The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3988-1 advisory.

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to     cause a denial of service (bsc#1203330).
    - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to     cause a denial of service (bsc#1203329).
    - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995  CVE-2023-1192).
    - CVE-2023-1859: Fixed a use-after-free flaw in xen_9pfs_front_removet that could lead to system crash and     kernel information leak (bsc#1210169).
    - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate     privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
    - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return     speculative data resulting in loss of confidentiality (bsc#1213927).
    - CVE-2023-2177: Fixed null pointer dereference issue in the sctp network protocol that could lead to     system crash or DoS (bsc#1210643).
    - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
    - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local     privilege escalation (bsc#1213580).
    - CVE-2023-37453: Fixed oversight in SuperSpeed initialization  (bsc#1213123).
    - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN     privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service     (bsc#1213666).
    - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user     with special privileges to impact a kernel information leak issue (bsc#1213601).
    - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
    - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to     perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel     information leak issue (bsc#1214149).
    - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
    - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
    - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
    - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
    - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged     attacker to overflow the kernel stack (bsc#1214120).
    - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to     crash the system due to a double-free (bsc#1214350).
    - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local     attacker with normal user privilege to cause a denial of service (bsc#1214451).
    - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction     (bsc#1214727).
    - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c     (bsc#1214729).
    - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential     information disclosure or a denial of service (bsc#1215221).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3681-1 advisory.

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local     attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
    - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate     privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
    - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN     privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service     (bsc#1213666).
    - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that     could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
    - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user     with special privileges to impact a kernel information leak issue (bsc#1213601).
    - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to     perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel     information leak issue (bsc#1214149).
    - CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a     local user to crash the system, causing a denial of service condition (bsc#1213969).
    - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
    - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
    - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
    - CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to     crash the system due to a missing sanity check (bsc#1214348).
    - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to     crash the system due to a double-free (bsc#1214350).
    - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local     attacker with normal user privilege to cause a denial of service (bsc#1214451).
    - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return     speculative data resulting in loss of confidentiality (bsc#1213927).
    - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
    - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5480 advisory.

    Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation,     denial of service or information leaks. CVE-2022-4269 William Zhao discovered that a flaw in the Traffic     Control (TC) subsystem when using a specific networking configuration (redirecting egress packets to     ingress using TC action mirred), may allow a local unprivileged user to cause a denial of service     (triggering a CPU soft lockup). CVE-2022-39189 Jann Horn discovered that TLB flush operations are     mishandled in the KVM subsystem in certain KVM_VCPU_PREEMPTED situations, which may allow an unprivileged     guest user to compromise the guest kernel. CVE-2023-1206 It was discovered that the networking stack     permits attackers to force hash collisions in the IPv6 connection lookup table, which may result in denial     of service (significant increase in the cost of lookups, increased CPU utilization). CVE-2023-1380 Jisoo     Jang reported a heap out-of-bounds read in the brcmfmac Wi-Fi driver. On systems using this driver, a     local user could exploit this to read sensitive information or to cause a denial of service. CVE-2023-2002     Ruiahn Li reported an incorrect permissions check in the Bluetooth subsystem. A local user could exploit     this to reconfigure local Bluetooth interfaces, resulting in information leaks, spoofing, or denial of     service (loss of connection). CVE-2023-2007 Lucas Leong and Reno Robert discovered a time-of-check-to-     time-of-use flaw in the dpt_i2o SCSI controller driver. A local user with access to a SCSI device using     this driver could exploit this for privilege escalation. This flaw has been mitigated by removing support     for the I2OUSRCMD operation. CVE-2023-2124 Kyle Zeng, Akshay Ajayan and Fish Wang discovered that missing     metadata validation may result in denial of service or potential privilege escalation if a corrupted XFS     disk image is mounted. CVE-2023-2269 Zheng Zhang reported that improper handling of locking in the device     mapper implementation may result in denial of service. CVE-2023-2898 It was discovered that missing     sanitising in the f2fs file system may result in denial of service if a malformed file system is accessed.
    CVE-2023-3090 It was discovered that missing initialization in ipvlan networking may lead to an out-of-     bounds write vulnerability, resulting in denial of service or potentially the execution of arbitrary code.
    CVE-2023-3111 The TOTE Robot tool found a flaw in the Btrfs filesystem driver that can lead to a use-     after-free. It's unclear whether an unprivileged user can exploit this. CVE-2023-3212 Yang Lan discovered     that missing validation in the GFS2 filesystem could result in denial of service via a NULL pointer     dereference when mounting a malformed GFS2 filesystem. CVE-2023-3268 It was discovered that an out-of-     bounds memory access in relayfs could result in denial of service or an information leak. CVE-2023-3338     Davide Ornaghi discovered a flaw in the DECnet protocol implementation which could lead to a null pointer     dereference or use-after-free. A local user can exploit this to cause a denial of service (crash or memory     corruption) and probably for privilege escalation. This flaw has been mitigated by removing the DECnet     protocol implementation. CVE-2023-3389 Querijn Voet discovered a use-after-free in the io_uring subsystem,     which may result in denial of service or privilege escalation. CVE-2023-3611 It was discovered that an     out-of-bounds write in the traffic control subsystem for the Quick Fair Queueing scheduler (QFQ) may     result in denial of service or privilege escalation. CVE-2023-3609, CVE-2023-3776, CVE-2023-4128 It was     discovered that a use-after-free in the cls_fw, cls_u32, cls_route and network classifiers may result in     denial of service or potential local privilege escalation. CVE-2023-3863 It was discovered that a use-     after-free in the NFC implementation may result in denial of service, an information leak or potential     local privilege escalation. CVE-2023-4004 It was discovered that a use-after-free in Netfilter's     implementation of PIPAPO (PIle PAcket POlicies) may result in denial of service or potential local     privilege escalation for a user with the CAP_NET_ADMIN capability in any user or network namespace.
    CVE-2023-4132 A use-after-free in the driver for Siano SMS1xxx based MDTV receivers may result in local     denial of service. CVE-2023-4147 Kevin Rich discovered a use-after-free in Netfilter when adding a rule     with NFTA_RULE_CHAIN_ID, which may result in local privilege escalation for a user with the CAP_NET_ADMIN     capability in any user or network namespace. CVE-2023-4194 A type confusion in the implementation of     TUN/TAP network devices may allow a local user to bypass network filters. CVE-2023-4273 Maxim Suhanov     discovered a stack overflow in the exFAT driver, which may result in local denial of service via a     malformed file system. CVE-2023-20588 Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Koepf and     Oleksii Oleksenko discovered that on some AMD CPUs with the Zen1 micro architecture an integer division by     zero may leave stale quotient data from a previous division, resulting in a potential leak of sensitive     data. CVE-2023-21255 A use-after-free was discovered in the Android binder driver, which may result in     local privilege escalation on systems where the binder driver is loaded. CVE-2023-21400 Ye Zhang and     Nicolas Wu discovered a double-free in the io_uring subsystem, which may result in denial of service or     privilege escalation. CVE-2023-31084 It was discovered that the DVB Core driver does not properly handle     locking of certain events, allowing a local user to cause a denial of service. CVE-2023-34319 Ross     Lagerwall discovered a buffer overrun in Xen's netback driver which may allow a Xen guest to cause denial     of service to the virtualisation host by sending malformed packets. CVE-2023-35788 Hangyu Hua discovered     that an off-by-one in the Flower traffic classifier may result in local denial of service or the execution     of privilege escalation. CVE-2023-40283 A use-after-free was discovered in Bluetooth L2CAP socket     handling. For the oldstable distribution (bullseye), these problems have been fixed in version 5.10.191-1.
    We recommend that you upgrade your linux packages. For the detailed security status of linux please refer     to its security tracker page at: https://security-tracker.debian.org/tracker/linux

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3680-1 advisory.

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.


    The following security bugs were fixed:

    - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local     attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
    - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate     privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
    - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return     speculative data resulting in loss of confidentiality (bsc#1213927).
    - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN     privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service     (bsc#1213666).
    - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that     could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
    - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user     with special privileges to impact a kernel information leak issue (bsc#1213601).
    - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to     perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel     information leak issue (bsc#1214149).
    - CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a     local user to crash the system, causing a denial of service condition (bsc#1213969).
    - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
    - CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to     crash the system due to a missing sanity check (bsc#1214348).
    - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to     crash the system due to a double-free (bsc#1214350).
    - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local     attacker with normal user privilege to cause a denial of service (bsc#1214451).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
182669	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:3988-1)	Nessus	SuSE Local Security Checks	2023/10/6	2025/9/24	high
181659	SUSE SLES12 Security Update : kernel (SUSE-SU-2023:3681-1)	Nessus	SuSE Local Security Checks	2023/9/20	2025/9/24	high
180016	Debian DSA-5480-1 : linux - security update	Nessus	Debian Local Security Checks	2023/8/22	2025/9/24	high
181664	SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:3680-1)	Nessus	SuSE Local Security Checks	2023/9/20	2025/9/24	high

检测

插件搜索

high

high

high

high