The version of Google Chrome installed on the remote macOS host is prior to 74.0.3729.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 2019_04_stable-channel-update-for-desktop_23 advisory.

  - Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to     bypass same origin policy via a crafted HTML page. (CVE-2019-5822)

  - Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially     exploit heap corruption via a crafted PDF file. (CVE-2019-5805)

  - Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5806)

  - Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5807)

  - Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2019-5808)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for chromium fixes the following issues :

Security update to version 74.0.3729.108 (boo#1133313).

Security issues fixed :

  - CVE-2019-5805: Use after free in PDFium

  - CVE-2019-5806: Integer overflow in Angle

  - CVE-2019-5807: Memory corruption in V8

  - CVE-2019-5808: Use after free in Blink

  - CVE-2019-5809: Use after free in Blink

  - CVE-2019-5810: User information disclosure in Autofill

  - CVE-2019-5811: CORS bypass in Blink

  - CVE-2019-5813: Out of bounds read in V8

  - CVE-2019-5814: CORS bypass in Blink

  - CVE-2019-5815: Heap buffer overflow in Blink

  - CVE-2019-5818: Uninitialized value in media reader

  - CVE-2019-5819: Incorrect escaping in developer tools

  - CVE-2019-5820: Integer overflow in PDFium

  - CVE-2019-5821: Integer overflow in PDFium

  - CVE-2019-5822: CORS bypass in download manager

  - CVE-2019-5823: Forced navigation from service worker

Bug fixes :

  - Update to 73.0.3686.103 :

  - Various feature fixes

  - Update to 73.0.3683.86 :

  - Various feature fixes

  - Update conditions to use system harfbuzz on TW+

  - Require java during build

  - Enable using pipewire when available

  - Rebase chromium-vaapi.patch to match up the Fedora one

This update for chromium fixes the following issues :

Chromium was updated to 74.0.3729.108 boo#1133313 :

  - CVE-2019-5805: Use after free in PDFium

  - CVE-2019-5806: Integer overflow in Angle

  - CVE-2019-5807: Memory corruption in V8

  - CVE-2019-5808: Use after free in Blink

  - CVE-2019-5809: Use after free in Blink

  - CVE-2019-5810: User information disclosure in Autofill

  - CVE-2019-5811: CORS bypass in Blink

  - CVE-2019-5813: Out of bounds read in V8

  - CVE-2019-5814: CORS bypass in Blink

  - CVE-2019-5815: Heap buffer overflow in Blink

  - CVE-2019-5818: Uninitialized value in media reader

  - CVE-2019-5819: Incorrect escaping in developer tools

  - CVE-2019-5820: Integer overflow in PDFium

  - CVE-2019-5821: Integer overflow in PDFium

  - CVE-2019-5822: CORS bypass in download manager

  - CVE-2019-5823: Forced navigation from service worker

  - CVE-2019-5812: URL spoof in Omnibox on iOS

  - CVE-2019-5816: Exploit persistence extension on Android

  - CVE-2019-5817: Heap buffer overflow in Angle on Windows

  - Update conditions to use system harfbuzz on TW+

  - Require java during build

  - Enable using pipewire when available

According to the version of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Type confusion in xsltNumberFormatGetMultipleLevel     prior to libxslt 1.1.33 could allow attackers to     potentially exploit heap corruption via crafted XML     data.(CVE-2019-5815)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libxslt packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - Type confusion in xsltNumberFormatGetMultipleLevel     prior to libxslt 1.1.33 could allow attackers to     potentially exploit heap corruption via crafted XML     data.(CVE-2019-5815)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the libxslt package has been released.

