The remote host is running a version of Mac OS X that is 10.9.5 or 10.10.5 and is missing Security Update 2016-003. It is, therefore, affected by multiple vulnerabilities in the following components :

  - AMD
  - Captive Network Assistant
  - libxml2
  - libxslt
  - OpenGL

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Daniel Veillard reports :

More format string warnings with possible format string vulnerability (David Kilzer)

Avoid building recursive entities (Daniel Veillard)

Heap-based buffer overread in htmlCurrentChar (Pranjal Jumde)

Heap-based buffer-underreads due to xmlParseName (David Kilzer)

Heap use-after-free in xmlSAX2AttributeNs (Pranjal Jumde)

Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (Pranjal Jumde)

Fix some format string warnings with possible format string vulnerability (David Kilzer)

Detect change of encoding when parsing HTML names (Hugh Davenport)

Fix inappropriate fetch of entities content (Daniel Veillard)

Bug 759398: Heap use-after-free in xmlDictComputeFastKey (Pranjal Jumde)

Bug 758605: Heap-based buffer overread in xmlDictAddString (Pranjal Jumde)

Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal (David Kilzer)

Bug 757711: heap-buffer-overflow in xmlFAParsePosCharGroup (Pranjal Jumde)

Add missing increments of recursion depth counter to XML parser.
(Peter Simons)

Fix NULL pointer deref in XPointer range-to

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Update doc/redhat.gif in tarball

  - Add libxml2-oracle-enterprise.patch and update logos in     tarball

  - Heap-based buffer overread in xmlNextChar     (CVE-2016-1762)

  - Bug 763071: Heap-buffer-overflow in xmlStrncat     (CVE-2016-1834)

  - Bug 757711: Heap-buffer-overflow in     xmlFAParsePosCharGroup (CVE-2016-1840)

  - Bug 758588: Heap-based buffer overread in     xmlParserPrintFileContextInternal (CVE-2016-1838)

  - Bug 758605: Heap-based buffer overread in     xmlDictAddString (CVE-2016-1839)

  - Bug 759398: Heap use-after-free in xmlDictComputeFastKey     (CVE-2016-1836)

  - Fix inappropriate fetch of entities content     (CVE-2016-4449)

  - Heap use-after-free in htmlParsePubidLiteral and     htmlParseSystemiteral (CVE-2016-1837)

  - Heap use-after-free in xmlSAX2AttributeNs     (CVE-2016-1835)

  - Heap-based buffer-underreads due to xmlParseName     (CVE-2016-4447)

  - Heap-based buffer overread in htmlCurrentChar     (CVE-2016-1833)

  - Add missing increments of recursion depth counter to XML     parser. (CVE-2016-3705)

  - Avoid building recursive entities (CVE-2016-3627)

  - Fix some format string warnings with possible format     string vulnerability (CVE-2016-4448)

  - More format string warnings with possible format string     vulnerability (CVE-2016-4448)

  - Fix large parse of file from memory (rhbz#862969)

A heap-based buffer overflow flaw was found in the way libxml2 parsed certain crafted XML input. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or execute arbitrary code with the permissions of the user running the application.
(CVE-2016-1834 , CVE-2016-1840)

Multiple denial of service flaws were found in libxml2. A remote attacker could provide a specially crafted XML file that, when processed by an application using libxml2, could cause that application to crash. (CVE-2016-1762 , CVE-2016-1833 , CVE-2016-1835 , CVE-2016-1836 , CVE-2016-1837 , CVE-2016-1838 , CVE-2016-1839 , CVE-2016-3627 , CVE-2016-3705 , CVE-2016-4447 , CVE-2016-4448 , CVE-2016-4449)

The version of Apple iTunes installed on the remote Windows host is prior to 12.4.2. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist in the libxslt     component due to improper validation of user-supplied     input. An unauthenticated, remote attacker can exploit     this to cause a denial of service condition or the     execution of arbitrary code. (CVE-2016-1684,     CVE-2016-4607, CVE-2016-4608, CVE-2016-4609,     CVE-2016-4610, CVE-2016-4612)

