The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0533 advisory.

    [3.7.6-23.3]
    - Fixes for CVE-2023-5981, CVE-2024-0553, CVE-2024-0567

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0638-1 advisory.

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981. (CVE-2024-0553)

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0567 advisory.

  - A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
    (CVE-2024-0567)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the gnutls package has been released.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0582 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-0553:
    A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK     ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This     issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange,     potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete     resolution for CVE-2023-5981.

    CVE-2024-0567:
    A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with     distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure.
    This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
190001	Oracle Linux 9 : gnutls (ELSA-2024-0533)	Nessus	Oracle Linux Local Security Checks	2024/2/5	2025/9/9	high
191077	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gnutls (SUSE-SU-2024:0638-1)	Nessus	SuSE Local Security Checks	2024/2/28	2024/2/28	high
197144	EulerOS Virtualization 2.11.0 : gnutls (EulerOS-SA-2024-1626)	Nessus	Huawei Local Security Checks	2024/5/15	2024/5/15	high
201777	CBL Mariner 2.0 Security Update: gnutls (CVE-2024-0567)	Nessus	MarinerOS Local Security Checks	2024/7/3	2024/7/3	high
204115	Photon OS 3.0: Gnutls PHSA-2024-3.0-0717	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	high
238852	TencentOS Server 4: gnutls (TSSA-2024:0582)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high

检测

插件搜索

high

high

high

high

high

high