The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0324 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-52811:
    A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY     notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be     terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption     and potential denial of service under certain conditions.

    This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.

    CVE-2025-23085:
    The ngtcp2 project is an effort to implement IETF QUIC protocol in C. In affected versions acks are not     validated before being written to the qlog leading to a buffer overflow. In `ngtcp2_conn::conn_recv_pkt`     for an ACK, there was new logic that got added to skip `conn_recv_ack` if an ack has already been     processed in the payload. However, this causes us to also skip `ngtcp2_pkt_validate_ack`. The ack which     was skipped still got written to qlog. The bug occurs in `ngtcp2_qlog::write_ack_frame`. It is now     possible to reach this code with an invalid ack, suppose `largest_ack=0` and `first_ack_range=15`.
    Subtracting `largest_ack - first_ack_range` will lead to an integer underflow which is 20 chars long.
    However, the ngtcp2 qlog code assumes the number written is a signed integer and only accounts for 19     characters of overhead (see `NGTCP2_QLOG_ACK_FRAME_RANGE_OVERHEAD`). Therefore, we overwrite the buffer     causing a heap overflow. This is high priority and could potentially impact many users if they enable     qlog. qlog is disabled by default. Due to its overhead, it is most likely used for debugging purpose, but     the actual use is unknown. ngtcp2 v1.9.1 fixes the bug and users are advised to upgrade. Users unable to     upgrade should not turn on qlog.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The ngtcp2 project is an effort to implement IETF QUIC protocol in C. In affected versions acks are not     validated before being written to the qlog leading to a buffer overflow. In `ngtcp2_conn::conn_recv_pkt`     for an ACK, there was new logic that got added to skip `conn_recv_ack` if an ack has already been     processed in the payload. However, this causes us to also skip `ngtcp2_pkt_validate_ack`. The ack which     was skipped still got written to qlog. The bug occurs in `ngtcp2_qlog::write_ack_frame`. It is now     possible to reach this code with an invalid ack, suppose `largest_ack=0` and `first_ack_range=15`.
    Subtracting `largest_ack - first_ack_range` will lead to an integer underflow which is 20 chars long.
    However, the ngtcp2 qlog code assumes the number written is a signed integer and only accounts for 19     characters of overhead (see `NGTCP2_QLOG_ACK_FRAME_RANGE_OVERHEAD`). Therefore, we overwrite the buffer     causing a heap overflow. This is high priority and could potentially impact many users if they enable     qlog. qlog is disabled by default. Due to its overhead, it is most likely used for debugging purpose, but     the actual use is unknown. ngtcp2 v1.9.1 fixes the bug and users are advised to upgrade. Users unable to     upgrade should not turn on qlog. (CVE-2024-52811)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0295 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-52811:
    The ngtcp2 project is an effort to implement IETF QUIC protocol in C. In affected versions acks are not     validated before being written to the qlog leading to a buffer overflow. In `ngtcp2_conn::conn_recv_pkt`     for an ACK, there was new logic that got added to skip `conn_recv_ack` if an ack has already been     processed in the payload. However, this causes us to also skip `ngtcp2_pkt_validate_ack`. The ack which     was skipped still got written to qlog. The bug occurs in `ngtcp2_qlog::write_ack_frame`. It is now     possible to reach this code with an invalid ack, suppose `largest_ack=0` and `first_ack_range=15`.
    Subtracting `largest_ack - first_ack_range` will lead to an integer underflow which is 20 chars long.
    However, the ngtcp2 qlog code assumes the number written is a signed integer and only accounts for 19     characters of overhead (see `NGTCP2_QLOG_ACK_FRAME_RANGE_OVERHEAD`). Therefore, we overwrite the buffer     causing a heap overflow. This is high priority and could potentially impact many users if they enable     qlog. qlog is disabled by default. Due to its overhead, it is most likely used for debugging purpose, but     the actual use is unknown. ngtcp2 v1.9.1 fixes the bug and users are advised to upgrade. Users unable to     upgrade should not turn on qlog.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - ngtcp2 项目旨在以 C 实现 IETF QUIC 协议。在受影响的版本中未在将 ack 写入 qlog 之前对其进行验证导致缓冲区溢出。ACK 的“ngtcp2_conn::conn_recv_pkt”中添加了用于在负载中已处理 ack 时跳过“conn_recv_ack”的新逻辑。但是这也会导致我们跳过“ngtcp2_pkt_validate_ack”。跳过的 ack 仍会写入 qlog。该缺陷出现在“ngtcp2_qlog::write_ack_frame”中。现在可以通过无效的 ack 访问此代码假设“largest_ack=0”且“first_ack_range=15”。
    减去“largest_ack - first_ack_range”将导致 20 个字符长的整数下溢。
    但是ngtcp2 qlog 代码假设写入的数字为带符号整数并且仅占用 19 个字符的开销请参阅 `NGTCP2_QLOG_ACK_FRAME_RANGE_OVERHEAD`。因此我们改写了缓冲区造成堆溢出。此问题优先级高且可能会影响许多用户如果启用 qlog。 qlog 默认情况下被禁用。由于其开销最可能用于调试目的但实际用途未知。 ngtcp2 v1.9.1 修复了此缺陷建议用户升级。无法升级的用户不应打开 qlog。 (CVE-2024-52811)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - ngtcp2プロジェクトは、CのIETF QUICプロトコルを実装する取り組みです。影響を受けるバージョンでは、acksはqlogに書き込まれる前に検証されず、バッファオーバーフローにつながります。ACK 用の「ngtcp2_conn::conn_recv_pkt」に、ack がペイロードですでに処理されている場合に「conn_recv_ack」をスキップするために追加される新しいロジックが追加されました。ただし、これにより「ngtcp2_pkt_validate_ack」もスキップされます。スキップされた ack は依然として qlog に書き込まれました。このバグは「ngtcp2_qlog::write_ack_frame」で発生します。「largest_ack=0」および「first_ack_range=15」と仮定すると、無効な ack でこのコードに到達することが現在可能です。
    「largest_ack - first_ack_range」を減算すると、20文字の長さの整数アンダーフローが発生します。
    しかし、ngtcp2 qlog コードでは、書き込まれた数字が符号付き整数であり、19 文字のオーバーヘッドのみを占めると仮定します「NGTCP2_QLOG_ACK_FRAME_RANGE_OVERHEAD」を参照してください。したがって、ヒープオーバーフローを引き起こすバッファを上書きします。これは優先度が高く、qlogを有効にした場合、多くのユーザーに影響を与える可能性があります。 qlog はデフォルトで無効になっています。オーバーヘッドがあるため、デバッグ目的で使用される可能性が高いですが、実際の使用状況は不明です。 ngtcp2 v1.9.1 により バグが修正され、ユーザーはアップグレードすることが推奨されます。アップグレードできないユーザーは qlog をオンにすべきではありません。CVE-2024-52811

