The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0788 advisory.

    This advisory aggregates security fixes for the libslirp SRPM in CIQ LTS 8.8. It addresses 39 CVEs:
    CVE-2022-3064, CVE-2023-25809, CVE-2022-32189, CVE-2022-41723, CVE-2022-41724, and 34 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0804 advisory.

    This advisory aggregates security fixes for the toolbox SRPM in CIQ LTS 8.8. It addresses 39 CVEs:
    CVE-2022-3064, CVE-2023-25809, CVE-2022-32189, CVE-2022-41723, CVE-2022-41724, and 34 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2957-1 advisory.

    - CVE-2021-3594: slirp: invalid pointer initialization may lead to information disclosure     (udp)(bsc#1187378).
    - CVE-2021-3595: slirp: invalid pointer initialization may lead to information disclosure     (tftp)(bsc#1187376).
    - CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).
    - CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).
    - CVE-2021-20255: Fixed stack overflow via infinite recursion in eepro100 (bsc#1182654)
    - CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434)
    - CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429)
    - CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).
    - CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433)
    - CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation     (XSA-379)(bsc#1189376).
    - CVE-2021-3592: slirp: invalid pointer initialization may lead to information disclosure     (bootp)(bsc#1187369).

    - Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
353541	Rocky Linux 8.8 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0788)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/13/2026	high
355380	Rocky Linux 8.8 [CIQ] Security Update: toolbox / toolbox-debuginfo / toolbox-debugsource / toolbox-tests Multiple Vulnerabilities (ciqsa-2026_0804)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/13/2026	high
153027	SUSE SLES12: xen / xen-doc-html / xen-libs / xen-libs-32bit / xen-tools / etc (SUSE-SU-2021:2957-1)	Nessus	SuSE Local Security Checks	9/6/2021	6/25/2026	high

Detections

Analytics

Plugins Search

high

high

high