The version of AOS installed on the remote host is prior to 5.11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.11.2 advisory.

  - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow     can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels,     assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass     invalid utf-8 strings to functions like pango_itemize. (CVE-2019-1010238)

  - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal     function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how     large temporary storage area to allocate from the heap. The length value is then subsequently used to     iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit     size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31     bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the     intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is     almost identical to CVE-2017-8816.) (CVE-2018-14618)

  - An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can     send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed     later on, leading to DoS (segmentation fault). (CVE-2018-14598)

  - An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable     to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other     impact. (CVE-2018-14599)

  - An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a     variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading     to DoS or remote code execution. (CVE-2018-14600)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2237 advisory.

    nspr     [4.21.0-1]
    - Rebase to NSPR 4.21

    nss     [3.44.0-4]
    - Fix certutil man page
    - Fix extracting a public key from a private key for dh, ec, and dsa

    [3.44.0-3]
    - Disable TLS 1.3 under FIPS mode
    - Disable RSASSA-PKCS1-v1_5 in TLS 1.3
    - Fix post-handshake auth transcript calculation if       SSL_ENABLE_SESSION_TICKETS is set

    [3.44.0-2]
    - Skip sysinit gtests properly
    - Fix shell syntax error in tests/ssl/ssl.sh
    - Regenerate manual pages

    [3.44.0-1]
    - Rebase to NSS 3.44
    - Restore fix-min-library-version-in-SSLVersionRange.patch to keep       SSL3 supported in the code level while it is disabled by policy
    - Skip TLS 1.3 tests under FIPS mode

    [3.43.0-9]
    - Ignore system policy when running %check

    [3.43.0-8]
    - Fix policy string

    [3.43.0-7]
    - Dont override date in man-pages
    - Revert the change to use XDG basedirs (mozilla#818686)
    - Enable SSL2 compatible ClientHello by default
    - Disable SSL3 and RC4 by default

    [3.43.0-6]
    - Make '-V ssl3:' option work with tools

    [3.43.0-5]
    - Fix regression in MD5 disablement

    [3.43.0-4]
    - add certutil documentation

    [3.43.0-3]
    - Restore complete removal of SSLv2
    - Disable SSLv3
    - Move signtool to unsupported directory

    [3.43.0-2]
    - Expand IPSEC usage to include ssl and email certs. Remove special       processing of the usage based on the critical flag

    [3.43.0-1]
    - Rebase to NSS 3.43

    [3.36.0-8.1]
    - move key on unwrap failure and retry.

    [3.36.0-8]
    - Update the cert verify code to allow a new ipsec usage and follow RFC 4945

    nss-softokn     [3.44.0-5.0.1]
    - Add fips140-2 DSA Known Answer Test fix [Orabug: 26679337]
    - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug: 26617814],       [Orabug: 26617879], [Orabug: 26617849]

    [3.44.0-5]
    - Add pub from priv mechanism

    [3.44.0-4]
    - Add ike mechanisms
    - FIPS update

    [3.44.0-3]
    - Remove stray 'exit' in %prep

    [3.44.0-2]
    - Fix nss-softokn-fs-probe.patch to detect threshold correctly

    [3.44.0-1]
    - Rebase to NSS 3.44

    [3.43.0-5]
    - Restore nss-softokn-fs-probe.patch

    [3.43.0-4]
    - Enable iquote.patch

    [3.43.0-2]
    - Rebuild

    nss-util     [3.44.0-3]
    - Add pub from priv mechanism
    - ike mechanisms should not overlap with JPAKE

    [3.44.0-2]
    - Add ike mechanisms

    [3.44.0-1]
    - Rebase to NSS 3.44

    [3.43.0-1]
    - Rebase to NSS 3.43

    [3.36.0-2]
    - Update the cert verify code to allow a new ipsec usage and follow RFC 4945

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Various vulnerabilities were fixed in nss, the Network Security Service libraries.

CVE-2018-12404

Cache side-channel variant of the Bleichenbacher attack.

CVE-2018-18508

NULL pointer dereference in several CMS functions resulting in a denial of service.

CVE-2019-11719

Out-of-bounds read when importing curve25519 private key.

CVE-2019-11729

Empty or malformed p256-ECDH public keys may trigger a segmentation fault.

CVE-2019-11745

Out-of-bounds write when encrypting with a block cipher.

CVE-2019-17006

Some cryptographic primitives did not check the length of the input text, potentially resulting in overflows.

CVE-2019-17007

Handling of Netscape Certificate Sequences may crash with a NULL dereference leading to a denial of service.

CVE-2020-12399

Force a fixed length for DSA exponentiation.

CVE-2020-6829 CVE-2020-12400

Side channel attack on ECDSA signature generation.

CVE-2020-12401

ECDSA timing attack mitigation bypass.

CVE-2020-12402

Side channel vulnerabilities during RSA key generation.

CVE-2020-12403

CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read.

For Debian 9 stretch, these problems have been fixed in version 2:3.26.2-1.1+deb9u2.

We recommend that you upgrade your nss packages.

For the detailed security status of nss please refer to its security tracker page at: https://security-tracker.debian.org/tracker/nss

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
164608	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.11.2)	Nessus	Misc.	2022/9/1	2025/7/22	critical
180759	Oracle Linux 7 : nss, / nss-softokn, / nss-util, / and / nspr (ELSA-2019-2237)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2025/2/19	medium
141062	Debian DLA-2388-1 : nss security update	Nessus	Debian Local Security Checks	2020/9/30	2024/2/16	critical

检测

插件搜索

critical

medium

critical