The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2724-1 advisory.

    This update for the Linux Kernel 5.3.18-150300_59_109 fixes several issues.

    The following security issues were fixed:

    - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver     functionality (bsc#1209672).
    - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX     (bsc#1210989).
    - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
    - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in     do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2741-1 advisory.

    This update for the Linux Kernel 5.3.18-150300_59_87 fixes several issues.

    The following security issues were fixed:

    - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver     functionality (bsc#1209672).
    - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type     confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid     classification results) (bsc#1207189).
    - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX     (bsc#1210989).
    - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
    - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in     do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4146 advisory.

    This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify     the code of a running kernel.

    Security Fix(es):

    * kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

    * kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege     escalation (CVE-2023-1281)

    * kernel: remote DoS in TIPC kernel module (CVE-2023-1390)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4125 advisory.

    The kernel packages contain the Linux kernel, the core of any Linux operating system.

    Security Fix(es):

    * kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

    * kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege     escalation (CVE-2023-1281)

    * kernel: remote DoS in TIPC kernel module (CVE-2023-1390)

    * kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege     escalation (CVE-2023-32233)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * RHEL8.1 Snapshot3 - PVT:940:virt:4TB:LPM operation failed by returning HSCLA2CF, HSCL365C SRC's - Linux     partition suspend timeout (-> documentation/Linux Alert through LTC bug 182549) (BZ#2151218)

    * i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (BZ#2171382)

    * Invalid character detected by rpminspect in Documentation/translations/zh_CN/process/magic-number.rst     (BZ#2208288)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A remote denial of service vulnerability was found in the Linux kernel's TIPC kernel module. The while     loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue.
    Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system     to instantly spike to 100%, causing a denial of service condition. (CVE-2023-1390)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2689-1 advisory.

    This update for the Linux Kernel 4.12.14-122_153 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX     (bsc#1210989).
    - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
    - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in     do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2718-1 advisory.

    This update for the Linux Kernel 4.12.14-122_130 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type     confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid     classification results) (bsc#1207189).
    - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX     (bsc#1210989).
    - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
    - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in     do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2702-1 advisory.

    This update for the Linux Kernel 4.12.14-122_127 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type     confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid     classification results) (bsc#1207189).
    - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX     (bsc#1210989).
    - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).
    - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in     do_tls_getsockopt in net/tls/tls_main.c (bsc#1210452).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1739 advisory.

    The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with     extremely high determinism requirements.

    Security Fix(es):

    * kernel: Integer overflow in Intel(R) Graphics Drivers (CVE-2020-12362)

    * kernel: use-after-free caused by a malicious USB device in the drivers/usb/misc/adutux.c driver     (CVE-2019-19523)

    * kernel: use-after-free bug caused by a malicious USB device in the drivers/usb/misc/iowarrior.c driver     (CVE-2019-19528)

    * kernel: possible out of bounds write in kbd_keycode of keyboard.c (CVE-2020-0431)

    * kernel: DoS by corrupting mountpoint reference counter (CVE-2020-12114)

    * kernel: use-after-free in usb_sg_cancel function in drivers/usb/core/message.c (CVE-2020-12464)

    * kernel: buffer uses out of index in ext3/4 filesystem (CVE-2020-14314)

    * kernel: Use After Free vulnerability in cgroup BPF component (CVE-2020-14356)

    * kernel: NULL pointer dereference in serial8250_isa_init_ports function in     drivers/tty/serial/8250/8250_core.c (CVE-2020-15437)

    * kernel: umask not applied on filesystem without ACL support (CVE-2020-24394)

    * kernel: TOCTOU mismatch in the NFS client code (CVE-2020-25212)

    * kernel: incomplete permission checking for access to rbd devices (CVE-2020-25284)

    * kernel: race condition between hugetlb sysctl handlers in mm/hugetlb.c (CVE-2020-25285)

    * kernel: improper input validation in ppp_cp_parse_cr function leads to memory corruption and read     overflow (CVE-2020-25643)

