The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5287 advisory.

    Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be     compatible with MIT Kerberos. CVE-2021-3671 Joseph Sutton discovered that the Heimdal KDC does not     validate that the server name in the TGS-REQ is present before dereferencing, which may result in denial     of service. CVE-2021-44758 It was discovered that Heimdal is prone to a NULL dereference in acceptors     where an initial SPNEGO token that has no acceptable mechanisms, which may result in denial of service for     a server application that uses SPNEGO. CVE-2022-3437 Several buffer overflow flaws and non-constant time     leaks were discovered when using 1DES, 3DES or RC4 (arcfour). CVE-2022-41916 An out-of-bounds memory     access was discovered when Heimdal normalizes Unicode, which may result in denial of service.
    CVE-2022-42898 It was discovered that integer overflows in PAC parsing may result in denial of service for     Heimdal KDCs or possibly Heimdal servers. CVE-2022-44640 It was discovered that the Heimdal's ASN.1     compiler generates code that allows specially crafted DER encodings to invoke an invalid free on the     decoded structure upon decode error, which may result in remote code execution in the Heimdal KDC. For the     stable distribution (bullseye), these problems have been fixed in version 7.7.0+dfsg-2+deb11u2. We     recommend that you upgrade your heimdal packages. For the detailed security status of heimdal please refer     to its security tracker page at: https://security-tracker.debian.org/tracker/heimdal

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-dba9ba8e2b advisory.

    Fixes:

    * Delay service starts until after network is online (rhbz#2005501)
    * Restart services on package update (will apply when updating from this release)


    ----

    This release fixes the following Security Vulnerabilities:

    * CVE-2022-42898 PAC parse integer overflows
    * CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour
    * CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array
    * CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors
    * CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
    * CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec

    Note that CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common Vulnerability Scoring     System (CVSS) v3.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ     (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
    (CVE-2021-3671)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-cbbd105d08 advisory.

    Fixes:

    * Delay service starts until after network is online (rhbz#2005501)
    * Restart services on package update (will apply when updating from this release)


    ----

    This release fixes the following Security Vulnerabilities:

    * CVE-2022-42898 PAC parse integer overflows
    * CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour
    * CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array
    * CVE-2021-44758 NULL dereference DoS in SPNEGO acceptors
    * CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ
    * CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec

    Note that CVE-2022-44640 is a severe vulnerability, possibly a 10.0 on the Common Vulnerability Scoring     System (CVSS) v3.



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017434 advisory.

    A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ     (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to     retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
    (CVE-2016-2124)

  - A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use     this flaw to cause possible privilege escalation. (CVE-2020-25717)

  - A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ     (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
    (CVE-2021-3671)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to     retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
    (CVE-2016-2124)

  - A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use     this flaw to cause possible privilege escalation. (CVE-2020-25717)

  - A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ     (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
    (CVE-2021-3671)

  - The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide '...enhanced compatibility     with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver.' Samba versions prior to     4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via     specially crafted extended file attributes. A remote attacker with write access to extended file     attributes can execute arbitrary code with the privileges of smbd, typically root. (CVE-2021-44142)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3206 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3206-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     November 26, 2022                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : heimdal     Version        : 7.5.0+dfsg-3+deb10u1     CVE ID         : CVE-2019-14870 CVE-2021-3671 CVE-2021-44758 CVE-2022-3437                      CVE-2022-41916 CVE-2022-42898 CVE-2022-44640     Debian Bug     : 946786 996586 1024187

    Multiple security vulnerabilities were discovered in heimdal, an     implementation of the Kerberos 5 authentication protocol, which may     result in denial of service, information disclosure, or remote code     execution.

    CVE-2019-14870

        Isaac Boukris reported that the Heimdal KDC before 7.7.1 does not         apply delegation_not_allowed (aka not-delegated) user attributes for         S4U2Self.  Instead the forwardable flag is set even if the         impersonated client has the not-delegated flag set.

    CVE-2021-3671

        Joseph Sutton discovered that the Heimdal KDC before 7.7.1 does not         check for missing missing sname in TGS-REQ (Ticket Granting Server -         Request) before before dereferencing.  An authenticated user could         use this flaw to crash the KDC.

    CVE-2021-44758

        It was discovered that Heimdal is prone to a NULL dereference in         acceptors when the initial SPNEGO token has no acceptable         mechanisms, which may result in denial of service for a server         application that uses the Simple and Protected GSSAPI Negotiation         Mechanism (SPNEGO).

    CVE-2022-3437

        Evgeny Legerov reported that the DES and Triple-DES decryption         routines in the Heimdal GSSAPI library before 7.7.1 were prone to         buffer overflow on malloc() allocated memory when presented with a         maliciously small packet.  In addition, the Triple-DES and RC4         (arcfour) decryption routine were prone to non-constant time leaks,         which could potentially yield to a leak of secret key material when         using these ciphers.

    CVE-2022-41916

        It was discovered that Heimdal's PKI certificate validation library         before 7.7.1 can under some circumstances perform an out-of-bounds         memory access when normalizing Unicode, which may result in denial         of service.

    CVE-2022-42898

        Greg Hudson discovered an integer multiplication overflow in the         Privilege Attribute Certificate (PAC) parsing routine, which may         result in denial of service for Heimdal KDCs and possibly Heimdal         servers (e.g., via GSS-API) on 32-bit systems.

    CVE-2022-44640

        Douglas Bagnall and the Heimdal maintainers independently discovered         that Heimdal's ASN.1 compiler before 7.7.1 generates code that         allows specially crafted DER encodings of CHOICEs to invoke the         wrong free() function on the decoded structure upon decode error,         which may result in remote code execution in the Heimdal KDC and         possibly the Kerberos client, the X.509 library, and other         components as well.

    For Debian 10 buster, these problems have been fixed in version     7.5.0+dfsg-3+deb10u1.

    We recommend that you upgrade your heimdal packages.

    For the detailed security status of heimdal please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/heimdal

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
168145	Debian DSA-5287-1 : heimdal - security update	Nessus	Debian Local Security Checks	2022/11/23	2025/1/24	critical
169051	Fedora 36 : heimdal (2022-dba9ba8e2b)	Nessus	Fedora Local Security Checks	2022/12/22	2024/11/14	critical
157210	EulerOS 2.0 SP9 : samba (EulerOS-SA-2022-1037)	Nessus	Huawei Local Security Checks	2022/1/28	2022/1/28	medium
169244	Fedora 35 : heimdal (2022-cbbd105d08)	Nessus	Fedora Local Security Checks	2022/12/23	2024/11/14	critical
314051	Unity Linux 20.1060e / 20.1070e Security Update: samba (UTSA-2026-017434)	Nessus	Unity Linux Local Security Checks	2026/5/11	2026/5/11	medium
158490	EulerOS 2.0 SP5 : samba (EulerOS-SA-2022-1282)	Nessus	Huawei Local Security Checks	2022/3/1	2022/3/1	high
165891	EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2022-2537)	Nessus	Huawei Local Security Checks	2022/10/9	2023/2/3	high
168205	Debian dla-3206 : heimdal-clients - security update	Nessus	Debian Local Security Checks	2022/11/27	2025/1/22	critical

检测

插件搜索

critical

critical

medium

critical

medium

high

high

critical