The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7482 advisory.

  - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a     binary from the current working directory when not found in the PATH. (CVE-2022-25255)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0085 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-25255:
    In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a     binary from the current working directory when not found in the PATH.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the qt5-qtbase packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a     binary from the current working directory when not found in the PATH. (CVE-2022-25255)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8022 advisory.

    [5.15.3-1]
    - 5.15.3       Resolves: bz#2061352

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qt5-qtbase installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-25255 advisory.

  - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a     binary from the current working directory when not found in the PATH. (CVE-2022-25255)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a     binary from the current working directory when not found in the PATH. (CVE-2022-25255)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43ae57f6-92ab-11ec-81b4-2cf05d620ecc advisory.

  - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a     binary from the current working directory when not found in the PATH. (CVE-2022-25255)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7482 advisory.

    The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

    The following packages have been upgraded to a later upstream version: qt5 (5.15.3). (BZ#2061377)

    Security Fix(es):

    * qt: QProcess could execute a binary from the current working directory when not found in the PATH     (CVE-2022-25255)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8022 advisory.

    The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

    Security Fix(es):

    * qt: QProcess could execute a binary from the current working directory when not found in the PATH     (CVE-2022-25255)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4365:05 advisory.

    * qt: QProcess could execute a binary from the current working directory when not found in the PATH     (CVE-2022-25255)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-4961:01 advisory.

    * qt: QProcess could execute a binary from the current working directory when     not found in the PATH (CVE-2022-25255)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
167313	AlmaLinux 8 : qt5 (ALSA-2022:7482)	Nessus	Alma Linux Local Security Checks	2022/11/12	2022/11/12	high
236276	Alibaba Cloud Linux 3 : 0085: qt5 (ALINUX3-SA-2023:0085)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
164214	EulerOS 2.0 SP8 : qt5-qtbase (EulerOS-SA-2022-2233)	Nessus	Huawei Local Security Checks	2022/8/17	2022/8/17	high
168069	Oracle Linux 9 : qt5 (ELSA-2022-8022)	Nessus	Oracle Linux Local Security Checks	2022/11/22	2024/11/1	high
209828	CBL Mariner 2.0 Security Update: qt5-qtbase (CVE-2022-25255)	Nessus	MarinerOS Local Security Checks	2024/10/27	2025/2/10	high
224504	Linux Distros Unpatched Vulnerability : CVE-2022-25255	Nessus	Misc.	2025/3/5	2026/9/2	high
158199	FreeBSD : Qt5 -- QProcess unexpected search path (43ae57f6-92ab-11ec-81b4-2cf05d620ecc)	Nessus	FreeBSD Local Security Checks	2022/2/21	2023/11/6	high
167085	RHEL 8 : qt5 (RHSA-2022:7482)	Nessus	Red Hat Local Security Checks	2022/11/8	2024/11/7	high
167613	RHEL 9 : qt5 (RHSA-2022:8022)	Nessus	Red Hat Local Security Checks	2022/11/16	2024/11/8	high
292038	MiracleLinux 8 : qt5-5.15.3-1.el8 (AXSA:2022-4365:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
292659	MiracleLinux 9 : qt5 (AXSA:2023-4961:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high