The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0166 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-62229:
    A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications.
    Improper error handling during notification creation can leave dangling pointers that lead to a use-after-     free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute     arbitrary code or cause a denial of service.

    CVE-2025-62230:
    A flaw was discovered in the X.Org X servers X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect.

    CVE-2025-62231:
    A flaw was identified in the X.Org X servers X Keyboard (Xkb) extension where improper bounds checking     in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57128. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57128 advisory.

  - A flaw was identified in the X.Org X server's X Keyboard (Xkb) extension where improper bounds checking in     the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
    (CVE-2025-62231)

  - A flaw was discovered in the X.Org X server's X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect. (CVE-2025-62230)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20198-1 advisory.

    - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation (bsc#1251958).
    - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal (bsc#1251959).
    - CVE-2025-62231: Fixed value overflow in Xkb extension XkbSetCompatMap() (bsc#1251960).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_19432 advisory.

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

    * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

    * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_20961 advisory.

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

    * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

    * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202608-14 (X.Org X server, XWayland: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in X.Org X server, XWayland. Please review the CVE     identifiers referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
275568	Alibaba Cloud Linux 3 : 0166: xorg-x11-server-Xwayland (ALINUX3-SA-2025:0166)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/11/17	2025/11/17	high
299694	AIX : Multiple Vulnerabilities (IJ57128)	Nessus	AIX Local Security Checks	2026/2/20	2026/3/11	high
298932	openSUSE 16 Security Update : xorg-x11-server (openSUSE-SU-2026:20198-1)	Nessus	SuSE Local Security Checks	2026/2/13	2026/2/13	high
359223	Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_19432)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
358469	Rocky Linux 9 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_20961)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
337634	GLSA-202608-14 : X.Org X server, XWayland: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2026/8/18	2026/8/18	critical

检测

插件搜索

high

high

high

high

high

critical