Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Suricata は、OISFOpen Information Security Foundationと Suricata コミュニティによって開発されているネットワーク IDS、IPS および NSM エンジンです。バージョン 7.0.13 および 8.0.2より前では、SWF 展開が有効な場合、Suricata をクラッシュさせるスタックオーバーフローが発生する可能性があります。この問題には、バージョン 7.0.13 および 8.0.2 でパッチが適用されています。
    この問題の回避策には、SWF 展開 suricata.yaml の swf-decompression を無効にすることが含まれます。これはデフォルトで無効になっています。 swf-decompression を有効にする必要がある場合、decompress-depth をスタックサイズの半分より低く設定。CVE-2025-64332

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The version of OISF Suricata installed on the remote host is prior to 7.0.13 or 8.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities, including:

  - Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the     Suricata community. Prior to versions 7.0.13 and 8.0.2, a single byte read heap overflow when logging the verdict in     eve.alert and eve.drop records can lead to crashes. This requires the per packet alert queue to be filled with     alerts and then followed by a pass rule. This issue has been patched in versions 7.0.13 and 8.0.2. To reduce the     likelihood of this issue occurring, the alert queue size a should be increased (packet-alert-max in suricata.yaml)     if verdict is enabled. (CVE-2025-64330)

  - Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the     Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow can occur on large HTTP file transfers if     the user has increased the HTTP response body limit and enabled the logging of printable http bodies. This issue has     been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves using default HTTP response body     limits and/or disabling http-body-printable logging; body logging is disabled by default. (CVE-2025-64331)

  - Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the     Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if     SWF decompression is enabled. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue     involves disabling SWF decompression (swf-decompression in suricata.yaml), it is disabled by default; set     decompress-depth to lower than half your stack size if swf-decompression must be enabled. (CVE-2025-64332)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation)     and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to     crash can occur if SWF decompression is enabled. This issue has been patched in versions 7.0.13 and 8.0.2.
    A workaround for this issue involves disabling SWF decompression (swf-decompression in suricata.yaml), it     is disabled by default; set decompress-depth to lower than half your stack size if swf-decompression must     be enabled. (CVE-2025-64332)

Note that Nessus relies on the presence of the package as reported by the vendor.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Suricata 是由 OISF (Open Information Security Foundation) 和 Suricata 社区开发的网络 IDS、IPS 和 NSM 引擎。在 7.0.13 和 8.0.2版本之前的版本中如果启用了 SWF 解压缩可能会发生导致 Suricata 崩溃的堆栈溢出。已在 7.0.13 和 8.0.2 中修补此问题。
    此问题的变通方案涉及禁用 SWF 解压缩suricata.yaml 中的 swf-decompression默认情况下被禁用如果必须启用 swf-decompression将 decompress-depth 设置为小于堆栈大小一半的值。 (CVE-2025-64332)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Suricata 是由 OISF (Open Information Security Foundation) 和 Suricata 社群開發的網路 IDS、IPS 和 NSM 引擎。在 7.0.13 和 8.0.2版之前如果啟用 SWF 解壓縮可能會發生造成 Suricata 損毀的堆疊溢位。此問題已在 7.0.13 和 8.0.2 版本中修復。
    此問題的因應措施為停用 SWF 解壓縮 (suricata.yaml 中的 swf-decompression)其預設為停用如果必須啟用 swf-decompression則將 decompress-depth 設為小於堆疊大小的一半。 (CVE-2025-64332)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
276969	Linux Distros のパッチ未適用の脆弱性: CVE-2025-64332	Nessus	Misc.	2025/12/1	2025/12/1	high
277497	Suricata < 7.0.13 / 8.x < 8.0.2 Multiple Vulnerabilities	Nessus	Misc.	2025/12/4	2025/12/4	high
276969	Linux Distros Unpatched Vulnerability : CVE-2025-64332	Nessus	Misc.	2025/12/1	2025/12/1	high
276969	Linux Distros 未修补的漏洞：CVE-2025-64332	Nessus	Misc.	2025/12/1	2025/12/1	high
276969	Linux Distros 未修補的弱點：CVE-2025-64332	Nessus	Misc.	2025/12/1	2025/12/1	high

检测

插件搜索

high

high

high

high

high