The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3008 advisory.

    The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI     Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters     up to and including exascale sizes.

    Security Fix(es):

    * pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0367 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-41915:
    OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files     via a race condition during execution of library code with UID 0.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-155d2f22f1 advisory.

    Security fix for CVE-2023-41915


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-d6dbdf62ad advisory.

    Security fix for CVE-2023-41915



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6434-1 advisory.

    Francois Diakhate discovered that PMIx did not properly handle race

    conditions in the pmix library, which could lead to unwanted privilege escalation. An attacker could     possibly use this issue to obtain ownership of an arbitrary file on the filesystem, under the default     configuration of the application.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5547 advisory.

    Francois Diakhate reported that a race condition in pmix, a library implementing Process Management     Interface (PMI) Exascale API, could allow a malicious user to obtain ownership of an arbitrary file on the     filesystem when parts of the PMIx library are called by a process with elevated privileges, resulting in     privilege escalation. This may happen under the default configuration of certain workload managers,     including Slurm. For the oldstable distribution (bullseye), this problem has been fixed in version     4.0.0-4.1+deb11u1. For the stable distribution (bookworm), this problem has been fixed in version     4.2.2-1+deb12u1. We recommend that you upgrade your pmix packages. For the detailed security status of     pmix please refer to its security tracker page at: https://security-tracker.debian.org/tracker/pmix

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2199 advisory.

    The Process Management Interface (PMI) provides process management functions for MPI implementations. PMI     Exascale (PMIx) provides an extended version of the PMI standard specifically designed to support clusters     up to and including exascale sizes.

    Security Fix(es):

    * pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2199 advisory.

    - Fix CVE-2023-41915

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0090 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-41915:
    OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files     via a race condition during execution of library code with UID 0.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8272:02 advisory.

    * pmix: race condition allows attackers to obtain ownership of arbitrary files (CVE-2023-41915)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
197756	RHEL 8 : pmix (RHSA-2024:3008)	Nessus	Red Hat Local Security Checks	2024/5/23	2024/11/7	high
239379	TencentOS Server 4: pmix (TSSA-2024:0367)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
182478	Fedora 37 : openmpi / pmix / prrte / slurm (2023-155d2f22f1)	Nessus	Fedora Local Security Checks	2023/10/4	2024/11/14	high
182479	Fedora 38 : openmpi / pmix / prrte / slurm (2023-d6dbdf62ad)	Nessus	Fedora Local Security Checks	2023/10/4	2024/11/14	high
183308	Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM : PMIx vulnerability (USN-6434-1)	Nessus	Ubuntu Local Security Checks	2023/10/18	2024/8/27	high
184434	Debian DSA-5547-1 : pmix - security update	Nessus	Debian Local Security Checks	2023/11/4	2025/1/24	high
194759	RHEL 9 : pmix (RHSA-2024:2199)	Nessus	Red Hat Local Security Checks	2024/4/30	2025/3/22	high
195050	Oracle Linux 9 : pmix (ELSA-2024-2199)	Nessus	Oracle Linux Local Security Checks	2024/5/6	2025/9/9	high
236002	Alibaba Cloud Linux 3 : 0090: pmix (ALINUX3-SA-2024:0090)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
291909	MiracleLinux 8 : pmix-2.2.5-3.el8 (AXSA:2024-8272:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high