The version of aws-kinesis-agent installed on the remote host is prior to 2.0.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1733 advisory.

    A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-     default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input     data can craft malicious input data that contains a recursive lookup and can cause Denial of Service.
    (CVE-2021-45105)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1605-1 advisory.

  - Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled     recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data     to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0     and 2.12.3. (CVE-2021-45105)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0188 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2021-44832:
      Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are     vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI     LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by     limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.

      CVE-2021-45105:
      Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from     uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread     Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed     in Log4j 2.17.0, 2.12.3, and 2.3.1.

      CVE-2021-44228:
      Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI     features used in configuration, log messages, and parameters do not protect against attacker controlled     LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters     can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From     log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3,     and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to     log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016706 advisory.

    Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from     uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread     Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed     in Log4j 2.17.0, 2.12.3, and 2.3.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1463 advisory.

    Red Hat Single Sign-On 7.5 is a standalone server, based on the Keycloak project, that provides     authentication and standards-based single sign-on capabilities for web and mobile applications.

    This release of Red Hat Single Sign-On 7.5.2 on RHEL 8 serves as a replacement for Red Hat Single Sign-On     7.5.1, and includes bug fixes and enhancements, which are documented in the Release Notes document linked     to in the References.

    Security Fix(es):

    * log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and     context lookup pattern (CVE-2021-45105)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:4118-1 advisory.

  - Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3) did not protect from uncontrolled     recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data     to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0     and 2.12.3. (CVE-2021-45105)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016721 advisory.

    Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from     uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread     Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed     in Log4j 2.17.0, 2.12.3, and 2.3.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016719 advisory.

    Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from     uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread     Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed     in Log4j 2.17.0, 2.12.3, and 2.3.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016726 advisory.

    Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from     uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread     Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed     in Log4j 2.17.0, 2.12.3, and 2.3.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016702 advisory.

    Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from     uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread     Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed     in Log4j 2.17.0, 2.12.3, and 2.3.1.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2021-008 advisory.

    A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-     default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map (MDC) input     data can craft malicious input data that contains a recursive lookup and can cause Denial of Service.
    (CVE-2021-45105)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
156263	Amazon Linux 2 : aws-kinesis-agent (ALAS-2021-1733)	Nessus	Amazon Linux Local Security Checks	2021/12/23	2026/1/21	medium
156270	openSUSE 15 Security Update : log4j (openSUSE-SU-2021:1605-1)	Nessus	SuSE Local Security Checks	2021/12/25	2026/1/21	medium
276397	TencentOS Server 3: log4j (TSSA-2022:0188)	Nessus	Tencent Local Security Checks	2025/11/20	2026/3/10	critical
316145	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-core (UTSA-2026-016706)	Nessus	Unity Linux Local Security Checks	2026/5/22	2026/8/28	medium
160055	RHEL 8 : Red Hat Single Sign-On 7.5.2 security update on RHEL 8 (Low) (RHSA-2022:1463)	Nessus	Red Hat Local Security Checks	2022/4/21	2026/1/21	medium
156219	openSUSE 15 Security Update : log4j (openSUSE-SU-2021:4118-1)	Nessus	SuSE Local Security Checks	2021/12/21	2026/1/21	medium
316221	Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: datanucleus-rdbms (UTSA-2026-016721)	Nessus	Unity Linux Local Security Checks	2026/5/22	2026/8/28	medium
316247	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: infinispan (UTSA-2026-016719)	Nessus	Unity Linux Local Security Checks	2026/5/22	2026/8/28	medium
316252	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: HikariCP (UTSA-2026-016726)	Nessus	Unity Linux Local Security Checks	2026/5/22	2026/8/28	medium
316294	Unity Linux 20.1070e Security Update: springframework (UTSA-2026-016702)	Nessus	Unity Linux Local Security Checks	2026/5/22	2026/5/25	medium
212459	Amazon Linux 2022 : log4j, log4j-jcl, log4j-slf4j (ALAS2022-2021-008)	Nessus	Amazon Linux Local Security Checks	2024/12/11	2024/12/12	medium

检测

插件搜索

medium

medium

critical

medium

medium

medium

medium

medium

medium

medium

medium