The version of Apple iOS running on the mobile device is prior to 15. It is, therefore, affected by multiple vulnerabilities.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:22871 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: internal entity expansion (CVE-2013-0340)

    * expat: large number of colons in input makes parser consume high amount of resources, leading to DoS     (CVE-2018-20843)

    * expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)

    * expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-45960)

    * expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)

    * expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)

    * expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)

    * expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)

    * expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)

    * expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)

    * expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)

    * expat: integer overflow in the doProlog function (CVE-2022-23990)

    * expat: Stack exhaustion in doctype parsing (CVE-2022-25313)

    * expat: Integer overflow in copyString() (CVE-2022-25314)

    * expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate     (CVE-2022-43680)

    * expat: parsing large tokens can trigger a denial of service (CVE-2023-52425)

    * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)

    * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing (CVE-2025-59375)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:22842 advisory.

    Expat is a C library for parsing XML documents.

    Security Fix(es):

    * expat: internal entity expansion (CVE-2013-0340)

    * expat: integer overflow in the doProlog function (CVE-2022-23990)

    * libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat (CVE-2024-8176)

    * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing (CVE-2025-59375)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New expat packages are available for Slackware 14.0, 14.1, 14.2, and
-current to fix a security issue.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - expat before version 2.4.0 does not properly handle entities expansion unless an application developer     uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service     (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML     document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already     provides the ability to disable external entity expansion, the responsibility for resolving this issue     lies with application developers; according to this argument, this entry should be REJECTed, and each     affected application would need its own CVE. (CVE-2013-0340)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A use after free issue was addressed with improved memory management. Exploitation of this vulnerability may lead to     arbitrary code execution. (CVE-2021-30858)

  - An integer overflow was addressed with improved input validation. Exploitation of this vulnerability may lead to     arbitrary code execution. (CVE-2021-30860)

  - Insufficient checks when processing maliciously crafted dfont files may lead to arbitrary code     execution. (CVE-2021-30841, CVE-2021-30842, CVE-2021-30843)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is prior to Catalina Security Update 2021-005. It is, therefore, affected by multiple vulnerabilities, including the following:

  - Arbitrary code execution when processing a maliciously crafted image. (CVE-2021-30835, CVE-2021-30847)

  - An integer overflow issue due to insufficient input validation, which can lead to arbitrary code     execution by an unauthenticated attacker when processing a maliciously crafted PDF. (CVE-2021-30860)

  - Arbitrary code execution when processing a maliciously crafted dfont file. (CVE-2021-30841,     CVE-2021-30842, CVE-2021-30843)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 14.8. It is, therefore, affected by multiple vulnerabilities.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991275 advisory.

    expat before version 2.4.0 does not properly handle entities expansion unless an application developer     uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service     (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML     document, aka an XML External Entity (XXE) issue.  NOTE: it could be argued that because expat already     provides the ability to disable external entity expansion, the responsibility for resolving this issue     lies with application developers; according to this argument, this entry should be REJECTed, and each     affected application would need its own CVE.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
153507	Apple iOS < 15 Multiple Vulnerabilities (HT212814)	Nessus	Mobile Devices	2021/9/21	2026/3/23	critical
277829	RHEL 8 : expat (RHSA-2025:22871)	Nessus	Red Hat Local Security Checks	2025/12/9	2025/12/9	critical
277859	RHEL 8 : expat (RHSA-2025:22842)	Nessus	Red Hat Local Security Checks	2025/12/9	2025/12/9	high
149858	Slackware 14.0 / 14.1 / 14.2 / current : expat (SSA:2021-143-01)	Nessus	Slackware Local Security Checks	2021/5/24	2023/12/29	critical
217819	Linux Distros Unpatched Vulnerability : CVE-2013-0340	Nessus	Misc.	2025/3/4	2025/12/4	high
153429	macOS 11.x < 11.6 (HT212804)	Nessus	MacOS X Local Security Checks	2021/9/16	2024/5/28	high
153432	macOS 10.15.x < Catalina Security Update 2021-005 Catalina (HT212805)	Nessus	MacOS X Local Security Checks	2021/9/16	2024/5/28	high
153434	Apple iOS < 14.8 Multiple Vulnerabilities (HT212807)	Nessus	Mobile Devices	2021/9/16	2026/3/23	critical
279107	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: expat (UTSA-2025-991275)	Nessus	Unity Linux Local Security Checks	2025/12/18	2025/12/18	critical

检测

插件搜索

critical

critical

high

critical

high

high

high

critical

critical