According to the versions of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large     number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even     crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial     of service attack.(CVE-2024-12133)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libtasn1 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9b659aa327 advisory.

    Includes CVE fixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-4049 advisory.

    [4.13.0-5]
    - Backport the fix for CVE-2024-12133

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:4049 advisory.

    * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-989 advisory.

    When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and     searching a specific element in it take quadratic time to complete. This could be utilized for a remote     DoS attack by presenting a crafted certificate to the network peer. (CVE-2024-12133)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7077 advisory.

    A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T     recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690)     encoding and decoding functions.

    Security Fix(es):

    * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7077 advisory.

    * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33125 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)

    * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification     (CVE-2025-14831)

    * gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison (CVE-2026-3833)

    * gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment (CVE-2026-33845)

    * gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly     (CVE-2026-33846)

    * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)

    * gnutls: gnutls: Authentication Bypass via NUL Character in Username (CVE-2026-42010)

    * gnutls: gnutls: Security bypass due to incorrect name constraint handling (CVE-2026-42011)

    * gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs     (CVE-2026-42012)

    * gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name (CVE-2026-42013)

    * gnutls: gnutls: Information disclosure via heap overread in RSA key exchange (CVE-2026-5260)

    * gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin (CVE-2026-42014)

    * gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling (CVE-2026-42015)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 10.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3 advisory.

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and     xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated     against an XML schema with certain identity constraints, or a crafted XML schema must be used.
    (CVE-2024-56171)

  - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option>     elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods     (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
    (CVE-2020-11023)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes. (CVE-2024-55549)

  - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal. (CVE-2025-24855)

  - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and     1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files     outside of what it would otherwise have access to, which is an attack on integrity and confidentiality.
    When `persistent=subdir` is used in the application permissions (represented as `--persist=subdir` in the     command-line interface), that means that an application which otherwise doesn't have access to the real     user home directory will see an empty home directory with a writeable subdirectory `subdir`. Behind the     scenes, this directory is actually a bind mount and the data is stored in the per-application directory as     `~/.var/app/$APPID/subdir`. This allows existing apps that are not aware of the per-application directory     to still work as intended without general home directory access. However, the application does have write     access to the application directory `~/.var/app/$APPID` where this directory is stored. If the source     directory for the `persistent`/`--persist` option is replaced by a symlink, then the next time the     application is started, the bind mount will follow the symlink and mount whatever it points to into the     sandbox. Partial protection against this vulnerability can be provided by patching Flatpak using the     patches in commits ceec2ffc and 98f79773. However, this leaves a race condition that could be exploited by     two instances of a malicious app running in parallel. Closing the race condition requires updating or     patching the version of bubblewrap that is used by Flatpak to add the new `--bind-fd` option using the     patch and then patching Flatpak to use it. If Flatpak has been configured at build-time with     `-Dsystem_bubblewrap=bwrap` (1.15.x) or `--with-system-bubblewrap=bwrap` (1.14.x or older), or a similar     option, then the version of bubblewrap that needs to be patched is a system copy that is distributed     separately, typically `/usr/bin/bwrap`. This configuration is the one that is typically used in Linux     distributions. If Flatpak has been configured at build-time with `-Dsystem_bubblewrap=` (1.15.x) or with     `--without-system-bubblewrap` (1.14.x or older), then it is the bundled version of bubblewrap that is     included with Flatpak that must be patched. This is typically installed as `/usr/libexec/flatpak-bwrap`.
    This configuration is the default when building from source code. For the 1.14.x stable branch, these     changes are included in Flatpak 1.14.10. The bundled version of bubblewrap included in this release has     been updated to 0.6.3. For the 1.15.x development branch, these changes are included in Flatpak 1.15.10.
    The bundled version of bubblewrap in this release is a Meson wrap subproject, which has been updated to     0.10.0. The 1.12.x and 1.10.x branches will not be updated for this vulnerability. Long-term support OS     distributions should backport the individual changes into their versions of Flatpak and bubblewrap, or     update to newer versions if their stability policy allows it. As a workaround, avoid using applications     using the `persistent` (`--persist`) permission. (CVE-2024-42472)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large     number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even     crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial     of service attack.(CVE-2024-12133)

    Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input     data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libtasn1 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
297306	EulerOS Virtualization 2.10.1 : libtasn1 (EulerOS-SA-2026-1128)	Nessus	Huawei Local Security Checks	2026/1/31	2026/1/31	medium
216522	Fedora 41 : libtasn1 (2025-9b659aa327)	Nessus	Fedora Local Security Checks	2025/2/20	2026/1/21	medium
234715	Oracle Linux 8 : libtasn1 (ELSA-2025-4049)	Nessus	Oracle Linux Local Security Checks	2025/4/22	2026/1/21	medium
243073	RockyLinux 8 : libtasn1 (RLSA-2025:4049)	Nessus	Rocky Linux Local Security Checks	2025/7/30	2025/7/30	medium
237681	Amazon Linux 2023 : libtasn1, libtasn1-devel, libtasn1-tools (ALAS2023-2025-989)	Nessus	Amazon Linux Local Security Checks	2025/6/2	2026/1/21	medium
235813	RHEL 9 : libtasn1 (RHSA-2025:7077)	Nessus	Red Hat Local Security Checks	2025/5/13	2025/7/1	medium
266474	RockyLinux 9 : libtasn1 (RLSA-2025:7077)	Nessus	Rocky Linux Local Security Checks	2025/10/4	2025/10/4	medium
323873	RHEL 8 : gnutls and libtasn1 (RHSA-2026:33125)	Nessus	Red Hat Local Security Checks	2026/6/30	2026/6/30	critical
240537	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3)	Nessus	Misc.	2025/6/25	2026/8/13	high
347244	EulerOS Virtualization 2.11.0 : libtasn1 (EulerOS-SA-2026-3522)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

critical

high

high