The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9430 advisory.

    - Don't issue RC4 session keys by default (CVE-2025-3576)       Resolves: RHEL-88048

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:8411 advisory.

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15000 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10565:05 advisory.

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.103053. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103053 advisory.

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes. (CVE-2024-55549)

  - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal. (CVE-2025-24855)

  - An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not     vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font     files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value     causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed     long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This     vulnerability may have been exploited in the wild. (CVE-2025-27363)

  - A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity     expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat     can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could     lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the     environment and library usage. (CVE-2024-8176)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to     be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption     types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to     unauthorized message tampering.(CVE-2025-3576)

Tenable has extracted the preceding description block directly from the EulerOS krb5 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to     be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption     types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to     unauthorized message tampering.(CVE-2025-3576)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization krb5 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9418 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9430 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8411 advisory.

    - Don't issue RC4 session keys by default (CVE-2025-3576)       Resolves: RHEL-88049

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9977:03 advisory.

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:13777 advisory.

    Kerberos is a network authentication system, which can improve the security of your network by eliminating     the insecure practice of sending passwords over the network in unencrypted form. It allows clients and     servers to authenticate to each other with the help of a trusted third party, the Kerberos key     distribution center (KDC).

    Security Fix(es):

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9430 advisory.

    * krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions     (CVE-2025-3576)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in krb5. With incremental propagation enabled, an authenticated attacker can cause     kadmind to write beyond the end of the mapped region for the iprop log file. This issue can trigger a     process crash and lead to a denial of service.(CVE-2025-24528)

    A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to     be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption     types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to     unauthorized message tampering.(CVE-2025-3576)

    In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls     gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An     unauthenticated remote attacker can trigger this, causing the process to terminate in     parse_nego_message.(CVE-2026-40355)

    In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read     if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in     /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to     terminate in parse_message.(CVE-2026-40356)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization krb5 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
240480	Oracle Linux 9 : krb5 (ELSA-2025-9430)	Nessus	Oracle Linux Local Security Checks	2025/6/25	2025/6/25	medium
237724	AlmaLinux 8 : krb5 (ALSA-2025:8411)	Nessus	Alma Linux Local Security Checks	2025/6/3	2025/6/3	medium
278671	RHEL 9 : krb5 (RHSA-2025:15000)	Nessus	Red Hat Local Security Checks	2025/12/15	2025/12/15	medium
283082	MiracleLinux 9 : krb5-1.21.1-8.el9_6 (AXSA:2025-10565:05)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	medium
253665	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103053)	Nessus	Misc.	2025/8/22	2025/8/22	high
274849	EulerOS 2.0 SP12 : krb5 (EulerOS-SA-2025-2331)	Nessus	Huawei Local Security Checks	2025/11/12	2025/11/12	medium
274875	EulerOS 2.0 SP10 : krb5 (EulerOS-SA-2025-2391)	Nessus	Huawei Local Security Checks	2025/11/12	2025/11/12	medium
302623	EulerOS Virtualization 2.12.0 : krb5 (EulerOS-SA-2026-1491)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	medium
240425	RHEL 10 : krb5 (RHSA-2025:9418)	Nessus	Red Hat Local Security Checks	2025/6/25	2025/10/9	medium
240472	RHEL 9 : krb5 (RHSA-2025:9430)	Nessus	Red Hat Local Security Checks	2025/6/25	2025/10/9	medium
237720	Oracle Linux 8 : krb5 (ELSA-2025-8411)	Nessus	Oracle Linux Local Security Checks	2025/6/3	2025/6/3	medium
282806	MiracleLinux 8 : krb5-1.18.2-32.el8_10 (AXSA:2025-9977:03)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	medium
249261	RHEL 9 : krb5 (RHSA-2025:13777)	Nessus	Red Hat Local Security Checks	2025/8/14	2025/8/14	medium
266543	RockyLinux 9 : krb5 (RLSA-2025:9430)	Nessus	Rocky Linux Local Security Checks	2025/10/4	2025/10/4	medium
347125	EulerOS Virtualization 2.11.0 : krb5 (EulerOS-SA-2026-3512)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high
347993	EulerOS Virtualization 2.11.1 : krb5 (EulerOS-SA-2026-3425)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high

检测

插件搜索

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high