The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3043-1 advisory.

    Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data     integrity, and availability. An attacker could exploit these to cause a denial of service, expose     sensitive data over the network, or possibly execute arbitrary code. (CVE-2016-3587, CVE-2016-3598,     CVE-2016-3606, CVE-2016-3610)

    A vulnerability was discovered in the OpenJDK JRE related to data integrity. An attacker could exploit     this to expose sensitive data over the network or possibly execute arbitrary code. (CVE-2016-3458)

    Multiple vulnerabilities were discovered in the OpenJDK JRE related to availability. An attacker could     exploit these to cause a denial of service. (CVE-2016-3500, CVE-2016-3508)

    A vulnerability was discovered in the OpenJDK JRE related to information disclosure. An attacker could     exploit this to expose sensitive data over the network. (CVE-2016-3550)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - Multiple flaws were discovered in the Hotspot and     Libraries components in OpenJDK. An untrusted Java     application or applet could use these flaws to     completely bypass Java sandbox restrictions.
    (CVE-2016-3606, CVE-2016-3598, CVE-2016-3610)

  - Multiple denial of service flaws were found in the JAXP     component in OpenJDK. A specially crafted XML file could     cause a Java application using JAXP to consume an     excessive amount of CPU and memory when parsed.
    (CVE-2016-3500, CVE-2016-3508)

  - Multiple flaws were found in the CORBA and Hotsport     components in OpenJDK. An untrusted Java application or     applet could use these flaws to bypass certain Java     sandbox restrictions. (CVE-2016-3458, CVE-2016-3550)

Multiple flaws were discovered in the Hotspot and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. (CVE-2016-3606 , CVE-2016-3598 , CVE-2016-3610)

Multiple denial of service flaws were found in the JAXP component in OpenJDK. A specially crafted XML file could cause a Java application using JAXP to consume an excessive amount of CPU and memory when parsed. (CVE-2016-3500 , CVE-2016-3508)

Multiple flaws were found in the CORBA and Hotsport components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-3458 , CVE-2016-3550)

This update for java-1_7_0-openjdk fixes the following issues :

  - Update to 2.6.7 - OpenJDK 7u111

  - Security fixes

  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking     (bsc#989732)

  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows     only) (bsc#989734)

  - S8147771: Construction of static protection domains     under Javax custom policy

  - S8148872, CVE-2016-3500: Complete name checking     (bsc#989730)

  - S8149962, CVE-2016-3508: Better delineation of XML     processing (bsc#989731)

  - S8150752: Share Class Data

  - S8151925: Font reference improvements

  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)

  - S8155981, CVE-2016-3606: Bolster bytecode verification     (bsc#989722)

  - S8155985, CVE-2016-3598: Persistent Parameter Processing     (bsc#989723)

  - S8158571, CVE-2016-3610: Additional method handle     validation (bsc#989725)

  - CVE-2016-3511 (bsc#989727)

  - CVE-2016-3503 (bsc#989728)

  - CVE-2016-3498 (bsc#989729)

  - Import of OpenJDK 7 u111 build 0

  - S6953295: Move few sun.security.(util, x509, pkcs)     classes used by keytool/jarsigner to another package

  - S7060849: Eliminate pack200 build warnings

  - S7064075: Security libraries don't build with javac
    -Xlint:all,-deprecation -Werror

  - S7069870: Parts of the JDK erroneously rely on generic     array initializers with diamond

  - S7102686: Restructure timestamp code so that jars and     modules can more easily share the same code

  - S7105780: Add SSLSocket client/SSLEngine server to     templates directory

  - S7142339: PKCS7.java is needlessly creating SHA1PRNG     SecureRandom instances when timestamping is not done

  - S7152582: PKCS11 tests should use the NSS libraries     available in the OS

  - S7192202: Make sure keytool prints both unknown and     unparseable extensions

  - S7194449: String resources for Key Tool and Policy Tool     should be in their respective packages

  - S7196855: autotest.sh fails on ubuntu because     libsoftokn.so not found

  - S7200682: TEST_BUG: keytool/autotest.sh still has     problems with libsoftokn.so

  - S8002306: (se) Selector.open fails if invoked with     thread interrupt status set [win]

  - S8009636: JARSigner including TimeStamp PolicyID     (TSAPolicyID) as defined in RFC3161

  - S8019341: Update CookieHttpsClientTest to use the newer     framework.