  - Multiple memory corruption issues exist in the libxml2     component that allow a remote attacker to cause a denial     of service condition or the execution of arbitrary code.
    (CVE-2016-1836, CVE-2016-4447, CVE-2016-4448,     CVE-2016-4483, CVE-2016-4614, CVE-2016-4615,     CVE-2016-4616, CVE-2016-4619)

  - An XXE (Xml eXternal Entity) injection vulnerability     exists in the libxml2 component due to an incorrectly     configured XML parser accepting XML external entities     from an untrusted source. A remote attacker can exploit     this, via a specially crafted XML file, to disclose     arbitrary files and user information. (CVE-2016-4449)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.
(CVE-2016-1836)

The mobile device is running a version of iOS prior to 9.3.2. It is, therefore, affected by multiple vulnerabilities in the following components :

  - Accessibility
  - CFNetwork Proxies
  - CommonCrypto
  - CoreCapture
  - Disk Images
  - ImageIO
  - IOAcceleratorFamily
  - IOHIDFamily
  - Kernel
  - libc
  - libxml2
  - libxslt
  - MapKit
  - OpenGL
  - Safari
  - Siri
  - WebKit
  - WebKit Canvas

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-545:01 advisory.

    This library allows to manipulate XML files. It includes support     to read, modify and write XML and HTML files. There is DTDs support     this includes parsing and validation even with complex DtDs, either     at parse time or later once the document has been modified. The output     can be a simple SAX stream or and in-memory DOM like representations.
    In this case one can use the built-in XPath and XPointer implementation     to select sub nodes or ranges. A flexible Input/Output mechanism is     available, with existing HTTP and FTP modules and combined to an     URI library.
    Security issues fixed with this release:
    CVE-2016-1762     libxml2 in Apple iOS before 9.3, OS X before 10.11.4, Safari before     9.1, tvOS before 9.2, and watchOS before 2.2 allows remote attackers     to execute arbitrary code or cause a denial of service (memory     corruption) via a crafted XML document.
    CVE-2016-1833     libxml2, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS     before 9.2.1, and watchOS before 2.2.1, allows remote attackers to     execute arbitrary code or cause a denial of service (memory     corruption) via a crafted XML document, a different vulnerability than     CVE-2016-1834, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838,     CVE-2016-1839, and CVE-2016-1840.
    CVE-2016-1834     libxml2, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS     before 9.2.1, and watchOS before 2.2.1, allows remote attackers to     execute arbitrary code or cause a denial of service (memory     corruption) via a crafted XML document, a different vulnerability than     CVE-2016-1833, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838,     CVE-2016-1839, and CVE-2016-1840.
    CVE-2016-1835     libxml2, as used in Apple iOS before 9.3.2 and OS X before 10.11.5,     allows remote attackers to execute arbitrary code or cause a denial of     service (memory corruption) via a crafted XML document.
    CVE-2016-1836     libxml2, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS     before 9.2.1, and watchOS before 2.2.1, allows remote attackers to     execute arbitrary code or cause a denial of service (memory     corruption) via a crafted XML document, a different vulnerability than     CVE-2016-1833, CVE-2016-1834, CVE-2016-1837, CVE-2016-1838,     CVE-2016-1839, and CVE-2016-1840.
    CVE-2016-1837     libxml2, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS     before 9.2.1, and watchOS before 2.2.1, allows remote attackers to     execute arbitrary code or cause a denial of service (memory     corruption) via a crafted XML document, a different vulnerability than     CVE-2016-1833, CVE-2016-1834, CVE-2016-1836, CVE-2016-1838,     CVE-2016-1839, and CVE-2016-1840.
    CVE-2016-1838     libxml2, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS     before 9.2.1, and watchOS before 2.2.1, allows remote attackers to     execute arbitrary code or cause a denial of service (memory     corruption) via a crafted XML document, a different vulnerability than     CVE-2016-1833, CVE-2016-1834, CVE-2016-1836, CVE-2016-1837,     CVE-2016-1839, and CVE-2016-1840.
    CVE-2016-1839     libxml2, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS     before 9.2.1, and watchOS before 2.2.1, allows remote attackers to     execute arbitrary code or cause a denial of service (memory     corruption) via a crafted XML document, a different vulnerability than     CVE-2016-1833, CVE-2016-1834, CVE-2016-1836, CVE-2016-1837,     CVE-2016-1838, and CVE-2016-1840.
    CVE-2016-1840     libxml2, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS     before 9.2.1, and watchOS before 2.2.1, allows remote attackers to     execute arbitrary code or cause a denial of service (memory     corruption) via a crafted XML document, a different vulnerability than     CVE-2016-1833, CVE-2016-1834, CVE-2016-1836, CVE-2016-1837,     CVE-2016-1838, and CVE-2016-1839.
    CVE-2016-3627     The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and     earlier, when used in recovery mode, allows context-dependent     attackers to cause a denial of service (infinite recursion, stack     consumption, and application crash) via a crafted XML document.
    CVE-2016-3705     The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions     in parser.c in libxml2 2.9.3 do not properly keep track of the     recursion depth, which allows context-dependent attackers to cause a     denial of service (stack consumption and application crash) via a     crafted XML document containing a large number of nested entity     references.
    CVE-2016-4447     The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4     allows context-dependent attackers to cause a denial of service     (heap-based buffer underread and application crash) via a crafted     file, involving xmlParseName.
    CVE-2016-4448     Format string vulnerability in libxml2 before 2.9.4 allows attackers     to have unspecified impact via format string specifiers in unknown     vectors.
    CVE-2016-4449     XML external entity (XXE) vulnerability in the     xmlStringLenDecodeEntities function in parser.c in libxml2 before     2.9.4, when not in validating mode, allows context-dependent attackers     to read arbitrary files or cause a denial of service (resource     consumption) via unspecified vectors.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities were discovered in libxml2, a library providing support to read, modify and write XML and HTML files. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause a denial-of-service against the application, or potentially the execution of arbitrary code with the privileges of the user running the application.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2994-1 advisory.

