The version of AHV installed on the remote host is prior to 10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer     overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX). (CVE-2024-45492)

  - Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a     denial of service via a crafted script. (CVE-2020-24736)

  - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and     1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files     outside of what it would otherwise have access to, which is an attack on integrity and confidentiality.
    When `persistent=subdir` is used in the application permissions (represented as `--persist=subdir` in the     command-line interface), that means that an application which otherwise doesn't have access to the real     user home directory will see an empty home directory with a writeable subdirectory `subdir`. Behind the     scenes, this directory is actually a bind mount and the data is stored in the per-application directory as     `~/.var/app/$APPID/subdir`. This allows existing apps that are not aware of the per-application directory     to still work as intended without general home directory access. However, the application does have write     access to the application directory `~/.var/app/$APPID` where this directory is stored. If the source     directory for the `persistent`/`--persist` option is replaced by a symlink, then the next time the     application is started, the bind mount will follow the symlink and mount whatever it points to into the     sandbox. Partial protection against this vulnerability can be provided by patching Flatpak using the     patches in commits ceec2ffc and 98f79773. However, this leaves a race condition that could be exploited by     two instances of a malicious app running in parallel. Closing the race condition requires updating or     patching the version of bubblewrap that is used by Flatpak to add the new `--bind-fd` option using the     patch and then patching Flatpak to use it. If Flatpak has been configured at build-time with     `-Dsystem_bubblewrap=bwrap` (1.15.x) or `--with-system-bubblewrap=bwrap` (1.14.x or older), or a similar     option, then the version of bubblewrap that needs to be patched is a system copy that is distributed     separately, typically `/usr/bin/bwrap`. This configuration is the one that is typically used in Linux     distributions. If Flatpak has been configured at build-time with `-Dsystem_bubblewrap=` (1.15.x) or with     `--without-system-bubblewrap` (1.14.x or older), then it is the bundled version of bubblewrap that is     included with Flatpak that must be patched. This is typically installed as `/usr/libexec/flatpak-bwrap`.
    This configuration is the default when building from source code. For the 1.14.x stable branch, these     changes are included in Flatpak 1.14.10. The bundled version of bubblewrap included in this release has     been updated to 0.6.3. For the 1.15.x development branch, these changes are included in Flatpak 1.15.10.
    The bundled version of bubblewrap in this release is a Meson wrap subproject, which has been updated to     0.10.0. The 1.12.x and 1.10.x branches will not be updated for this vulnerability. Long-term support OS     distributions should backport the individual changes into their versions of Flatpak and bubblewrap, or     update to newer versions if their stability policy allows it. As a workaround, avoid using applications     using the `persistent` (`--persist`) permission. (CVE-2024-42472)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    REXML is an XML toolkit for Ruby.The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that     has many entity expansions with SAX2 or pull parser API.The REXML gem 3.3.3 or later include the patch to     fix the vulnerability.(CVE-2024-41946)

    REXML is an XML toolkit for Ruby.The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an     XML that has many specific characters such as whitespace character, `]` and `]`.The REXML gem 3.3.3     or later include the patches to fix these vulnerabilities.(CVE-2024-41123)

    REXML is an XML toolkit for Ruby.The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML     that has many deep elements that have same local name attributes.If you need to parse untrusted XMLs with     tree parser API like REXML::Document.new, you may be impacted to this vulnerability.If you use other     parser APIs such as stream parser API and SAX2 parser API, this vulnerability is not affected.The REXML     gem 3.3.6 or later include the patch to fix the vulnerability.(CVE-2024-43398)

     REXML is an XML toolkit for Ruby.The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses     an XML that has many specific characters such as ``, `0` and `%`.If you need to parse untrusted     XMLs, you many be impacted to these vulnerabilities.The REXML gem 3.3.2 or later include the patches to     fix these vulnerabilities.Users are advised to upgrade.Users unable to upgrade should avoid parsing     untrusted XML strings.(CVE-2024-39908)

     REXML is an XML toolkit for Ruby.The REXML gem before 3.2.6 has a denial of service vulnerability when it     parses an XML that has many ``s in an attribute value.Those who need to parse untrusted XMLs may be     impacted to this vulnerability.The REXML gem 3.2.7 or later include the patch to fix this vulnerability.As     a workaround, don't parse untrusted XMLs.(CVE-2024-35176)

Tenable has extracted the preceding description block directly from the EulerOS ruby security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Rubygems.org is the Ruby community's gem hosting service. A Gem publisher can cause a Remote DoS when     publishing a Gem. This is due to how Ruby reads the Manifest of Gem files when using     Gem::Specification.from_yaml. from_yaml makes use of SafeYAML.load which allows YAML aliases inside the     YAML-based metadata of a gem. YAML aliases allow for Denial of Service attacks with so-called `YAML-bombs`     (comparable to Billion laughs attacks). This was patched. There is is no action required by users. This     issue is also tracked as GHSL-2024-001 and was discovered by the GitHub security lab.(CVE-2024-35221)

     REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when     it parses an XML that has many ``s in an attribute value. Those who need to parse untrusted XMLs may be     impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability.
    As a workaround, don't parse untrusted XMLs.(CVE-2024-35176)

    Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many     features to process text files and to do system management tasks (as in Perl). It is simple, straight-     forward, and extensible.(CVE-2024-27282)

Tenable has extracted the preceding description block directly from the EulerOS ruby security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5338 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7091-1 advisory.

    It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML     characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash,     resulting in a denial of service. This issue only affected in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
    (CVE-2024-35176, CVE-2024-39908, CVE-2024-41123)

    It was discovered that Ruby incorrectly handled parsing of an XML document that has many entity expansions     with SAX2 or pull parser API. An attacker could use this issue to cause Ruby to crash, resulting in a     denial of service. (CVE-2024-41946)

    It was discovered that Ruby incorrectly handled parsing of an XML document that has many digits in a hex     numeric character reference. An attacker could use this issue to cause Ruby to crash, resulting in a     denial of service. (CVE-2024-49761)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4499 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    Security Fix(es):

    * rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

    * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)

    * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)

    * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

    * REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4499 advisory.

    * rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 (CVE-2023-36617)

    * ruby: Buffer overread vulnerability in StringIO (CVE-2024-27280)

    * ruby: RCE vulnerability with .rdoc_options in RDoc (CVE-2024-27281)

    * ruby: Arbitrary memory address read vulnerability with Regex search (CVE-2024-27282)

    * REXML: DoS parsing an XML with many `<`s in an attribute value (CVE-2024-35176)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
310786	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0)	Nessus	Misc.	2026/4/29	2026/8/13	medium
210677	EulerOS 2.0 SP10 : ruby (EulerOS-SA-2024-2895)	Nessus	Huawei Local Security Checks	2024/11/8	2024/12/23	high
208329	EulerOS 2.0 SP11 : ruby (EulerOS-SA-2024-2568)	Nessus	Huawei Local Security Checks	2024/10/9	2024/12/23	medium
205513	RHEL 8 : pcs (RHSA-2024:5338)	Nessus	Red Hat Local Security Checks	2024/8/14	2024/12/23	medium
210332	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : Ruby vulnerabilities (USN-7091-1)	Nessus	Ubuntu Local Security Checks	2024/11/5	2024/12/23	high
202189	RHEL 8 : ruby (RHSA-2024:4499)	Nessus	Red Hat Local Security Checks	2024/7/11	2025/4/8	medium
202386	Rocky Linux 8 : ruby (RLSA-2024:4499)	Nessus	Rocky Linux Local Security Checks	2024/7/15	2024/12/23	medium

检测

插件搜索

medium

high

medium

medium

high

medium

medium