  - S8022228: Intermittent test failures in     sun/security/ssl/javax/net/ssl/NewAPIs

  - S8022439: Fix lint warnings in sun.security.ec

  - S8022594: Potential deadlock in <clinit> of     sun.nio.ch.Util/IOUtil

  - S8023546: sun/security/mscapi/ShortRSAKey1024.sh fails     intermittently

  - S8036612: [parfait] JNI exception pending in     jdk/src/windows/native/sun/security/mscapi/security.cpp

  - S8037557: test SessionCacheSizeTests.java timeout

  - S8038837: Add support to jarsigner for specifying     timestamp hash algorithm

  - S8079410: Hotspot version to share the same update and     build version from JDK

  - S8130735: javax.swing.TimerQueue: timer fires late when     another timer starts

  - S8139436: sun.security.mscapi.KeyStore might load     incomplete data

  - S8144313: Test SessionTimeOutTests can be timeout

  - S8146387: Test SSLSession/SessionCacheSizeTests socket     accept timed out

  - S8146669: Test SessionTimeOutTests fails intermittently

  - S8146993: Several javax/management/remote/mandatory     regression tests fail after JDK-8138811

  - S8147857: [TEST] RMIConnector logs attribute names     incorrectly

  - S8151841, PR3098: Build needs additional flags to     compile with GCC 6

  - S8151876: (tz) Support tzdata2016d

  - S8157077: 8u101 L10n resource file updates

  - S8161262: Fix jdk build with gcc 4.1.2:
    -fno-strict-overflow not known.

  - Import of OpenJDK 7 u111 build 1

  - S7081817:
    test/sun/security/provider/certpath/X509CertPath/Illegal     Certificates.java failing

  - S8140344: add support for 3 digit update release numbers

  - S8145017: Add support for 3 digit hotspot minor version     numbers

  - S8162344: The API changes made by CR 7064075 need to be     reverted

  - Backports

  - S2178143, PR2958: JVM crashes if the number of bound     CPUs changed during runtime

  - S4900206, PR3101: Include worst-case rounding tests for     Math library functions

  - S6260348, PR3067: GTK+ L&F JTextComponent not respecting     desktop caret blink rate

  - S6934604, PR3075: enable parts of EliminateAutoBox by     default

  - S7043064, PR3020: sun/java2d/cmm/ tests failed against     RI b141 & b138-nightly

  - S7051394, PR3020: NullPointerException when running     regression tests LoadProfileTest by using openjdk-7-b144

  - S7086015, PR3013: fix     test/tools/javac/parser/netbeans/JavacParserTest.java

  - S7119487, PR3013: JavacParserTest.java test fails on     Windows platforms

  - S7124245, PR3020: [lcms] ColorConvertOp to color space     CS_GRAY apparently converts orange to 244,244,0

  - S7159445, PR3013: (javac) emits inaccurate diagnostics     for enhanced for-loops

  - S7175845, PR1437, RH1207129: 'jar uf' changes file     permissions unexpectedly

  - S8005402, PR3020: Need to provide benchmarks for color     management

  - S8005530, PR3020: [lcms] Improve performance of     ColorConverOp for default destinations

  - S8005930, PR3020: [lcms] ColorConvertOp: Alpha channel     is not transferred from source to destination.

  - S8013430, PR3020: REGRESSION:
    closed/java/awt/color/ICC_Profile/LoadProfileTest/LoadPr     ofileTest.java fails with     java.io.StreamCorruptedException: invalid type code: EE     since 8b87

  - S8014286, PR3075: failed java/lang/Math/DivModTests.java     after 6934604 changes

  - S8014959, PR3075:
    assert(Compile::current()->live_nodes() <     (uint)MaxNodeLimit) failed: Live Node limit exceeded     limit

  - S8019247, PR3075: SIGSEGV in compiled method     c8e.e.t_.getArray(Ljava/lang/Class;)[Ljava/lang/Object

  - S8024511, PR3020: Crash during color profile destruction

  - S8025429, PR3020: [parfait] warnings from b107 for     sun.java2d.cmm: JNI exception pending