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - ngtcp2 專案致力於在 C 中實作 IETF QUIC 通訊協定。在受影響的版本中ack 在寫入至 qlog 之前未經過驗證進而導致緩衝區溢位。在 ACK 的 `ngtcp2_conn::conn_recv_pkt` 中如果已在承載中處理 ack則會新增新邏輯以略過 `conn_recv_ack`。不過這也會讓我們略過 `ngtcp2_pkt_validate_ack`。被略過的 ack 仍會寫入 qlog。該錯誤發生在 `ngtcp2_qlog::write_ack_frame` 中。現可使用無效的 ack 存取此程式碼假設「largest_ack=0」和「first_ack_range=15」。
    減去 `largest_ack - first_ack_range` 將導致 20 個字元長的整數反向溢位。
    不過ngtcp2 qlog 程式碼會假設寫入的數字是帶正負號的整數且僅考量 19 個字元的額外負荷 (請參閱 `NGTCP2_QLOG_ACK_FRAME_RANGE_OVERHEAD`)。因此我們覆寫了會造成堆積溢位的緩衝區。這是高優先順序且可能影響啟用 qlog 的許多使用者。 qlog 預設為停用狀態。由於其額外負荷最有可能用於除錯目的但實際用途未知。 ngtcp2 v1.9.1 可修正該錯誤建議使用者升級。無法升級的使用者不應開啟 qlog。 (CVE-2024-52811)

請注意，Nessus 依賴供應商報告的套件存在。

ID	Name	Product	Family	Published	Updated	Severity
275946	TencentOS Server 4: nodejs (TSSA-2025:0324)	Nessus	Tencent Local Security Checks	11/20/2025	11/20/2025	high
251580	Linux Distros Unpatched Vulnerability : CVE-2024-52811	Nessus	Misc.	8/18/2025	10/22/2025	high
239208	TencentOS Server 4: nodejs20 (TSSA-2025:0295)	Nessus	Tencent Local Security Checks	6/16/2025	12/4/2025	high
251580	Linux Distros 未修补的漏洞：CVE-2024-52811	Nessus	Misc.	8/18/2025	10/22/2025	high
251580	Linux Distros のパッチ未適用の脆弱性: CVE-2024-52811	Nessus	Misc.	8/18/2025	10/22/2025	high
251580	Linux Distros 未修補的弱點：CVE-2024-52811	Nessus	Misc.	8/18/2025	10/22/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high