The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.207 advisory.

  - In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in     xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
    (CVE-2021-45960)

  - The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path,     leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in     /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an     incomplete fix for CVE-2016-10009. (CVE-2023-38408)

  - An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the     attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content     to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing     filenames with two or more newlines where selected content and the target file names are embedded in     crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write     arbitrary files on the system. (CVE-2022-1271)

  - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5     allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR     and LF control characters in the first argument of HTTPConnection.request. (CVE-2020-26116)

  - urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as     demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this     is similar to CVE-2020-26116. (CVE-2020-26137)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5305 advisory.

    An integer overflow flaw was discovered in the CRL signature parser in libksba, an X.509 and CMS support     library, which could result in denial of service or the execution of arbitrary code. For the stable     distribution (bullseye), this problem has been fixed in version 1.5.0-3+deb11u2. We recommend that you     upgrade your libksba packages. For the detailed security status of libksba please refer to its security     tracker page at: https://security-tracker.debian.org/tracker/libksba

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5787-2 advisory.

    USN-5787-1 fixed vulnerabilities in Libksba. This update provides the corresponding updates for Ubuntu     16.04 ESM and Ubuntu 14.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0530 advisory.

    KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by     other applications. Both specifications are building blocks of S/MIME and TLS.

    Security Fix(es):

    * libksba: integer overflow to code executiona (CVE-2022-47629)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0530 advisory.

    [1.3.0-7]
    - Fix for CVE-2022-47629 (#2161571)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0592 advisory.

    KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by     other applications. Both specifications are building blocks of S/MIME and TLS.

    Security Fix(es):

    * libksba: integer overflow to code executiona (CVE-2022-47629)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0624 advisory.

    KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by     other applications. Both specifications are building blocks of S/MIME and TLS.

    Security Fix(es):

    * libksba: integer overflow to code executiona (CVE-2022-47629)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0530 advisory.

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libksba package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The     vulnerability can be exploited remotely for code execution on the target system by passing specially     crafted data to the application, for example, a malicious S/MIME attachment. (CVE-2022-3515)

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libksba package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The     vulnerability can be exploited remotely for code execution on the target system by passing specially     crafted data to the application, for example, a malicious S/MIME attachment. (CVE-2022-3515)

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of libksba installed on the remote host is prior to 1.3.5-1.11. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1752 advisory.

    Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libksba package has been released.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2023_0625 advisory.

    * libksba: integer overflow to code executiona (CVE-2022-47629)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
180469	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.207)	Nessus	Misc.	2023/9/4	2026/1/21	low
169280	Debian DSA-5305-1 : libksba - security update	Nessus	Debian Local Security Checks	2022/12/23	2025/1/24	critical
169707	Ubuntu 16.04 ESM : Libksba vulnerability (USN-5787-2)	Nessus	Ubuntu Local Security Checks	2023/1/9	2024/10/29	critical
170852	RHEL 7 : libksba (RHSA-2023:0530)	Nessus	Red Hat Local Security Checks	2023/1/30	2024/11/7	critical
170890	Oracle Linux 7 : libksba (ELSA-2023-0530)	Nessus	Oracle Linux Local Security Checks	2023/1/31	2024/10/22	critical
171037	RHEL 8 : libksba (RHSA-2023:0592)	Nessus	Red Hat Local Security Checks	2023/2/6	2024/11/7	critical
171091	RHEL 8 : libksba (RHSA-2023:0624)	Nessus	Red Hat Local Security Checks	2023/2/7	2024/11/8	critical
171658	CentOS 7 : libksba (RHSA-2023:0530)	Nessus	CentOS Local Security Checks	2023/2/20	2023/12/22	critical
172286	EulerOS 2.0 SP9 : libksba (EulerOS-SA-2023-1447)	Nessus	Huawei Local Security Checks	2023/3/8	2023/8/31	critical
174824	EulerOS Virtualization 2.9.1 : libksba (EulerOS-SA-2023-1640)	Nessus	Huawei Local Security Checks	2023/4/27	2023/4/27	critical
176755	Amazon Linux AMI : libksba (ALAS-2023-1752)	Nessus	Amazon Linux Local Security Checks	2023/6/6	2024/12/11	critical
203319	Photon OS 4.0: Libksba PHSA-2023-4.0-0309	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	critical
354273	Rocky Linux 8 [CIQ] Security Update: libksba / libksba-debuginfo / libksba-debugsource / libksba-devel (crlsa-2023_0625)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical

检测

插件搜索

low

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical