The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:18868 advisory.

    * qs: qs: Denial of Service via improper input validation in array parsing (CVE-2025-15284)

    * node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in     archives (CVE-2026-23745)

    * node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition     (CVE-2026-23950)

    * lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)

    * node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check     (CVE-2026-24842)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18868 advisory.

    [2.26-7]
    - Fix pccs npm security flaws

    [2.26-6]
    - Port to pycryptography and pyasn1 and make keyring optional

    [2.26-5]
    - Sync specfile changes from Fedora

    [2.26-4]
    - Drop sgx-mpa dep from sgx-pccs

    [2.26-3]
    - Add scriptlets for PCCS

    [2.26-2]
    - Enable pccsadmin everywhere

    [2.26-1]
    - Update to SGX 2.26 / DCAP 1.23, adding PCCS service

    [2.25-7]
    - Trigger udev to set perms on /dev/sgx_provision

    [2.25-6]
    - Temporarily disable automatic tier1 gating

    [2.25-5]
    - Adapt qgs.service for SELinux policy and sock perms

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_18868 advisory.

    * qs: qs: Denial of Service via improper input validation in array parsing (CVE-2025-15284)

    * node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in     archives (CVE-2026-23745)

    * node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition     (CVE-2026-23950)

    * lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)

    * node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check     (CVE-2026-24842)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_18480 advisory.

    * qs: qs: Denial of Service via improper input validation in array parsing (CVE-2025-15284)

    * node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in     archives (CVE-2026-23745)

    * node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition     (CVE-2026-23950)

    * lodash: prototype pollution in _.unset and _.omit functions (CVE-2025-13465)

    * node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check     (CVE-2026-24842)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: <     6.14.1. Summary The arrayLimit option in qs did not enforce limits for bracket notation (a[]=1&a[]=2),     only for indexed notation (a[0]=1). This is a consistency bug; arrayLimit should apply uniformly across     all array notations. Note: The default parameterLimit of 1000 effectively mitigates the DoS scenario     originally described. With default options, bracket notation cannot produce arrays larger than     parameterLimit regardless of arrayLimit, because each a[]=valueconsumes one parameter slot. The severity     has been reduced accordingly. Details The arrayLimit option only checked limits for indexed notation     (a[0]=1&a[1]=2) but did not enforce it for bracket notation (a[]=1&a[]=2). Vulnerable code     (lib/parse.js:159-162): if (root === '[]' && options.parseArrays) { obj = utils.combine([], leaf); // No     arrayLimit check } Working code (lib/parse.js:175): else if (index <= options.arrayLimit) { // Limit     checked here obj = []; obj[index] = leaf; } The bracket notation handler at line 159 uses     utils.combine([], leaf) without validating against options.arrayLimit, while indexed notation at line 175     checks index <= options.arrayLimit before creating arrays. PoC const qs = require('qs'); const result =     qs.parse('a[]=1&a[]=2&a[]=3&a[]=4&a[]=5&a[]=6', { arrayLimit: 5 }); console.log(result.a.length); //     Output: 6 (should be max 5) Note on parameterLimit interaction: The original advisory's DoS     demonstration claimed a length of 10,000, but parameterLimit (default: 1000) caps parsing to 1,000     parameters. With default options, the actual output is 1,000, not 10,000. Impact Consistency bug in     arrayLimit enforcement. With default parameterLimit, the practical DoS risk is negligible since     parameterLimit already caps the total number of parsed parameters (and thus array elements from bracket     notation). The risk increases only when parameterLimit is explicitly set to a very high value.
    (CVE-2025-15284)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
317439	RockyLinux 9 : linux-sgx (RLSA-2026:18868)	Nessus	Rocky Linux Local Security Checks	2026/5/28	2026/5/28	high
322200	Oracle Linux 9 : linux-sgx (ELSA-2026-18868)	Nessus	Oracle Linux Local Security Checks	2026/6/23	2026/6/23	high
353937	Rocky Linux 9 [CIQ] Security Update: linux-sgx-debuginfo / linux-sgx-debugsource / sgx-common / sgx-libs / etc Multiple Vulnerabilities (crlsa-2026_18868)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
355040	Rocky Linux 10.2 [CIQ] Security Update: linux-sgx-debuginfo / linux-sgx-debugsource / sgx-common / sgx-libs / etc Multiple Vulnerabilities (crlsa-2026_18480)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
280190	Linux Distros Unpatched Vulnerability : CVE-2025-15284	Nessus	Misc.	2025/12/30	2026/9/2	medium

检测

插件搜索

high

high

high

high

medium