リモートの Oracle Linux 9 ホストに、ELSA-2023-2179アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - 2021.8.22までの NTFS-3G の ntfsck には、buffer+512*3-2 を含むヒープベースのバッファオーバーフローがあります注意: 上流の位置としては、その ntfsck は廃止されていますが、一部の Linux ディストリビューションによって出荷されます。
    (CVE-2021-46790)

  - 細工された NTFS イメージにより、2021.8.22 までの NTFS-3G の ntfs_mft_rec_alloc のヒープベースのバッファオーバーフローが引き起こされる可能性があります。(CVE-2022-30788)

  - 細工された NTFS イメージにより、2021.8.22 までの NTFS-3G の ntfs_check_log_client_array のヒープベースのバッファオーバーフローが引き起こされる可能性があります。(CVE-2022-30789)

  - 細工された NTFS イメージにより、2021.8.22 までの NTFS-3G の ntfs_names_full_collate のヒープベースのバッファオーバーフローが引き起こされる可能性があります。(CVE-2022-30786)

  - 細工された NTFS イメージにより、2021.8.22 までの NTFS-3G の ntfs_get_attribute_value でヒープ枯渇が発生する可能性があります。
    (CVE-2022-30784)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの CentOS Linux 8 ホストにインストールされているパッケージは、CESA-2023: 2757 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - 2021.8.22までの NTFS-3G の ntfsck には、buffer+512*3-2 を含むヒープベースのバッファオーバーフローがあります注意: 上流の位置としては、その ntfsck は廃止されていますが、一部の Linux ディストリビューションによって出荷されます。
    (CVE-2021-46790)

  - 細工された NTFS イメージにより、2021.8.22 までの NTFS-3G の ntfs_get_attribute_value でヒープ枯渇が発生する可能性があります。
    (CVE-2022-30784)

  - 細工された NTFS イメージにより、2021.8.22 までの NTFS-3G の ntfs_names_full_collate のヒープベースのバッファオーバーフローが引き起こされる可能性があります。(CVE-2022-30786)

  - 細工された NTFS イメージにより、2021.8.22 までの NTFS-3G の ntfs_mft_rec_alloc のヒープベースのバッファオーバーフローが引き起こされる可能性があります。(CVE-2022-30788)

  - 細工された NTFS イメージにより、2021.8.22 までの NTFS-3G の ntfs_check_log_client_array のヒープベースのバッファオーバーフローが引き起こされる可能性があります。(CVE-2022-30789)

  - 拡張形式の ClientCutText メッセージの処理中に、QEMU VNC サーバーで整数アンダーフローの問題が見つかりました。悪意のあるクライアントがこの欠陥を利用して、特別に細工されたペイロードメッセージを送信することで QEMU の応答を停止させ、サービス拒否を引き起こす可能性があります。(CVE-2022-3165)

  - TPM2.0 のモジュールライブラリに領域外読み取りの脆弱性が存在し、CryptParameterDecryption ルーチンで TPM2.0 コマンドの末尾を超えて 2 バイトの読み取りが行われる可能性があります。この脆弱性の悪用に成功した攻撃者が、TPM に保存されている機密データの読み取りやアクセスを行う可能性があります。(CVE-2023-1018)

Nessusはこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5160 advisory.

  - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the     upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
    (CVE-2021-46790)

  - An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between     NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30783)

  - A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
    (CVE-2022-30784)

  - A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory     read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30785)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through     2021.8.22. (CVE-2022-30786)

  - An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through     2021.8.22 when using libfuse-lite. (CVE-2022-30787)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through     2021.8.22. (CVE-2022-30788)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G     through 2021.8.22. (CVE-2022-30789)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of ntfs-3g installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-46790 advisory.

  - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the     upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
    (CVE-2021-46790)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of ntfs-3g installed on the remote host is prior to 2022.10.3. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-145-01 advisory.

  - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the     upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
    (CVE-2021-46790)

  - An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between     NTFS-3G and the kernel in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30783)

  - A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.
    (CVE-2022-30784)

  - A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory     read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite. (CVE-2022-30785)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through     2021.8.22. (CVE-2022-30786)

  - An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through     2021.8.22 when using libfuse-lite. (CVE-2022-30787)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through     2021.8.22. (CVE-2022-30788)

  - A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G     through 2021.8.22. (CVE-2022-30789)

  - A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause     code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically     proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an     external storage device. (CVE-2022-40284)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0082 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-46790:
    ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the     upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.

    CVE-2022-3165:
    An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the     extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially     crafted payload message, resulting in a denial of service.

    CVE-2022-30784:
    A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.

    CVE-2022-30786:
    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through     2021.8.22.

    CVE-2022-30788:
    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through     2021.8.22.

    CVE-2022-30789:
    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G     through 2021.8.22.

    CVE-2023-1018:
    An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end     of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this     vulnerability can read or access sensitive data stored in the TPM.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2757 advisory.

    * ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790)
    * QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165)
    * ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784)
    * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate     (CVE-2022-30786)
    * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc     (CVE-2022-30788)
    * ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array     (CVE-2022-30789)
    * tpm2: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1018)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2757 advisory.

    - Fix CVE-2022-2211 Denial of Service in --key parameter       resolves: rhbz#2101280
    - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,       CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789       resolves: rhbz#2127240 rhbz#2127248       (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263)

    libiscsi     libnbd
    - Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails       resolves: rhbz#2045718
    - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
    - Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018)       Resolves: rhbz#2173964       Resolves: rhbz#2173970

    libvirt
    - Resolves: bz#2148545       (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-     of-bounds read [rhel-8])
    - Resolves: bz#2129760       (CVE-2022-3165 virt:rhel/qemu-kvm: QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU     exhaustion [rhel-8])

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
175685	Oracle Linux 9 : libguestfs-winsupport (ELSA-2023-2179)	Nessus	Oracle Linux Local Security Checks	2023/5/15	2024/10/22	high
175891	CentOS 8 : virt: rhel および virt-devel: rhel (CESA-2023: 2757)	Nessus	CentOS Local Security Checks	2023/5/16	2024/2/8	high
162126	Debian DSA-5160-1 : ntfs-3g - security update	Nessus	Debian Local Security Checks	2022/6/11	2023/10/20	high
173531	CBL Mariner 2.0 Security Update: ntfs-3g (CVE-2021-46790)	Nessus	MarinerOS Local Security Checks	2023/3/28	2023/8/29	high
176394	Slackware Linux 14.2 / 15.0 / current ntfs-3g Multiple Vulnerabilities (SSA:2023-145-01)	Nessus	Slackware Local Security Checks	2023/5/25	2023/5/25	high
236206	Alibaba Cloud Linux 3 : 0082: virt:rhel and virt-devel:rhel (ALINUX3-SA-2023:0082)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
176122	AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2023:2757)	Nessus	Alma Linux Local Security Checks	2023/5/19	2025/1/13	high
180965	Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2023-2757)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	high

检测

插件搜索

high

high

high

high

high

high

high

high