  - S8026702, PR3020: Fix for 8025429 breaks jdk build on     windows

  - S8026780, PR3020, RH1142587: Crash on PPC and PPC v2 for     Java_awt test suit

  - S8047066, PR3020: Test     test/sun/awt/image/bug8038000.java fails with     ClassCastException

  - S8069181, PR3012, RH1015612: java.lang.AssertionError     when compiling JDK 1.4 code in JDK 8

  - S8158260, PR2992, RH1341258: PPC64: unaligned     Unsafe.getInt can lead to the generation of illegal     instructions (bsc#988651)

  - S8159244, PR3075: Partially initialized string object     created by C2's string concat optimization may escape

  - Bug fixes

  - PR2799, RH1195203: Files are missing from resources.jar

  - PR2900: Don't use WithSeed versions of NSS functions as     they don't fully process the seed

  - PR3091: SystemTap is heavily confused by multiple JDKs

  - PR3102: Extend 8022594 to AixPollPort

  - PR3103: Handle case in clean-fonts where     linux.fontconfig.Gentoo.properties.old has not been     created

  - PR3111: Provide option to disable SystemTap tests

  - PR3114: Don't assume system mime.types supports     text/x-java-source

  - PR3115: Add check for elliptic curve cryptography     implementation

  - PR3116: Add tests for Java debug info and source files

  - PR3118: Path to agpl-3.0.txt not updated

  - PR3119: Makefile handles cacerts as a symlink, but the     configure check doesn't

  - AArch64 port

  - S8148328, PR3100: aarch64: redundant lsr instructions in     stub code.

  - S8148783, PR3100: aarch64: SEGV running SpecJBB2013

  - S8148948, PR3100: aarch64: generate_copy_longs calls     align() incorrectly

  - S8150045, PR3100: arraycopy causes segfaults in SATB     during garbage collection

  - S8154537, PR3100: AArch64: some integer rotate     instructions are never emitted

  - S8154739, PR3100: AArch64: TemplateTable::fast_xaccess     loads in wrong mode

  - S8157906, PR3100: aarch64: some more integer rotate     instructions are never emitted

Update to 2.6.7 - OpenJDK 7u111

  - Security fixes

  - S8079718, CVE-2016-3458: IIOP Input Stream Hooking     (bsc#989732)

  - S8145446, CVE-2016-3485: Perfect pipe placement (Windows     only) (bsc#989734)

  - S8147771: Construction of static protection domains     under Javax custom policy

  - S8148872, CVE-2016-3500: Complete name checking     (bsc#989730)

  - S8149962, CVE-2016-3508: Better delineation of XML     processing (bsc#989731)

  - S8150752: Share Class Data

  - S8151925: Font reference improvements

  - S8152479, CVE-2016-3550: Coded byte streams (bsc#989733)

  - S8155981, CVE-2016-3606: Bolster bytecode verification     (bsc#989722)

  - S8155985, CVE-2016-3598: Persistent Parameter Processing     (bsc#989723)

  - S8158571, CVE-2016-3610: Additional method handle     validation (bsc#989725)

  - CVE-2016-3511 (bsc#989727)

  - CVE-2016-3503 (bsc#989728)

  - CVE-2016-3498 (bsc#989729)

The remote Oracle Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1776 advisory.

    [1:1.6.0.40-1.13.12.4.0.1]
    - Add oracle-enterprise.patch

    [1:1.6.0.40-1.13.12.4]
    - Bump source tarballs to try and really fix TCK failures this time.
    - Resolves: rhbz#1350043

    [1:1.6.0.40-1.13.12.3]
    - Bump source tarballs to missing -DNDEBUG on JDK native code.
    - Resolves: rhbz#1350043

    [1:1.6.0.40-1.13.12.2]
    - Escape macros in bootstrap comments
    - Resolves: rhbz#1350043

    [1:1.6.0.40-1.13.12.2]
    - Bump source tarballs to fix TCK failures.
    - Resolves: rhbz#1350043

    [1:1.6.0.40-1.13.12.1]
    - Introduce bootstrapping variable to test whether we are bootstrapping or not.
    - Add build requirement of xsltproc when bootstrapping.
    - Resolves: rhbz#1350043

    [1:1.6.0.40-1.13.12.1]
    - Separate bootstrap option as it should not be tied to the JDK used.
    - Enable bootstrapping on JIT architectures going forward.
    - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
    - Resolves: rhbz#1350043

    [1:1.6.0.40-1.13.12.0]
    - Need to also remove DISTRIBUTION_PATCHES reference to wrapv patch.
    - Resolves: rhbz#1350043

    [1:1.6.0.40-1.13.12.0]
    - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
    - Depend on mailcap for /etc/mime.types (PR2800)
    - Use configure macro and disable long-running JTreg & SystemTap tests from make check
    - Remove redundant patch-ecj target invocation for bootstrap build.
    - Add check section to run the new tests introduced in 1.13.12.
    - Add RHEL version of b40 tarball.
    - Require mailcap at build time as well, so configure finds /etc/mime.types
    - No need to require openssl at run time.
    - Drop old_gcc patch as this is now supported upstream (S8161262)
    - Resolves: rhbz#1350043

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es) :

* Multiple flaws were discovered in the Hotspot and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions.
(CVE-2016-3606, CVE-2016-3587, CVE-2016-3598, CVE-2016-3610)

* Multiple denial of service flaws were found in the JAXP component in OpenJDK. A specially crafted XML file could cause a Java application using JAXP to consume an excessive amount of CPU and memory when parsed. (CVE-2016-3500, CVE-2016-3508)

* Multiple flaws were found in the CORBA and Hotsport components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-3458, CVE-2016-3550)

Note: If the web browser plug-in provided by the icedtea-web package was installed, the issues exposed via Java applets could have been exploited without user interaction if a user visited a malicious website.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1458 advisory.

    [1:1.8.0.101-3.b13]
    - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
    - Resolves: rhbz#1350034

    [1:1.8.0.101-2.b13]
    - Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
    - Resolves: rhbz#1350034

    [1:1.8.0.101-1.b13]
    - Add workaround for a typo in the CORBA security fix, 8079718
    - Resolves: rhbz#1350034

    [1:1.8.0.101-0.b13]
    - Update to u101b13.
    - Backport REPOS option in generate_source_tarball.sh
    - Drop a leading zero from the priority as the update version is now three digits
    - Resolves: rhbz#1350034

    [1:1.8.0.92-0.b14]
    - Add additional fixes (S6260348, S8159244) for u92 update.
    - Resolves: rhbz#1350034

    [1:1.8.0.92-0.b14]
    - Update ppc64le fix with upstream version, S8158260.
    - Resolves: rhbz#1350034

    [1:1.8.0.92-0.b14]
    - Add fix for ppc64le crash due to illegal instruction.
    - Resolves: rhbz#1350034

    [1:1.8.0.92-0.b14]
    - Add backport for S8148752.
    - Resolves: rhbz#1350034

    [1:1.8.0.92-0.b14]
    - Update to u92b14.
    - Remove upstreamed patches for Zero build failures 8087120 & 8143855.
    - Add 8132051 Zero fix upstreamed as 8154210 in 8u112.
    - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell.
    - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues.
    - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92
    - Resolves: rhbz#1350034

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for java-1.8.0-oracle is now available for Oracle Java for Red Hat Enterprise Linux 6 and Oracle Java for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

[Updated 12 September 2016] This advisory has been updated to push packages into the Oracle Java for Red Hat Enterprise Linux 6 Compute Node channels. The packages included in this revised update have not been changed in any way from the packages included in the original advisory.

Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.

This update upgrades Oracle Java SE 8 to version 8 Update 101.

Security Fix(es) :

* This update fixes multiple vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit.
Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page, listed in the References section. (CVE-2016-3458, CVE-2016-3498, CVE-2016-3500, CVE-2016-3503, CVE-2016-3508, CVE-2016-3511, CVE-2016-3550, CVE-2016-3552, CVE-2016-3587, CVE-2016-3598, CVE-2016-3606, CVE-2016-3610)

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit.