    * kernel: perf_event_parse_addr_filter memory (CVE-2020-25704)

    * kernel: use-after-free in kernel midi subsystem (CVE-2020-27786)

    * kernel: child process is able to access parent mm through hfi dev file handle (CVE-2020-27835)

    * kernel: slab-out-of-bounds read in fbcon (CVE-2020-28974)

    * kernel: fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (CVE-2020-35508)

    * kernel: use after free in tun_get_user of tun.c could lead to local escalation of privilege     (CVE-2021-0342)

    * kernel: NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs in     drivers/media/usb/gspca/ov519.c (CVE-2020-11608)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2708-1 advisory.

    This update for the Linux Kernel 4.12.14-95_111 fixes several issues.

    The following security issues were fixed:

    - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type     confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid     classification results) (bsc#1207189).
    - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX     (bsc#1210989).
    - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1210779).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1803-1 advisory.

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

    The following security bugs were fixed:

    - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
    - CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
    - CVE-2021-3923: Fixed stack information leak vulnerability that could lead to kernel protection bypass in     infiniband RDMA (bsc#1209778).
    - CVE-2022-20567: Fixed use after free that could lead to a local privilege escalation in pppol2tp_create     of l2tp_ppp.c (bsc#1208850).
    - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795).
    - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
    - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
    - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
    - CVE-2023-1390: Fixed remote DoS vulnerability in tipc_link_xmit() (bsc#1209289).
    - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to     userspace, causing an information leak (bsc#1209532).
    - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207036).
    - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type     confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid     classification results) (bsc#1207125).
    - CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c     (bsc#1209291).
    - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in     net/bluetooth/hci_conn.c (bsc#1209052).
    - CVE-2023-28772: Fixed buffer overflow in seq_buf_putmem_hex in lib/seq_buf.c (bsc#1209549).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
177828	SUSE SLES15 Security Update : kernel (Live Patch 28 for SLE 15 SP3) (SUSE-SU-2023:2724-1)	Nessus	SuSE Local Security Checks	2023/6/30	2026/6/25	high
177880	SUSE SLES15 Security Update : kernel (Live Patch 22 for SLE 15 SP3) (SUSE-SU-2023:2741-1)	Nessus	SuSE Local Security Checks	2023/7/1	2026/6/25	high
178425	RHEL 8 : kpatch-patch (RHSA-2023:4146)	Nessus	Red Hat Local Security Checks	2023/7/18	2024/11/7	high
178427	RHEL 8 : kernel (RHSA-2023:4125)	Nessus	Red Hat Local Security Checks	2023/7/18	2024/11/7	high
247886	Linux Distros Unpatched Vulnerability : CVE-2023-1390	Nessus	Misc.	2025/8/11	2026/7/17	high
177734	SUSE SLES12 Security Update : kernel (Live Patch 41 for SLE 12 SP5) (SUSE-SU-2023:2689-1)	Nessus	SuSE Local Security Checks	2023/6/29	2026/6/25	high
177825	SUSE SLES12 Security Update : kernel (Live Patch 34 for SLE 12 SP5) (SUSE-SU-2023:2718-1)	Nessus	SuSE Local Security Checks	2023/6/30	2026/6/26	high
177829	SUSE SLES12: kernel-livepatch-4_12_14-150100_197_117-default / etc (SUSE-SU-2023:2702-1)	Nessus	SuSE Local Security Checks	2023/6/30	2026/6/25	high
149660	RHEL 8 : kernel-rt (RHSA-2021:1739)	Nessus	Red Hat Local Security Checks	2021/5/19	2024/11/7	high
177822	SUSE SLES12 Security Update : kernel (Live Patch 31 for SLE 12 SP4) (SUSE-SU-2023:2708-1)	Nessus	SuSE Local Security Checks	2023/6/30	2026/6/26	high
174047	SUSE SLED12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:1803-1)	Nessus	SuSE Local Security Checks	2023/4/11	2026/6/25	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high