    It was discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated     system were tricked into opening a specially crafted document, an attacker could possibly cause libxml2 to     crash, resulting in a denial of service. (CVE-2015-8806, CVE-2016-2073, CVE-2016-3627, CVE-2016-3705,     CVE-2016-4447)

    It was discovered that libxml2 incorrectly handled certain malformed documents. If a user or automated     system were tricked into opening a specially crafted document, an attacker could cause libxml2 to crash,     resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-1762, CVE-2016-1834)

    Mateusz Jurczyk discovered that libxml2 incorrectly handled certain malformed documents. If a user or     automated system were tricked into opening a specially crafted document, an attacker could cause libxml2     to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-1833,     CVE-2016-1838, CVE-2016-1839)

    Wei Lei and Liu Yang discovered that libxml2 incorrectly handled certain malformed documents. If a user or     automated system were tricked into opening a specially crafted document, an attacker could cause libxml2     to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-1835,     CVE-2016-1837)

    Wei Lei and Liu Yang discovered that libxml2 incorrectly handled certain malformed documents. If a user or     automated system were tricked into opening a specially crafted document, an attacker could cause libxml2     to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to     Ubuntu 14.04 LTS, Ubuntu 15.10 and Ubuntu 16.04 LTS. (CVE-2016-1836)

    Kostya Serebryany discovered that libxml2 incorrectly handled certain malformed documents. If a user or     automated system were tricked into opening a specially crafted document, an attacker could cause libxml2     to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-1840)

    It was discovered that libxml2 would load certain XML external entities. If a user or automated system     were tricked into opening a specially crafted document, an attacker could possibly obtain access to     arbitrary files or cause resource consumption. (CVE-2016-4449)

    Gustavo Grieco discovered that libxml2 incorrectly handled certain malformed documents. If a user or     automated system were tricked into opening a specially crafted document, an attacker could possibly cause     libxml2 to crash, resulting in a denial of service. (CVE-2016-4483)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update brings libxml2 to version 2.9.4.

These security issues were fixed :

  - CVE-2016-3627: The xmlStringGetNodeList function in     tree.c, when used in recovery mode, allowed     context-dependent attackers to cause a denial of service     (infinite recursion, stack consumption, and application     crash) via a crafted XML document (bsc#972335).