Security Fix(es) :

* Multiple flaws were discovered in the Hotspot and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions.
(CVE-2016-3606, CVE-2016-3598, CVE-2016-3610)

* Multiple denial of service flaws were found in the JAXP component in OpenJDK. A specially crafted XML file could cause a Java application using JAXP to consume an excessive amount of CPU and memory when parsed. (CVE-2016-3500, CVE-2016-3508)

* Multiple flaws were found in the CORBA and Hotsport components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-3458, CVE-2016-3550)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in breakouts of the Java sandbox or denial of service.

An insufficient bytecode verification flaw was discovered in the Hotspot component in OpenJDK. An untrusted Java application or applet could use this flaw to completely bypass Java sandbox restrictions.
(CVE-2016-3606)

Multiple denial of service flaws were found in the JAXP component in OpenJDK. A specially crafted XML file could cause a Java application using JAXP to consume an excessive amount of CPU and memory when parsed. (CVE-2016-3500 , CVE-2016-3508)

Multiple flaws were found in the CORBA and Hotsport components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. (CVE-2016-3458 , CVE-2016-3550)

According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Multiple flaws were discovered in the Hotspot and     Libraries components in OpenJDK. An untrusted Java     application or applet could use these flaws to     completely bypass Java sandbox restrictions.
    CVE-2016-3606, CVE-2016-3598, CVE-2016-3610)

  - Multiple denial of service flaws were found in the JAXP     component in OpenJDK. A specially crafted XML file     could cause a Java application using JAXP to consume an     excessive amount of CPU and memory when parsed.
    (CVE-2016-3500, CVE-2016-3508)

  - Multiple flaws were found in the CORBA and Hotsport     components in OpenJDK. An untrusted Java application or     applet could use these flaws to bypass certain Java     sandbox restrictions. (CVE-2016-3458, CVE-2016-3550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
92584	Ubuntu 16.04 LTS : OpenJDK 8 vulnerabilities (USN-3043-1)	Nessus	Ubuntu Local Security Checks	2016/7/27	2024/8/27	critical
92605	Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x, SL6.x, SL7.x i386/x86_64 (20160727)	Nessus	Scientific Linux Local Security Checks	2016/7/28	2026/1/30	critical
92664	Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2016-729)	Nessus	Amazon Linux Local Security Checks	2016/8/2	2026/1/29	critical
92932	openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2016-976)	Nessus	SuSE Local Security Checks	2016/8/12	2026/1/28	critical
92992	openSUSE Security Update : OpenJDK7 (openSUSE-2016-982)	Nessus	SuSE Local Security Checks	2016/8/17	2026/1/28	critical
93147	Oracle Linux 5 / 6 / 7 : java-1.6.0-openjdk (ELSA-2016-1776)	Nessus	Oracle Linux Local Security Checks	2016/8/29	2024/10/22	critical
92473	CentOS 6 / 7 : java-1.8.0-openjdk (CESA-2016:1458)	Nessus	CentOS Local Security Checks	2016/7/21	2026/1/30	critical
92489	Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2016-1458)	Nessus	Oracle Linux Local Security Checks	2016/7/21	2024/10/22	critical
92508	RHEL 6 / 7 : java-1.8.0-oracle (RHSA-2016:1475)	Nessus	Red Hat Local Security Checks	2016/7/22	2026/1/30	critical
92586	CentOS 5 / 6 / 7 : java-1.7.0-openjdk (CESA-2016:1504)	Nessus	CentOS Local Security Checks	2016/7/28	2026/1/30	critical
92604	RHEL 5 / 6 / 7 : java-1.7.0-openjdk (RHSA-2016:1504)	Nessus	Red Hat Local Security Checks	2016/7/28	2026/1/30	critical
92954	Debian DSA-3641-1 : openjdk-7 - security update	Nessus	Debian Local Security Checks	2016/8/15	2026/1/28	critical
93281	SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2016:2012-1)	Nessus	SuSE Local Security Checks	2016/9/2	2026/1/27	critical
93540	Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2016-748)	Nessus	Amazon Linux Local Security Checks	2016/9/16	2026/1/23	critical
99795	EulerOS 2.0 SP1 : java-1.7.0-openjdk (EulerOS-SA-2016-1032)	Nessus	Huawei Local Security Checks	2017/5/1	2025/12/22	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical