According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Windows Libarchive Remote Code Execution Vulnerability(CVE-2024-20696)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libarchive security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Windows Libarchive Remote Code Execution Vulnerability (CVE-2024-20696)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3950 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3950-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     November 11, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libarchive     Version        : 3.4.3-2+deb11u2     CVE ID         : CVE-2021-36976 CVE-2022-26280 CVE-2022-36227 CVE-2024-20696     Debian Bug     : 991442 1008953 1024669 1086155

    Multiple vulnerabilities have been fixed in libarchive,     a multi-format archive and compression library.

    CVE-2021-36976

        RAR reader use-after-free

    CVE-2022-26280

        ZIP reader out-of-bounds-read

    CVE-2022-36227

        archive_write NULL dereference

    CVE-2024-20696

        RAR reader out-of-bounds write

    For Debian 11 bullseye, these problems have been fixed in version     3.4.3-2+deb11u2.

    We recommend that you upgrade your libarchive packages.

    For the detailed security status of libarchive please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libarchive

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034130. It is, therefore, affected by multiple vulnerabilities

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654)

  - BitLocker Security Feature Bypass Vulnerability (CVE-2024-20666)

  - Windows Kerberos Security Feature Bypass Vulnerability (CVE-2024-20674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034123. It is, therefore, affected by multiple vulnerabilities

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654)

  - BitLocker Security Feature Bypass Vulnerability (CVE-2024-20666)

  - Windows Kerberos Security Feature Bypass Vulnerability (CVE-2024-20674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034122. It is, therefore, affected by multiple vulnerabilities

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654)

  - BitLocker Security Feature Bypass Vulnerability (CVE-2024-20666)

  - Windows Kerberos Security Feature Bypass Vulnerability (CVE-2024-20674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Windows Libarchive 远程代码执行漏洞 (CVE-2024-20696)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

远程 Debian 11 主机上安装的多个程序包受到 dla-3950 公告中提及的多个漏洞影响。

    - ------------------------------------------------------------------------- Debian LTS 公告 DLA-3950-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Adrian Bunk 2024 年 11 月 11 日 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    程序包：libarchive 版本：3.4.3-2+deb11u2 CVE ID：CVE-2021-36976 CVE-2022-26280 CVE-2022-36227 CVE-2024-20696 Debian 缺陷：991442 1008953 1024669 1086155

    已在多格式存档与压缩库 libarchive 中修复多个漏洞。

    CVE-2021-36976

        RAR 阅读器释放后使用

    CVE-2022-26280

        ZIP 阅读器越界读取

    CVE-2022-36227

        archive_write 空取消引用

    CVE-2024-20696

        RAR 阅读器越界写入

    对于 Debian 11 bullseye，已在 3.4.3-2+deb11u2 版本中修复这些问题。

    建议您升级 libarchive 程序包。

    如需了解 libarchive 的详细安全状态，请参阅其安全跟踪页面：
    https://security-tracker.debian.org/tracker/libarchive

    有关 Debian LTS 安全公告、如何将这些更新应用到系统以及常见问题解答的更多信息，请访问以下网址：https://wiki.debian.org/LTS

Tenable 已直接从 Debian 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Debian 12 主机上安装的多个程序包受到 dsa-5806 公告中提及的一个漏洞影响。

    - ------------------------------------------------------------------------- Debian 安全公告 DSA-5806-1 security@debian.org https://www.debian.org/security/Salvatore Bonaccorso 2024 年 11 月 09 日 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    程序包：libarchive CVE ID：CVE-2024-20696 Debian 缺陷：1086155

    在多格式存档和压缩库 libarchive 中发现 rar e8 过滤器存在基于堆的缓冲区溢出越界写入漏洞，如果处理特别构建的 RAR 存档，该漏洞可能导致执行任意代码。

    对于稳定发行版本 (bookworm)，已在版本 3.6.2-1+deb12u2 中修复此问题。

    建议您升级 libarchive 程序包。

    如需了解 libarchive 的详细安全状态，请参阅其安全跟踪页面：
    https://security-tracker.debian.org/tracker/libarchive

    有关 Debian 安全公告、如何将这些更新应用到系统以及常见问题解答的更多信息，请访问以下网址：https://www.debian.org/security/

    邮件列表：debian-security-announce@lists.debian.org

Tenable 已直接从 Debian 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Windows 主机缺少安全更新 5034122。因此，它受到多个漏洞影响

  - Microsoft ODBC Driver 远程代码执行漏洞 (CVE-2024-20654)

  - BitLocker 安全功能绕过漏洞 (CVE-2024-20666)

  - Windows Kerberos 安全功能绕过漏洞 (CVE-2024-20674)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Windows 主机缺少安全更新 5034130。因此，它受到多个漏洞影响

  - Microsoft ODBC Driver 远程代码执行漏洞 (CVE-2024-20654)

  - BitLocker 安全功能绕过漏洞 (CVE-2024-20666)

  - Windows Kerberos 安全功能绕过漏洞 (CVE-2024-20674)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Windows 主机缺少安全更新 5034123。因此，它受到多个漏洞影响

  - Microsoft ODBC Driver 远程代码执行漏洞 (CVE-2024-20654)

  - BitLocker 安全功能绕过漏洞 (CVE-2024-20666)

  - Windows Kerberos 安全功能绕过漏洞 (CVE-2024-20674)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
209784	EulerOS Virtualization 2.12.1 : libarchive (EulerOS-SA-2024-2753)	Nessus	Huawei Local Security Checks	2024/10/27	2024/10/27	high
248289	Linux Distros Unpatched Vulnerability : CVE-2024-20696	Nessus	Misc.	2025/8/11	2025/8/11	high
210823	Debian dla-3950 : libarchive-dev - security update	Nessus	Debian Local Security Checks	2024/11/12	2024/11/12	critical
187789	KB5034130: Windows 11 version 22H2 Security Update (January 2024)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/6/17	high
187797	KB5034123: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (January 2024)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/10/21	high
187795	KB5034122: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (January 2024)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/6/17	high
248289	Linux Distros 未修补的漏洞：CVE-2024-20696	Nessus	Misc.	2025/8/11	2025/8/11	high
210823	Debian dla-3950：libarchive-dev - 安全更新	Nessus	Debian Local Security Checks	2024/11/12	2024/11/12	critical
210720	Debian dsa-5806：libarchive-dev - 安全更新	Nessus	Debian Local Security Checks	2024/11/9	2024/11/9	high
187795	KB5034122：Windows 10 21H2 版/Windows 10 22H2 版安全更新（2024 年 1 月）	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/6/17	high
187789	KB5034130：Windows 11 22H2 版安全更新（2024 年 1 月）	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/6/17	high
187797	KB5034123：Windows 11 22H2 版安全更新（2024 年 1 月）	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/10/21	high

检测

插件搜索

high

high

critical

high

high

high

high

critical

high

high

high

high