远程 RockyLinux 9 主机上存在安装的程序包该程序包受到公告 RLSA-2024:9088 中提及的多个漏洞的影响。

    * mysql：openssl：POLY1305 MAC 实现会损坏 PowerPC 上的矢量寄存器 (CVE-2023-6129)

    * openssl：检查无效的 RSA 公开密钥时使用的时间过多 (CVE-2023-6237)

    * openssl：通过空指针取消引用造成拒绝服务 (CVE-2024-0727)

    * edk2：临时 DoS 漏洞 (CVE-2024-1298)

Tenable 已直接从 RockyLinux 安全公告中提取了上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Debian 11 主机上存在安装的程序包该程序包受到 dla-4207 公告中提及的多个漏洞的影响。

    -------------------------------------------------- ----------------------- Debian LTS 公告 DLA-4207-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Markus Koschany 2025 年 6 月 05 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    程序包edk2 版本2020.11-2+deb11u3 CVE ID CVE-2021-28216 CVE-2021-38575 CVE-2021-38576 CVE-2021-38578 CVE-2022-36763 CVE-2022-36764 CVE-2022-36765 CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2024-1298 CVE-2024-38796 Debian 缺陷1014468 1060408 1084055 1061256

    修复了 EDK II 一种功能丰富的现代跨平台固件开发环境 中的多种安全漏洞。可远程利用的缓冲区溢出和越界或无限循环漏洞可能导致拒绝服务或执行任意代码。

    对于 Debian 11 Bullseye这些问题已在 2020.11-2+deb11u3 版本中修复。

    我们建议您升级 edk2 程序包。

    如需了解 edk2 的详细安全状态，请参阅其安全跟踪页面：
    https://security-tracker.debian.org/tracker/edk2

    有关 Debian LTS 安全公告、如何将这些更新应用到系统以及常见问题解答的更多信息，请访问以下网址：https://wiki.debian.org/LTSAttachment:signature.ascDescription: 此消息部分已经过数字签署

Tenable 已直接从 Debian 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-69933b0732 advisory.

    - Update bundled edk2 to 20240524 (#2284243)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-07342adb87 advisory.

    - Update bundled edk2 to 20240524 (#2284243)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0503-1 advisory.

    - CVE-2024-1298: potential division-by-zero crash in edk2 due to UINT32 overflow in S3 ResumeCount.
    (bsc#1225889)
    - CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Advertise     messages.
      (bsc#1218879)
    - CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option. (bsc#1218880)
    - CVE-2023-45231: out-of-bounds read in edk2 when handling a ND Redirect message with truncated options.
    (bsc#1218881)
    - CVE-2023-45232: infinite loop in edk2 when parsing unknown options in the Destination Options header.
    (bsc#1218882)
    - CVE-2023-45233: infinite loop in edk2 when parsing PadN options in the Destination Options header.
    (bsc#1218883)
    - CVE-2023-45234: buffer overflow in edk2 when processing DNS Servers options in a DHCPv6 Advertise     message.
      (bsc#1218884)
    - CVE-2023-45235: buffer overflow in edk2 when handling the Server ID option in a DHCPv6 proxy Advertise     message.
      (bsc#1218885)
    - CVE-2023-45236: predictable TCP Initial Sequence Numbers in edk2 network packages. (bsc#1218886)
    - CVE-2023-45237: use of a weak pseudorandom number generator in edk2. (bsc#1218887)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5297 advisory.

    EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package     contains a sample 64-bit UEFI firmware for QEMU and KVM.

    Security Fix(es):

    * edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)

    * edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)

    * edk2: Temporary DoS vulnerability (CVE-2024-1298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12795 advisory.

    - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-     By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
    - EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at     any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
    - EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug:
    36990198] {CVE-2023-45236}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12842 advisory.

    - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-     By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
    - EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at     any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
    - EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug:
    36990198] {CVE-2023-45236}
    - EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug:
    36990210] {CVE-2023-45237}

    * Tue Feb 27 2024 Aaron Young <aaron.young@oracle.com>
    - Create new 20240227 release for OL9 which includes the following fixed CVEs:
      {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234}     {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
    - Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
      {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215}     {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274}     {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}

    * Tue Aug 22 2023 Aaron Young <aaron.young@oracle.com>
    - Create new 20230821 release for OL9 which includes the following fixed CVEs:
      {CVE-2019-14560}
    - Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
      {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464}     {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068}     {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450}     {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551}     {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734}     {CVE-2018-0735}

    * Tue Jun 13 2023 Aaron Young <aaron.young@oracle.com>

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0178 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-45236:
    EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This     vulnerability can be exploited by an attacker to gain unauthorized     access and potentially lead to a loss of Confidentiality.

