There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - IPython (Interactive Python) is a command shell for interactive computing in multiple programming
    languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject
    to a command injection vulnerability with very specific prerequisites. This vulnerability requires that
    the function `IPython.utils.terminal.set_term_title` be called on Windows in a Python environment where
    ctypes is not available. The dependency on `ctypes` in `IPython.utils._process_win32` prevents the
    vulnerable code from ever being reached in the ipython binary. However, as a library that could be used by
    another tool `set_term_title` could be called and hence introduce a vulnerability. Should an attacker get
    untrusted input to an instance of this function they would be able to inject shell commands as current
    process and limited to the scope of the current process. Users of ipython as a library are advised to
    upgrade. Users unable to upgrade should ensure that any calls to the
    `IPython.utils.terminal.set_term_title` function are done with trusted or filtered input. (CVE-2023-24816)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - IPython (Interactive Python) 是以多種程式設計語言進行互動運算的命令殼層，它原本是針對 Python 程式設計語言開發的。 8.1.0 之前的版本容易受到命令插入弱點影響 (有非常特定的先決條件)。必須在 Windows 上的 Python 環境 (其中 ctypes 無法使用) 中呼叫函式「IPython.utils.terminal.set_term_title」才能利用此弱點。`IPython.utils._process_win32` 中 `ctypes` 的相依性可防止在 ipython 二進位中存取有弱點的程式碼。不過作為可由其他工具使用的程式庫可呼叫「set_term_title」並因此引入一個弱點。如果攻擊者獲得此函式執行個體的未受信任輸入他們將能夠以目前處理程序形式插入 shell 命令並限制在目前處理程序的範圍內。建議將 ipython 作為程式庫的使用者升級。無法升級的使用者應確保對 `IPython.utils.terminal.set_term_title` 函式的任何呼叫都是透過受信任或已篩選的輸入完成。 (CVE-2023-24816)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - IPython（交互式 Python）是一种用于使用多种编程语言进行交互式计算的命令 shell，最初专为 Python 编程语言开发。低于 8.1.0 的版本在具有非常特定的先决条件的情况下受到一个命令注入漏洞的影响。此漏洞需要在 Windows 的 Python 环境中调用函数“IPython.utils.terminal.set_term_title”其中 ctypes 不可用。“IPython.utils._process_win32”中对“ctypes”的依存关系可阻止访问 ipython 二进制文件中易受攻击的代码。但是作为一个库可被另一工具使用的“set_term_title”可能会被调用并因此引入一个漏洞。如果攻击者获得此函数实例的不受信任的输入他们将能够以当前进程的身份注入 shell 命令并将其限制为当前进程的范围。建议使用 ipython 库的用户升级 。无法升级的用户应确保使用受信任的或已过滤的输入对“IPython.utils.terminal.set_term_title”函数进行任何调用。 (CVE-2023-24816)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - IPython (Interactive Python) は、複数のプログラミング言語でのインタラクティブコンピューティング用のコマンドシェルで、もともとは Python プログラミング言語用に開発されました。 8.1.0 より前のバージョンは、非常に具体的な前提条件でコマンドインジェクションの脆弱性の影響を受けます。この脆弱性では、ctypesが利用できないPython環境のWindowsで関数「IPython.utils.terminal.set_term_title」を呼び出す必要があります。「IPython.utils._process_win32」の「ctypes」での依存関係により、脆弱なコードが ipython バイナリで到達するのを防止します。ただし、別のツール「set_term_title」が使用できるライブラリとしては呼び出されるため、脆弱性が導入される可能性があります。攻撃者がこの関数のインスタンスで信頼できない入力を取得した場合、現在のプロセスとして、現在のプロセスの範囲に制限されているシェルコマンドを注入することができます。ipython をライブラリとして使用している場合は、アップグレードすることが推奨されます。アップグレードできないユーザーは、「IPython.utils.terminal.set_term_title」関数への呼び出しが、信頼できる入力またはフィルター処理された入力で行われるようにする必要があります。CVE-2023-24816

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0088 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-24816:
    IPython (Interactive Python) is a command shell for interactive computing in multiple programming     languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject     to a command injection vulnerability with very specific prerequisites. This vulnerability requires that     the function `IPython.utils.terminal.set_term_title` be called on Windows in a Python environment where     ctypes is not available. The dependency on `ctypes` in `IPython.utils._process_win32` prevents the     vulnerable code from ever being reached in the ipython binary. However, as a library that could be used by     another tool `set_term_title` could be called and hence introduce a vulnerability. Should an attacker get     untrusted input to an instance of this function they would be able to inject shell commands as current     process and limited to the scope of the current process. Users of ipython as a library are advised to     upgrade. Users unable to upgrade should ensure that any calls to the     `IPython.utils.terminal.set_term_title` function are done with trusted or filtered input.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - IPython (Interactive Python) is a command shell for interactive computing in multiple programming     languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject     to a command injection vulnerability with very specific prerequisites. This vulnerability requires that     the function `IPython.utils.terminal.set_term_title` be called on Windows in a Python environment where     ctypes is not available. The dependency on `ctypes` in `IPython.utils._process_win32` prevents the     vulnerable code from ever being reached in the ipython binary. However, as a library that could be used by     another tool `set_term_title` could be called and hence introduce a vulnerability. Should an attacker get     untrusted input to an instance of this function they would be able to inject shell commands as current     process and limited to the scope of the current process. Users of ipython as a library are advised to     upgrade. Users unable to upgrade should ensure that any calls to the     `IPython.utils.terminal.set_term_title` function are done with trusted or filtered input. (CVE-2023-24816)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
408825	SCA: security update for ipython (GHSA-29gw-9793-fvw7)	Tenable Cloud Security	SCA Checks	1/23/2025	7/2/2026	low
408825	SCA: security update for ipython (GHSA-29gw-9793-fvw7)	Tenable Self-Hosted Container Security	SCA Checks	1/23/2025	7/2/2026	low
259650	Linux Distros 未修補的弱點：CVE-2023-24816	Nessus	Misc.	8/30/2025	11/6/2026	high
259650	Linux Distros 未修补的漏洞：CVE-2023-24816	Nessus	Misc.	8/30/2025	11/6/2026	high
259650	Linux Distros のパッチ未適用の脆弱性: CVE-2023-24816	Nessus	Misc.	8/30/2025	11/6/2026	high
238655	TencentOS Server 4: ipython (TSSA-2025:0088)	Nessus	Tencent Local Security Checks	6/16/2025	12/4/2025	low
259650	Linux Distros Unpatched Vulnerability : CVE-2023-24816	Nessus	Misc.	8/30/2025	11/6/2026	high

Detections

Analytics

Plugins Search

low

low

high

high

high

low

high