The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2022_7700 advisory.

    * gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc (CVE-2020-0256)

    * gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc (CVE-2021-0308)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5262-1 advisory.

    The potential for an out of bounds write due to a missing bounds check was discovered to impact the sgdisk     utility of GPT fdisk.

    Exploitation requires the use of a maliciously formatted storage

    device and could cause sgdisk to crash as well as possibly

    allow for local privilege escalation.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gdisk package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege when inserting a malicious USB device, with no additional     execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 (CVE-2020-0256)

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:7700 advisory.

    The gdisk packages provide the gdisk partitioning utility for GUID Partition Table (GPT) disks. The     utility features a command-line interface similar to fdisk, direct manipulation of partition table     structures, recovery tools to deal with corrupt partition tables, and the ability to convert Master Boot     Record (MBR) disks to the GPT format.

    Security Fix(es):

    * gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc (CVE-2020-0256)

    * gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc (CVE-2021-0308)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-7700 advisory.

    [1.0.3-11]
    - Fix double byteswap on big-endian systems also while reading partition names       resolves: #2065205

    [1.0.3-10]
    - Fix CVE-2021-0308       resolves: #2052364

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gdisk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege when inserting a malicious USB device, with no additional     execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:
    Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 (CVE-2020-0256)

  - In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check.
    This could lead to local escalation of privilege with no additional execution privileges needed. User     interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9,     Android-10, Android-11, Android-8.0; Android ID: A-158063095. (CVE-2021-0308)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7700 advisory.

  - gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc (CVE-2020-0256)

  - gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc (CVE-2021-0308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4240:03 advisory.

    * gdisk: possible out-of-bounds-write in LoadPartitionTable of gpt.cc (CVE-2020-0256)
      * gdisk: possible out-of-bounds-write in ReadLogicalParts of basicmbr.cc (CVE-2021-0308)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0050 advisory.

    This advisory aggregates security fixes for the gdisk SRPM in CIQ LTS 8.6. It addresses 2 CVEs:
    CVE-2020-0256, CVE-2021-0308.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
358472	Rocky Linux 8 [CIQ] Security Update: gdisk / gdisk-debuginfo / gdisk-debugsource Multiple Vulnerabilities (crlsa-2022_7700)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
251113	Linux Distros Unpatched Vulnerability : CVE-2021-0308	Nessus	Misc.	2025/8/18	2026/9/2	medium
157349	Ubuntu 16.04 ESM : GPT fdisk vulnerabilities (USN-5262-1)	Nessus	Ubuntu Local Security Checks	2022/2/3	2024/8/28	medium
160117	EulerOS 2.0 SP5 : gdisk (EulerOS-SA-2022-1532)	Nessus	Huawei Local Security Checks	2022/4/25	2022/4/25	medium
161553	EulerOS 2.0 SP3 : gdisk (EulerOS-SA-2022-1720)	Nessus	Huawei Local Security Checks	2022/5/26	2022/5/26	medium
167074	RHEL 8 : gdisk (RHSA-2022:7700)	Nessus	Red Hat Local Security Checks	2022/11/8	2024/11/7	medium
167548	Oracle Linux 8 : gdisk (ELSA-2022-7700)	Nessus	Oracle Linux Local Security Checks	2022/11/15	2024/10/22	medium
169653	EulerOS Virtualization 3.0.2.6 : gdisk (EulerOS-SA-2023-1086)	Nessus	Huawei Local Security Checks	2023/1/6	2023/1/6	medium
165878	EulerOS Virtualization 3.0.6.6 : gdisk (EulerOS-SA-2022-2497)	Nessus	Huawei Local Security Checks	2022/10/9	2022/10/9	medium
167119	CentOS 8 : gdisk (CESA-2022:7700)	Nessus	CentOS Local Security Checks	2022/11/8	2022/11/8	medium
292508	MiracleLinux 8 : gdisk-1.0.3-11.el8 (AXSA:2022-4240:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
358321	Rocky Linux 8.6 [CIQ] Security Update: gdisk / gdisk-debuginfo / gdisk-debugsource Multiple Vulnerabilities (ciqsa-2026_0050)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium