According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL     certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to     2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from     `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store.
    `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified 'long-     running and unresolved compliance issues.'(CVE-2024-39689)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization ca-certificates security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-599bb2cb73 advisory.

    Update to 2024.7.4.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL     certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to     2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from     `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store.
    `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified long-     running and unresolved compliance issues. (CVE-2024-39689)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the python package has been released.

The version of AOS installed on the remote host is prior to 6.8.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.8.1.6 advisory.

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in     NetworkManager, triggered by sending a malformed IPv6 router advertisement packet. This issue occurred as     libndp was not correctly validating the route length information. (CVE-2024-5564)

  - A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure     temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions     of the running user provides a window of opportunity for attackers to escalate privileges through a     malicious symlink. (CVE-2024-5742)

  - A vulnerability was found in Performance Co-Pilot (PCP). This flaw allows an attacker to send specially     crafted data to the system, which could cause the program to misbehave or crash. (CVE-2024-45769)

  - A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker     has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to     log messages in the system. Under certain conditions, it runs with high-level privileges. (CVE-2024-45770)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has python-certifi packages installed that are affected by multiple vulnerabilities:

  - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL     certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes     e-Tugra root certificates. e-Tugra's root certificates were subject to an investigation prompted by     reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from e-Tugra     from the root store. (CVE-2023-37920)

  - Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL     certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to     2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from     `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store.
    `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified long-     running and unresolved compliance issues. (CVE-2024-39689)

  - In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR     which leads to CQE with error This patch addresses a race condition for an ODP MR that can result in a CQE     with an error on the UMR QP. During the __mlx5_ib_dereg_mr() flow, the following sequence of calls occurs:
    mlx5_revoke_mr() mlx5r_umr_revoke_mr() mlx5r_umr_post_send_wait() At this point, the lkey is freed from     the hardware's perspective. However, concurrently, mlx5_ib_invalidate_range() might be triggered by     another task attempting to invalidate a range for the same freed lkey. This task will: - Acquire the     umem_odp->umem_mutex lock. - Call mlx5r_umr_update_xlt() on the UMR QP. - Since the lkey has already been     freed, this can lead to a CQE error, causing the UMR QP to enter an error state [1]. To resolve this race     condition, the umem_odp->umem_mutex lock is now also acquired as part of the mlx5_revoke_mr() scope. Upon     successful revoke, we set umem_odp->private which points to that MR to NULL, preventing any further     invalidation attempts on its lkey. [1] From dmesg: infiniband rocep8s0f0: dump_cqe:277:(pid 0): WC error:
    6, Message: memory bind operation error cqe_dump: 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00     00 cqe_dump: 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cqe_dump: 00000020: 00 00 00 00 00     00 00 00 00 00 00 00 00 00 00 00 cqe_dump: 00000030: 00 00 00 00 08 00 78 06 25 00 11 b9 00 0e dd d2     WARNING: CPU: 15 PID: 1506 at drivers/infiniband/hw/mlx5/umr.c:394 mlx5r_umr_post_send_wait+0x15a/0x2b0     [mlx5_ib] Modules linked in: ip6table_mangle ip6table_natip6table_filter ip6_tables iptable_mangle     xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter     rpcsec_gss_krb5 auth_rpcgss oid_registry overlay rpcrdma rdma_ucm ib_iser libiscsi scsi_transport_iscsi     rdma_cm iw_cm ib_umad ib_ipoib ib_cm mlx5_ib ib_uverbs ib_core fuse mlx5_core CPU: 15 UID: 0 PID: 1506     Comm: ibv_rc_pingpong Not tainted 6.12.0-rc7+ #1626 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009),     BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP:
    0010:mlx5r_umr_post_send_wait+0x15a/0x2b0 [mlx5_ib] [..] Call Trace: <TASK>     mlx5r_umr_update_xlt+0x23c/0x3e0 [mlx5_ib] mlx5_ib_invalidate_range+0x2e1/0x330 [mlx5_ib]
    __mmu_notifier_invalidate_range_start+0x1e1/0x240 zap_page_range_single+0xf1/0x1a0     madvise_vma_behavior+0x677/0x6e0 do_madvise+0x1a2/0x4b0 __x64_sys_madvise+0x25/0x30     do_syscall_64+0x6b/0x140 entry_SYSCALL_64_after_hwframe+0x76/0x7e (CVE-2025-21732)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL     certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to     2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi 2024.7.04 removes root certificates from     `GLOBALTRUST` from the root store. These are in the process of being removed from Mozilla's trust store.
    `GLOBALTRUST`'s root certificates are being removed pursuant to an investigation which identified 'long-     running and unresolved compliance issues.'(CVE-2024-39689)

Tenable has extracted the preceding description block directly from the EulerOS ca-certificates security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python3 package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
348499	EulerOS Virtualization 2.10.0 : ca-certificates (EulerOS-SA-2026-3862)	Nessus	Huawei Local Security Checks	2026/9/21	2026/9/21	high
348070	EulerOS Virtualization 2.11.0 : ca-certificates (EulerOS-SA-2026-3493)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high
202455	Fedora 40 : mingw-python-certifi (2024-599bb2cb73)	Nessus	Fedora Local Security Checks	2024/7/16	2025/2/13	high
228346	Linux Distros Unpatched Vulnerability : CVE-2024-39689	Nessus	Misc.	2025/3/5	2026/9/2	high
216463	Photon OS 3.0: Python PHSA-2024-3.0-0797	Nessus	PhotonOS Local Security Checks	2025/2/19	2025/2/19	high
213539	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.6)	Nessus	Misc.	2025/1/7	2025/7/22	high
242714	NewStart CGSL MAIN 7.02 : python-certifi Multiple Vulnerabilities (NS-SA-2025-0144)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	critical
332901	EulerOS 2.0 SP13 : ca-certificates (EulerOS-SA-2026-2960)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	high
333824	Photon OS 5.0: Python3 PHSA-2024-5.0-92-0356	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/10	high
332641	Photon OS 5.0: Python3 PHSA-2024-5.0-91-0356	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/8/5	high
347254	EulerOS 2.0 SP10 : ca-certificates (EulerOS-SA-2026-3731)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high
347296	EulerOS Virtualization 2.12.0 : ca-certificates (EulerOS-SA-2026-3632)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high
343722	EulerOS 2.0 SP12 : ca-certificates (EulerOS-SA-2026-3326)	Nessus	Huawei Local Security Checks	2026/9/8	2026/9/8	high
348488	EulerOS Virtualization 2.10.1 : ca-certificates (EulerOS-SA-2026-3828)	Nessus	Huawei Local Security Checks	2026/9/21	2026/9/21	high
343728	EulerOS 2.0 SP12 : ca-certificates (EulerOS-SA-2026-3251)	Nessus	Huawei Local Security Checks	2026/9/8	2026/9/8	high
339232	EulerOS Virtualization 2.13.0 : ca-certificates (EulerOS-SA-2026-3208)	Nessus	Huawei Local Security Checks	2026/8/25	2026/8/25	high
213604	Photon OS 5.0: Python3 PHSA-2024-5.0-0356	Nessus	PhotonOS Local Security Checks	2025/1/9	2026/10/13	high

检测

插件搜索

high

high

high

high

high

high

critical

high

high

high

high

high

high

high

high

high

high