    CVE-2023-45237:
    EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This     vulnerability can be exploited by an attacker to gain unauthorized     access and potentially lead to a loss of Confidentiality.

    CVE-2024-1298:
    EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero     due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss     of Availability.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    An attacker with the ability to modify physical memory can control the value of AcpiS3ResumeRecord-     ResumeCount. If the attacker sets the value of ResumeCount to MAX_UINT32 (0xFFFFFFFF), and ResumeCount     is subsequently incremented, its new value will be 0 (due to UINT32 overflow). Since there is no check for     overflow, when ResumeCount is 0 and passed as the second argument to DivU64x32(), it will trigger a     division by 0, and cause a system crash, leading to a DoS.(CVE-2024-1298)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization util-linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of edk2 / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1298 advisory.

  - EDK2 contains a vulnerability when S3 sleep is activated where an Attacker May cause a Division-By-Zero     due to a UNIT32 overflow via local access. A successful exploit of this vulnerability May lead to a loss     of Availability. (CVE-2024-1298)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02516-1 advisory.

    - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount (bsc#1225889).

    Other fixes:

    - Fixed Kubevirt GPU passthrough failure (bsc#1245542)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-12794 advisory.

    - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-     By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
    - EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at     any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
    - EDK2: EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug:
    36990198] {CVE-2023-45236}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-28600 advisory.

  - EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can     be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality.
    (CVE-2023-45236, CVE-2023-45237)

  - EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero     due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss     of Availability. (CVE-2024-1298)

  - In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point     in time and can trigger its handler. This affects AMD SEV-SNP and AMD SEV-ES. (CVE-2024-25742)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5297 advisory.

    * edk2: Predictable TCP Initial Sequence Numbers (CVE-2023-45236)

    * edk2: Use of a Weak PseudoRandom Number Generator (CVE-2023-45237)

    * edk2: Temporary DoS vulnerability (CVE-2024-1298)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero     due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss     of Availability. (CVE-2024-1298)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
232942	RockyLinux 9edk2 (RLSA-2024:9088)	Nessus	Rocky Linux Local Security Checks	2025/3/19	2025/3/19	medium
237864	Debian dla-4207ovmf - 安全更新	Nessus	Debian Local Security Checks	2025/6/5	2025/6/5	critical
200280	Fedora 39 : efifs (2024-69933b0732)	Nessus	Fedora Local Security Checks	2024/6/11	2024/6/11	medium
200283	Fedora 40 : efifs (2024-07342adb87)	Nessus	Fedora Local Security Checks	2024/6/11	2024/6/11	medium
216443	SUSE SLES15 Security Update : ovmf (SUSE-SU-2025:0503-1)	Nessus	SuSE Local Security Checks	2025/2/19	2025/2/19	high
205516	RHEL 8 : edk2 (RHSA-2024:5297)	Nessus	Red Hat Local Security Checks	2024/8/14	2024/11/7	high
209568	Oracle Linux 8 : edk2 (ELSA-2024-12795)	Nessus	Oracle Linux Local Security Checks	2024/10/23	2025/5/29	high
211827	Oracle Linux 9 : edk2 (ELSA-2024-12842)	Nessus	Oracle Linux Local Security Checks	2024/11/25	2025/4/9	high
236219	Alibaba Cloud Linux 3 : 0178: edk2 (ALINUX3-SA-2024:0178)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
205965	EulerOS Virtualization 2.11.0 : util-linux (EulerOS-SA-2024-2204)	Nessus	Huawei Local Security Checks	2024/8/21	2024/8/21	medium
201828	CBL Mariner 2.0 Security Update: edk2 / hvloader (CVE-2024-1298)	Nessus	MarinerOS Local Security Checks	2024/7/3	2025/2/10	medium
242867	SUSE SLES15 / openSUSE 15 Security Update : ovmf (SUSE-SU-2025:02516-1)	Nessus	SuSE Local Security Checks	2025/7/26	2025/7/26	medium
209346	Oracle Linux 7 : edk2 (ELSA-2024-12794)	Nessus	Oracle Linux Local Security Checks	2024/10/21	2024/10/21	high
209533	Oracle Linux 8 : edk2 (ELSA-2024-28600)	Nessus	Oracle Linux Local Security Checks	2024/10/23	2024/10/23	high
235558	RockyLinux 8 : edk2 (RLSA-2024:5297)	Nessus	Rocky Linux Local Security Checks	2025/5/7	2025/5/7	high
228148	Linux Distros Unpatched Vulnerability : CVE-2024-1298	Nessus	Misc.	2025/3/5	2025/8/30	medium

检测

插件搜索

medium

critical

medium

medium

high

high

high

high

high

medium

medium

medium

high

high

high

medium