The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0924 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2025-62229:
    A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications.
    Improper error handling during notification creation can leave dangling pointers that lead to a use-after-     free condition. This can cause memory corruption or a crash, potentially allowing an attacker to execute     arbitrary code or cause a denial of service.

    CVE-2025-62230:
    A flaw was discovered in the X.Org X servers X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect.

    CVE-2025-62231:
    A flaw was identified in the X.Org X servers X Keyboard (Xkb) extension where improper bounds checking     in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0035 advisory.

    Xwayland is an X server for running X clients under Wayland.

    Security Fix(es):

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)

    * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)

    * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:19434 advisory.

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
      * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
      * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11094:09 advisory.

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
      * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
      * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-11054:02 advisory.

    * xorg: xmayland: Use-after-free in XPresentNotify structure creation (CVE-2025-62229)
      * xorg: xwayland: Use-after-free in Xkb client resource removal (CVE-2025-62230)
      * xorg: xmayland: Value overflow in XkbSetCompatMap() (CVE-2025-62231)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20198-1 advisory.

    - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation (bsc#1251958).
    - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal (bsc#1251959).
    - CVE-2025-62231: Fixed value overflow in Xkb extension XkbSetCompatMap() (bsc#1251960).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AIX installed on the remote host is prior to APAR IJ57128. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57128 advisory.

  - A flaw was identified in the X.Org X server's X Keyboard (Xkb) extension where improper bounds checking in     the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially     crafted input data, the value calculation may overflow, leading to memory corruption or a crash.
    (CVE-2025-62231)

  - A flaw was discovered in the X.Org X server's X Keyboard (Xkb) extension when handling client resource     cleanup. The software frees certain data structures without properly detaching related resources, leading     to a use-after-free condition. This can cause memory corruption or a crash when affected clients     disconnect. (CVE-2025-62230)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
277459	TencentOS Server 2: tigervnc (TSSA-2025:0924)	Nessus	Tencent Local Security Checks	2025/12/4	2025/12/4	high
281745	RHEL 8 : xorg-x11-server-Xwayland (RHSA-2026:0035)	Nessus	Red Hat Local Security Checks	2026/1/5	2026/1/5	high
282337	AlmaLinux 8 : xorg-x11-server (ALSA-2025:19434)	Nessus	Alma Linux Local Security Checks	2026/1/7	2026/1/7	high
282901	MiracleLinux 8 : tigervnc-1.15.0-8.el8_10.ML.1 (AXSA:2025-11094:09)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/16	high
283363	MiracleLinux 8 : xorg-x11-server-Xwayland-21.1.3-19.el8_10 (AXSA:2025-11054:02)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/13	high
298932	openSUSE 16 Security Update : xorg-x11-server (openSUSE-SU-2026:20198-1)	Nessus	SuSE Local Security Checks	2026/2/13	2026/2/13	high
299694	AIX : Multiple Vulnerabilities (IJ57128)	Nessus	AIX Local Security Checks	2026/2/20	2026/10/16	high

检测

插件搜索

high

high

high

high

high

high

high