  - CVE-2016-1833: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document, a     different vulnerability than CVE-2016-1834,     CVE-2016-1836, CVE-2016-1837, CVE-2016-1838,     CVE-2016-1839, and CVE-2016-1840 (bsc#981108).

  - CVE-2016-1835: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document     (bsc#981109).

  - CVE-2016-1837: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document, a     different vulnerability than CVE-2016-1833,     CVE-2016-1834, CVE-2016-1836, CVE-2016-1838,     CVE-2016-1839, and CVE-2016-1840 (bsc#981111).

  - CVE-2016-1836: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document, a     different vulnerability than CVE-2016-1833,     CVE-2016-1834, CVE-2016-1837, CVE-2016-1838,     CVE-2016-1839, and CVE-2016-1840 (bsc#981110).

  - CVE-2016-1839: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document, a     different vulnerability than CVE-2016-1833,     CVE-2016-1834, CVE-2016-1836, CVE-2016-1837,     CVE-2016-1838, and CVE-2016-1840 (bsc#981114).

  - CVE-2016-1838: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document, a     different vulnerability than CVE-2016-1833,     CVE-2016-1834, CVE-2016-1836, CVE-2016-1837,     CVE-2016-1839, and CVE-2016-1840 (bsc#981112).

  - CVE-2016-1840: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document, a     different vulnerability than CVE-2016-1833,     CVE-2016-1834, CVE-2016-1836, CVE-2016-1837,     CVE-2016-1838, and CVE-2016-1839 (bsc#981115).

  - CVE-2016-4483: out-of-bounds read parsing an XML using     recover mode (bnc#978395).

  - CVE-2016-1834: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document, a     different vulnerability than CVE-2016-1833,     CVE-2016-1836, CVE-2016-1837, CVE-2016-1838,     CVE-2016-1839, and CVE-2016-1840 (bsc#981041).

  - CVE-2016-3705: The (1) xmlParserEntityCheck and (2)     xmlParseAttValueComplex functions in parser.c in libxml2     did not properly keep track of the recursion depth,     which allowed context-dependent attackers to cause a     denial of service (stack consumption and application     crash) via a crafted XML document containing a large     number of nested entity references (bsc#975947).

  - CVE-2016-1762: libxml2 allowed remote attackers to     execute arbitrary code or cause a denial of service     (memory corruption) via a crafted XML document     (bsc#981040).

This non-security issue was fixed :

  - bnc#983288: Fix attribute decoding during XML schema     validation

An update for libxml2 is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

[Updated 18 July 2016] This advisory has been updated to push packages into the Red Hat Enterprise Linux 6 Desktop channels. The packages included in this revised update have not been changed in any way from the packages included in the original advisory.

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es) :

A heap-based buffer overflow flaw was found in the way libxml2 parsed certain crafted XML input. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or execute arbitrary code with the permissions of the user running the application.
(CVE-2016-1834, CVE-2016-1840)

Multiple denial of service flaws were found in libxml2. A remote attacker could provide a specially crafted XML file that, when processed by an application using libxml2, could cause that application to crash. (CVE-2016-1762, CVE-2016-1833, CVE-2016-1835, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, CVE-2016-1839, CVE-2016-3627, CVE-2016-3705, CVE-2016-4447, CVE-2016-4448, CVE-2016-4449)

Security Fix(es) :

A heap-based buffer overflow flaw was found in the way libxml2 parsed certain crafted XML input. A remote attacker could provide a specially crafted XML file that, when opened in an application linked against libxml2, would cause the application to crash or execute arbitrary code with the permissions of the user running the application.
(CVE-2016-1834, CVE-2016-1840)

Multiple denial of service flaws were found in libxml2. A remote attacker could provide a specially crafted XML file that, when processed by an application using libxml2, could cause that application to crash. (CVE-2016-1762, CVE-2016-1833, CVE-2016-1835, CVE-2016-1836, CVE-2016-1837, CVE-2016-1838, CVE-2016-1839, CVE-2016-3627, CVE-2016-3705, CVE-2016-4447, CVE-2016-4448, CVE-2016-4449)

