The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10220:01 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7160 advisory.

    Bootable container system

    Security Fix(es):

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7313 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7160 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7160 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21464-1 advisory.

    - CVE-2025-24898: openssl: use-after-free in `ssl::select_next_proto` due to improper lifetime handling     (bsc#1270429).
    - CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:derive` when using     OpenSSL 1.1.1       (bsc#1270198).
    - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length       (bsc#1270582).
    - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap_key()`     (bsc#1270683).
    - CVE-2026-41681: openssl: stack corruption due to `MdCtxRef::digest_final()` writing past caller buffer     with no length       check (bsc#1270721).
    - CVE-2026-41898: openssl: information leak to network peers due to unchecked callback-returned length in     PSK and       cookie generate trampolines (bsc#1270831).
    - CVE-2026-42327: openssl: undefined behavior in `X509Ref::ocsp_responders` when processing certificates     with non-UTF-8       OCSP URLs (bsc#1270470).
    - CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding     (bsc#1270877).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10290:01 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:7317 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:7241 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5f07738947 advisory.

    update to 1.33.2     fix  CVE-2025-24898

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7147 advisory.

    [2025.5-1]
    - Rebase to 2025.5       Resolves: #RHEL-78697

    [2025.4-1]
    - Rebase to 2025.4       Resolves: #RHEL-68131

    [2025.3-1]
    - Rebase to 2025.3       Resolves: #RHEL-68131

    [2025.2-1]
    - Rebase to 2025.2       Resolves: #RHEL-68131

    [2025.1-1]
    - Rebase to 2025.1       Resolves: #RHEL-68131

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:7317 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7241 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10071:01 advisory.

    * rust-openssl: rust openssl ssl::select_next_proto use after free (CVE-2025-24898)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
283158	MiracleLinux 9 : rust-bootupd-0.2.27-3.el9 (AXSA:2025-10220:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	medium
235799	RHEL 9 : bootc (RHSA-2025:7160)	Nessus	Red Hat Local Security Checks	2025/5/13	2025/7/1	medium
266522	RockyLinux 9 : keylime-agent-rust (RLSA-2025:7313)	Nessus	Rocky Linux Local Security Checks	2025/10/4	2025/10/4	medium
266702	RockyLinux 9 : bootc (RLSA-2025:7160)	Nessus	Rocky Linux Local Security Checks	2025/10/6	2025/10/6	medium
241260	AlmaLinux 9 : bootc (ALSA-2025:7160)	Nessus	Alma Linux Local Security Checks	2025/7/3	2025/7/3	medium
331446	openSUSE 16 Security Update : libkrun (openSUSE-SU-2026:21464-1)	Nessus	SuSE Local Security Checks	2026/7/31	2026/7/31	critical
283047	MiracleLinux 9 : keylime-agent-rust-0.2.2-2.el9 (AXSA:2025-10290:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	medium
241276	AlmaLinux 9 : python3.12-cryptography (ALSA-2025:7317)	Nessus	Alma Linux Local Security Checks	2025/7/3	2025/7/3	medium
241283	AlmaLinux 9 : rust-bootupd (ALSA-2025:7241)	Nessus	Alma Linux Local Security Checks	2025/7/3	2025/7/3	medium
216669	Fedora 41 : vaultwarden (2025-5f07738947)	Nessus	Fedora Local Security Checks	2025/2/23	2025/2/23	medium
237041	Oracle Linux 9 : rpm-ostree (ELSA-2025-7147)	Nessus	Oracle Linux Local Security Checks	2025/5/22	2025/9/11	medium
237311	RHEL 9 : python3.12-cryptography (RHSA-2025:7317)	Nessus	Red Hat Local Security Checks	2025/5/27	2025/6/5	medium
266726	RockyLinux 9 : rust-bootupd (RLSA-2025:7241)	Nessus	Rocky Linux Local Security Checks	2025/10/6	2025/10/6	medium
282846	MiracleLinux 9 : python3.12-cryptography-41.0.7-2.el9 (AXSA:2025-10071:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	medium

检测

插件搜索

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

medium

medium

medium

medium