The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities.

This update for perl fixes the following issues: Security issue fixed :

  - CVE-2018-6913: Fixed space calculation issues in     pp_pack.c (bsc#1082216).

  - CVE-2018-6798: Fixed heap buffer overflow in regexec.c     (bsc#1082233).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for perl fixes the following issues: Security issues fixed :

  - CVE-2018-6913: Fixed space calculation issues in     pp_pack.c (bsc#1082216).

  - CVE-2018-6798: Fixed heap buffer overflow in regexec.c     (bsc#1082233).

  - CVE-2018-6797: Fixed sharp-s regexp overflow     (bsc#1082234).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

GwanYeong Kim 報告有大量的項目計數時，「pack()」會造成堆積緩衝區寫入溢位。針對 Debian 7「Wheezy」，這些問題已在 5.14.2-21+deb7u6 版本中修正。建議您升級 perl 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端主機執行的 macOS / Mac OS X 是比 10.13.6 舊的 10.13.x 版。因此，會受到多個弱點影響。請注意，如果成功惡意利用多數嚴重問題，將會導致任意程式碼執行。

遠端主機受到 GLSA-201909-01 中所述的弱點影響 (Perl：多個弱點) 在 Perl 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：如需詳細資料，請檢閱提及的 CVE 識別碼。因應措施：目前尚無已知的因應措施。

在 Perl 程式設計語言的實作中發現多個弱點。Common Vulnerabilities and Exposures 專案發現下列問題：- CVE-2018-6797 Brian Carpenter 報告特製的規則運算式可藉由控制寫入的位元組數，造成堆積緩衝區寫入溢位。- CVE-2018-6798 Nguyen Duc Manh 報告比對特製的語言環境相依規則運算式會造成堆積型緩衝區過度讀取，並可能導致資訊洩漏。- CVE-2018-6913 GwanYeong Kim 報告有大量的項目計數時，「pack()」會造成堆積緩衝區寫入溢位。

GwanYeong Kim reported that 'pack()' could cause a heap buffer write overflow with a large item count.

For Debian 7 'Wheezy', these problems have been fixed in version 5.14.2-21+deb7u6.

We recommend that you upgrade your perl packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6. It is, therefore, affected by multiple vulnerabilities.

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is affected by the vulnerability described in GLSA-201909-01 (Perl: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Perl. Please review the       CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2018-6797     Brian Carpenter reported that a crafted regular     expression could cause a heap buffer write overflow,     with control over the bytes written.

  - CVE-2018-6798     Nguyen Duc Manh reported that matching a crafted locale     dependent regular expression can cause a heap-based     buffer over-read and potentially information disclosure.

  - CVE-2018-6913     GwanYeong Kim reported that 'pack()' could cause a heap     buffer write overflow with a large item count.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1762-1 advisory.

    Security issues fixed:

    - CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216)
    - CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233)

    Non-security issue fixed:

    - make Net::FTP work with TLS 1.3 (bsc#1213638)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS that is 10.13.x prior to 10.13.6. It is, therefore, affected by multiple vulnerabilities in the following components:

 - Accounts
 - AMD
 - APFS
 - ATS
 - Bluetooth
 - CFNetwork
 - CoreCrypto
 - CUPS
 - DesktopServices
 - Intel Graphics Driver
 - IOGraphics
 - Kernel
 - libxpc
 - LinkPresentation
 - Perl
 - Ruby

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
111136	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-004)	Nessus	MacOS X Local Security Checks	2018/7/17	2024/9/4	critical
109162	SUSE SLES11 Security Update : perl (SUSE-SU-2018:0976-1)	Nessus	SuSE Local Security Checks	2018/4/19	2024/10/30	critical
109356	SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2018:1074-1)	Nessus	SuSE Local Security Checks	2018/4/26	2024/10/24	critical
109043	Debian DLA-1345-1：perl 安全性更新	Nessus	Debian Local Security Checks	2018/4/16	2024/11/7	critical
111137	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2018/7/17	2024/9/4	critical
128590	GLSA-201909-01：Perl：多個弱點	Nessus	Gentoo Local Security Checks	2019/9/9	2024/4/26	critical
109047	Debian DSA-4172-1：perl - 安全性更新	Nessus	Debian Local Security Checks	2018/4/16	2024/11/7	critical
109043	Debian DLA-1345-1 : perl security update	Nessus	Debian Local Security Checks	2018/4/16	2024/11/7	critical
111137	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2018/7/17	2024/9/4	critical
128590	GLSA-201909-01 : Perl: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2019/9/9	2024/4/26	critical
109047	Debian DSA-4172-1 : perl - security update	Nessus	Debian Local Security Checks	2018/4/16	2024/11/7	critical
197702	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : perl (SUSE-SU-2024:1762-1)	Nessus	SuSE Local Security Checks	2024/5/23	2024/5/23	critical
700517	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	2019/4/10	2019/4/10	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical