The remote host is affected by the vulnerability described in GLSA-202405-04 (systemd: Multiple Vulnerabilities)

  - A vulnerability was found in systemd. This security flaw can cause a local information leak due to     systemd-coredump not respecting the fs.suid_dumpable kernel setting. (CVE-2022-4415)

  - systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that     has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology     is to crash a binary calling the same function recursively, and put it in a deeply nested directory to     make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16     is set for the systemd/units/systemd-coredump.socket file. (CVE-2022-45873)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02019-1 advisory.

    - CVE-2025-4598: Race condition that allows a local attacker to crash a SUID program and gain read access     to the resulting core dump (bsc#1243935).
    - CVE-2023-26604: Privilege escalation via the less pager (bsc#1208958).
    - CVE-2022-4415: systemd-coredump was not respecting fs.suid_dumpable kernel setting (bsc#1205000).

    Other bugfixes:

    - clarify passno and noauto combination in /etc/fstab (bsc#1211725)
    - handle -EINTR return from bus_poll() (bsc#1215241)
    - /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in systemd. This security flaw can cause a local information leak due to     systemd-coredump not respecting the fs.suid_dumpable kernel setting. (CVE-2022-4415)

  - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations,     e.g., plausible sudoers files in which the 'systemctl status' command may be executed. Specifically,     systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This     presents a substantial security risk when running systemctl from Sudo, because less executes as root when     the terminal size is too small to show the complete systemctl output. (CVE-2023-26604)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.207 advisory.

  - In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in     xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
    (CVE-2021-45960)

  - The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path,     leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in     /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an     incomplete fix for CVE-2016-10009. (CVE-2023-38408)

  - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the     attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content     to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing     filenames with two or more newlines where selected content and the target file names are embedded in     crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write     arbitrary files on the system. (CVE-2022-1271)

  - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5     allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR     and LF control characters in the first argument of HTTPConnection.request. (CVE-2020-26116)

  - urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as     demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this     is similar to CVE-2020-26116. (CVE-2020-26137)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0837 advisory.

  - A vulnerability was found in systemd. This security flaw can cause a local information leak due to     systemd-coredump not respecting the fs.suid_dumpable kernel setting. (CVE-2022-4415)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in systemd. This security flaw can cause a local information leak due to     systemd-coredump not respecting the fs.suid_dumpable kernel setting. (CVE-2022-4415)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5147:05 advisory.

    * systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting     (CVE-2022-4415)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-025 advisory.

    A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service     at boot time when too many nested directories are created in /tmp. (CVE-2021-3997)

    A vulnerability was found in systemd. This security flaw can cause a local information leak due to     systemd-coredump not respecting the fs.suid_dumpable kernel setting. (CVE-2022-4415)

    systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that     has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology     is to crash a binary calling the same function recursively, and put it in a deeply nested directory to     make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16     is set for the systemd/units/systemd-coredump.socket file. (CVE-2022-45873)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0954 advisory.

  - A vulnerability was found in systemd. This security flaw can cause a local information leak due to     systemd-coredump not respecting the fs.suid_dumpable kernel setting. (CVE-2022-4415)

  - systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that     has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology     is to crash a binary calling the same function recursively, and put it in a deeply nested directory to     make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16     is set for the systemd/units/systemd-coredump.socket file. (CVE-2022-45873)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5194:06 advisory.

    * systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting     (CVE-2022-4415)
      * systemd: deadlock in systemd-coredump via a crash with a long backtrace (CVE-2022-45873)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5928-1 advisory.

    It was discovered that systemd did not properly validate the time and accuracy values provided to the     format_timespan() function. An attacker could possibly use this issue to cause a buffer overrun, leading     to a denial of service attack. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04     LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-3821)

    It was discovered that systemd did not properly manage the fs.suid_dumpable kernel configurations. A local     attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu     20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-4415)

    It was discovered that systemd did not properly manage a crash with long backtrace data. A local attacker     could possibly use this issue to cause a deadlock, leading to a denial of service attack. This issue only     affected Ubuntu 22.10. (CVE-2022-45873)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
194972	GLSA-202405-04 : systemd: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/5/4	2024/5/4	medium
240826	SUSE SLES15: libsystemd0 / libsystemd0-32bit / libudev-devel / libudev1 / etc (SUSE-SU-2025:02019-1)	Nessus	SuSE Local Security Checks	2025/6/27	2026/6/25	medium
176570	EulerOS Virtualization 2.9.0 : systemd (EulerOS-SA-2023-2027)	Nessus	Huawei Local Security Checks	2023/6/1	2023/6/1	high
180469	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.207)	Nessus	Misc.	2023/9/4	2026/1/21	low
171740	AlmaLinux 8 : systemd (ALSA-2023:0837)	Nessus	Alma Linux Local Security Checks	2023/2/21	2023/9/1	medium
172717	EulerOS 2.0 SP10 : systemd (EulerOS-SA-2023-1567)	Nessus	Huawei Local Security Checks	2023/3/19	2023/8/30	medium
293654	MiracleLinux 8 : systemd-239-68.el8.4 (AXSA:2023-5147:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
173143	Amazon Linux 2023 : systemd, systemd-container, systemd-devel (ALAS2023-2023-025)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	medium
173982	Rocky Linux 9 : systemd (RLSA-2023:0954)	Nessus	Rocky Linux Local Security Checks	2023/4/6	2023/11/6	medium
293240	MiracleLinux 9 : systemd-250-12.el9.3.ML.1 (AXSA:2023-5194:06)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
176605	EulerOS Virtualization 2.9.1 : systemd (EulerOS-SA-2023-2006)	Nessus	Huawei Local Security Checks	2023/6/2	2023/6/2	high
172227	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : systemd vulnerabilities (USN-5928-1)	Nessus	Ubuntu Local Security Checks	2023/3/7	2025/9/3	medium

检测

插件搜索

medium

medium

high

low

medium

medium

medium

medium

medium

medium

high

medium