 (EulerOS-SA-2026-1166)	Nessus	Huawei Local Security Checks	1/31/2026	1/31/2026	low
297377	EulerOS Virtualization 2.10.1 : glib2 (EulerOS-SA-2026-1115)	Nessus	Huawei Local Security Checks	1/31/2026	1/31/2026	low
242240	AlmaLinux 8 : glib2 (ALSA-2025:11327)	Nessus	Alma Linux Local Security Checks	7/17/2025	7/17/2025	critical
197516	CentOS 9 : glib2-2.68.4-15.el9	Nessus	CentOS Local Security Checks	5/20/2024	6/19/2025	medium
197161	Fedora 40 : mingw-glib2 (2024-2ce1c754f7)	Nessus	Fedora Local Security Checks	5/16/2024	6/19/2025	medium
330504	NewStart CGSL MAIN 6.06 : glib2 Multiple Vulnerabilities (NS-SA-2026-0061)	Nessus	NewStart CGSL Local Security Checks	7/29/2026	7/29/2026	critical
255239	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.0.6)	Nessus	Misc.	8/26/2025	8/26/2025	high
277501	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5)	Nessus	Misc.	12/4/2025	4/2/2026	high

Detections

Analytics

Plugins Search

medium

medium

medium

medium

low

low

critical

medium

medium

critical

high

high