An update of the crash package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with     ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function,     Windows executables must contain a relocations table. Despite containing the Dynamic base PE header,     which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table     stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-     oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR     compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.
    (CVE-2018-5392)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	7/23/2024	8/20/2025	critical
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	7/24/2024	8/20/2025	critical
251101	Linux Distros Unpatched Vulnerability : CVE-2018-5392	Nessus	Misc.	8/18/2025	8/31/2025	high

Detections

Analytics

Plugins Search

critical

critical

high