The version of Apple iTunes running on the remote Windows host is prior to 12.4.2. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist in the libxslt     component due to improper validation of user-supplied     input. An unauthenticated, remote attacker can exploit     this to cause a denial of service condition or the     execution of arbitrary code. (CVE-2016-1684,     CVE-2016-4607, CVE-2016-4608, CVE-2016-4609,     CVE-2016-4610, CVE-2016-4612)

  - Multiple memory corruption issues exist in the libxml2     component that allow a remote attacker to cause a denial     of service condition or the execution of arbitrary code.
    (CVE-2016-1836, CVE-2016-4447, CVE-2016-4448,     CVE-2016-4483, CVE-2016-4614, CVE-2016-4615,     CVE-2016-4616, CVE-2016-4619)

  - An XXE (Xml eXternal Entity) injection vulnerability     exists in the libxml2 component due to an incorrectly     configured XML parser accepting XML external entities     from an untrusted source. A remote attacker can exploit     this, via a specially crafted XML file, to disclose     arbitrary files and user information. (CVE-2016-4449)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201701-37 (libxml2: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libxml2. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user or automated system to process a       specially crafted XML document, possibly resulting in execution of       arbitrary code with the privileges of the process or a Denial of Service       condition.
  Workaround :

    There is no known workaround at this time.

Update to latest upstream release, includes several security related fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
91229	Mac OS X 10.9.5 / 10.10.5 Multiple Vulnerabilities (Security Update 2016-003)	Nessus	MacOS X Local Security Checks	2016/5/19	2024/5/28	high
93145	FreeBSD : libxml2 -- multiple vulnerabilities (e195679d-045b-4953-bb33-be0073ba2ac6)	Nessus	FreeBSD Local Security Checks	2016/8/29	2026/1/28	high
91800	OracleVM 3.3 / 3.4 : libxml2 (OVMSA-2016-0087)	Nessus	OracleVM Local Security Checks	2016/6/24	2021/1/4	critical
92221	Amazon Linux AMI : libxml2 (ALAS-2016-719)	Nessus	Amazon Linux Local Security Checks	2016/7/15	2026/2/2	critical
92410	Apple iTunes < 12.4.2 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	2016/7/19	2026/1/30	critical
95943	F5 Networks BIG-IP : libxml2 vulnerability (K48220300)	Nessus	F5 Networks Local Security Checks	2016/12/20	2026/1/8	medium
91225	Apple iOS < 9.3.2 Multiple Vulnerabilities	Nessus	Mobile Devices	2016/5/18	2026/8/10	high
289699	MiracleLinux 7 : libxml2-2.9.1-6.0.1.el7.AXS7.3 (AXSA:2016-545:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
91447	Debian DSA-3593-1 : libxml2 - security update	Nessus	Debian Local Security Checks	2016/6/3	2021/1/11	high
91499	Ubuntu 14.04 LTS / 16.04 LTS : libxml2 vulnerabilities (USN-2994-1)	Nessus	Ubuntu Local Security Checks	2016/6/7	2024/8/27	high
91640	openSUSE Security Update : libxml2 (openSUSE-2016-734)	Nessus	SuSE Local Security Checks	2016/6/17	2021/1/19	high
91802	RHEL 6 / 7 : libxml2 (RHSA-2016:1292)	Nessus	Red Hat Local Security Checks	2016/6/24	2020/4/8	critical
91808	Scientific Linux Security Update : libxml2 on SL6.x, SL7.x i386/x86_64 (20160623)	Nessus	Scientific Linux Local Security Checks	2016/6/24	2021/1/14	critical
92411	Apple iTunes < 12.4.2 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	2016/7/19	2026/1/30	critical
96541	GLSA-201701-37 : libxml2: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/17	2026/1/5	critical
99491	Fedora 25 : libxml2 (2017-a3a47973eb)	Nessus	Fedora Local Security Checks	2017/4/20	2025/12/25	critical
99492	Fedora 24 : libxml2 (2017-be8574d593)	Nessus	Fedora Local Security Checks	2017/4/20	2025/12/25	critical

检测

插件搜索

high

high

critical

critical

critical

medium

high

critical

high

high

high

critical

critical

critical

critical

critical

critical