According to the versions of the libxslt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In numbers.c in libxslt 1.1.33, a type holding grouping     characters of an xsl:number instruction was too narrow     and an invalid character/length combination could be     passed to xsltNumberFormatDecimal, leading to a read of     uninitialized stack data.(CVE-2019-13118)

  - In numbers.c in libxslt 1.1.33, an xsl:number with     certain format strings could lead to a uninitialized     read in xsltNumberFormatInsertNumbers. This could allow     an attacker to discern whether a byte on the stack     contains the characters A, a, I, i, or 0, or any other     character.(CVE-2019-13117)

  - numbers.c in libxslt before 1.1.29, as used in Google     Chrome before 51.0.2704.63, mishandles the i format     token for xsl:number data, which allows remote     attackers to cause a denial of service (integer     overflow or resource consumption) or possibly have     unspecified other impact via a crafted     document.(CVE-2016-1684)

  - numbers.c in libxslt before 1.1.29, as used in Google     Chrome before 51.0.2704.63, mishandles namespace nodes,     which allows remote attackers to cause a denial of     service (out-of-bounds heap memory access) or possibly     have unspecified other impact via a crafted     document.(CVE-2016-1683)

  - The xsltStylePreCompute function in preproc.c in     libxslt 1.1.28 does not check if the parent node is an     element, which allows attackers to cause a denial of     service via a crafted XML file, related to a 'type     confusion' issue.(CVE-2015-7995)

  - In xsltCopyText in transform.c in libxslt 1.1.33, a     pointer variable isn't reset under certain     circumstances. If the relevant memory area happened to     be freed and reused in a certain way, a bounds check     could fail and memory outside a buffer could be written     to, or uninitialized data could be     disclosed.(CVE-2019-18197)

  - Type confusion in xsltNumberFormatGetMultipleLevel     prior to libxslt 1.1.33 could allow attackers to     potentially exploit heap corruption via crafted XML     data.(CVE-2019-5815)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3101 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3101-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     September 09, 2022                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libxslt     Version        : 1.1.32-2.2~deb10u2     CVE ID         : CVE-2019-5815 CVE-2021-30560

    Two vulnerabilities were discovered in libxslt, an XSLT processing     runtime library, that could result in denial of service or potentially     the execution of arbitrary code if malicious files are processed.

    For Debian 10 buster, these problems have been fixed in version     1.1.32-2.2~deb10u2.

    We recommend that you upgrade your libxslt packages.

    For the detailed security status of libxslt please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libxslt

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792507096 advisory.

  - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and     xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a     crafted URL that is not actually invalid and is subsequently loaded. (CVE-2019-11068)

  - In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain     circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds     check could fail and memory outside a buffer could be written to, or uninitialized data could be     disclosed. (CVE-2019-18197)

  - Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to     potentially exploit heap corruption via crafted XML data. (CVE-2019-5815)

  - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30560)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes. (CVE-2024-55549)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
124278	Google Chrome < 74.0.3729.108 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2019/4/25	2025/11/24	high
124640	openSUSE Security Update : chromium (openSUSE-2019-1324)	Nessus	SuSE Local Security Checks	2019/5/6	2024/5/28	high
124641	openSUSE Security Update : chromium (openSUSE-2019-1325)	Nessus	SuSE Local Security Checks	2019/5/6	2024/5/28	high
134000	EulerOS 2.0 SP8 : libxslt (EulerOS-SA-2020-1166)	Nessus	Huawei Local Security Checks	2020/2/25	2024/3/26	high
132364	EulerOS 2.0 SP5 : libxslt (EulerOS-SA-2019-2697)	Nessus	Huawei Local Security Checks	2019/12/23	2024/4/2	high
136257	EulerOS Virtualization for ARM 64 3.0.2.0 : libxslt (EulerOS-SA-2020-1554)	Nessus	Huawei Local Security Checks	2020/5/1	2024/3/13	high
132967	Photon OS 1.0: Libxslt PHSA-2019-1.0-0263	Nessus	PhotonOS Local Security Checks	2020/1/16	2020/1/18	high
132974	Photon OS 2.0: Libxslt PHSA-2019-2.0-0196	Nessus	PhotonOS Local Security Checks	2020/1/16	2024/7/22	high
135571	EulerOS Virtualization 3.0.2.2 : libxslt (EulerOS-SA-2020-1442)	Nessus	Huawei Local Security Checks	2020/4/15	2024/3/18	high
164935	Debian dla-3101 : libxslt1-dev - security update	Nessus	Debian Local Security Checks	2022/9/10	2025/1/22	high
370880	CentOS Linux 6 [TuxCare] Security Update: libxslt / libxslt-devel / libxslt-python Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792507096)	Nessus	CentOS Local Security Checks	2026/10/22	2026/10/22	critical

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

critical