The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-257:03 advisory.

    * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-     separated parameters (CVE-2025-59830)
      * rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) (CVE-2025-61770)
      * rack: Rack's multipart parser buffers large non?file fields entirely in memory, enabling DoS (memory     exhaustion) (CVE-2025-61771)
      * rack: Rack memory exhaustion denial of service (CVE-2025-61772)
      * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion     (CVE-2025-61919)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19513 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-     separated parameters (CVE-2025-59830)

    * rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) (CVE-2025-61770)

    * rack: Rack's multipart parser buffers large non?file fields entirely in memory, enabling DoS (memory     exhaustion) (CVE-2025-61771)

    * rack: Rack memory exhaustion denial of service (CVE-2025-61772)

    * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion     (CVE-2025-61919)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19513 advisory.

    [0.12.0-3.0.1.el10_0.3]
    - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled     rubygem rack       Resolves: RHEL-120943, RHEL-121036, RHEL-123631, RHEL-123644, RHEL-124942

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19856 advisory.

    Red Hat Satellite is a system management solution that allows organizations     to configure and maintain their systems without the necessity to provide     public Internet access to their servers or other client systems. It     performs provisioning and configuration management of predefined standard     operating environments.

    Security Fix(es):

    * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-     separated parameters (CVE-2025-59830)

    * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion     (CVE-2025-61919)

    * foreman: OS command injection via ct_location and fcct_location parameters (CVE-2025-10622)

    Users of Red Hat Satellite are advised to upgrade to these updated     packages, which fix these bugs.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:19512 advisory.

    * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-     separated parameters (CVE-2025-59830)

    * rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) (CVE-2025-61770)

    * rack: Rack's multipart parser buffers large non?file fields entirely in memory, enabling DoS (memory     exhaustion) (CVE-2025-61771)

    * rack: Rack memory exhaustion denial of service (CVE-2025-61772)

    * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion     (CVE-2025-61919)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21036 advisory.

    The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

    Security Fix(es):

    * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-     separated parameters (CVE-2025-59830)

    * rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) (CVE-2025-61770)

    * rack: Rack's multipart parser buffers large non?file fields entirely in memory, enabling DoS (memory     exhaustion) (CVE-2025-61771)

    * rack: Rack memory exhaustion denial of service (CVE-2025-61772)

    * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion     (CVE-2025-61919)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a35addbf9b advisory.

    Update to Rack 2.2.21



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20962 advisory.

    * rubygem-rack: Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-     separated parameters (CVE-2025-59830)

    * rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) (CVE-2025-61770)

    * rack: Rack's multipart parser buffers large non?file fields entirely in memory, enabling DoS (memory     exhaustion) (CVE-2025-61771)

    * rack: Rack memory exhaustion denial of service (CVE-2025-61772)

    * rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion     (CVE-2025-61919)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790610331 advisory.

  - Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack's media     type parser to take much longer than expected, leading to a possible denial of service vulnerability     (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1. (CVE-2024-25126)

  - Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond     with an unexpectedly large response. Responding with such large responses could lead to a denial of     service issue. Vulnerable applications will use the `Rack::File` middleware or the     `Rack::Utils.byte_ranges` methods (this includes Rails applications). The vulnerability is fixed in     3.0.9.1 and 2.2.8.1. (CVE-2024-26141)

  - Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to     take longer than expected resulting in a possible denial of service issue. Accept and Forwarded headers     are impacted. Ruby 3.2 has mitigations for this problem, so Rack applications using Ruby 3.2 or newer are     unaffected. This vulnerability is fixed in 2.0.9.4, 2.1.4.4, 2.2.8.1, and 3.0.9.1. (CVE-2024-26146)

  - Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its     params_limit only for parameters separated by &, while still splitting on both & and ;. As a result,     attackers could use ; separators to bypass the parameter count limit and submit more parameters than     intended. Applications or middleware that directly invoke Rack::QueryParser with its default configuration     (no explicit delimiter) could be exposed to increased CPU and memory consumption. This can be abused as a     limited denial-of-service vector. This issue has been patched in version 2.2.18. (CVE-2025-59830)

  - Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2,     `Rack::Multipart::Parser` buffers the entire multipart preamble (bytes before the first boundary) in     memory without any size limit. A client can send a large preamble followed by a valid boundary, causing     significant memory use and potential process termination due to out-of-memory (OOM) conditions. Remote     attackers can trigger large transient memory spikes by including a long preamble in multipart/form-data     requests. The impact scales with allowed request sizes and concurrency, potentially causing worker crashes     or severe slowdown due to garbage collection. Versions 2.2.19, 3.1.17, and 3.2.2 enforce a preamble size     limit (e.g., 16 KiB) or discard preamble data entirely. Workarounds include limiting total request body     size at the proxy or web server level and monitoring memory and set per-process limits to prevent OOM     conditions. (CVE-2025-61770)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792125039 advisory.

  - decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. (CVE-2022-38900)

  - Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack's media     type parser to take much longer than expected, leading to a possible denial of service vulnerability     (ReDos 2nd degree polynomial). This vulnerability is patched in 3.0.9.1 and 2.2.8.1. (CVE-2024-25126)

  - Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its     params_limit only for parameters separated by &, while still splitting on both & and ;. As a result,     attackers could use ; separators to bypass the parameter count limit and submit more parameters than     intended. Applications or middleware that directly invoke Rack::QueryParser with its default configuration     (no explicit delimiter) could be exposed to increased CPU and memory consumption. This can be abused as a     limited denial-of-service vector. This issue has been patched in version 2.2.18. (CVE-2025-59830)

  - Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2,     `Rack::Multipart::Parser` buffers the entire multipart preamble (bytes before the first boundary) in     memory without any size limit. A client can send a large preamble followed by a valid boundary, causing     significant memory use and potential process termination due to out-of-memory (OOM) conditions. Remote     attackers can trigger large transient memory spikes by including a long preamble in multipart/form-data     requests. The impact scales with allowed request sizes and concurrency, potentially causing worker crashes     or severe slowdown due to garbage collection. Versions 2.2.19, 3.1.17, and 3.2.2 enforce a preamble size     limit (e.g., 16 KiB) or discard preamble data entirely. Workarounds include limiting total request body     size at the proxy or web server level and monitoring memory and set per-process limits to prevent OOM     conditions. (CVE-2025-61770)

  - Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2,     ``Rack::Multipart::Parser` stores non-file form fields (parts without a `filename`) entirely in memory as     Ruby `String` objects. A single large text field in a multipart/form-data request (hundreds of megabytes     or more) can consume equivalent process memory, potentially leading to out-of-memory (OOM) conditions and     denial of service (DoS). Attackers can send large non-file fields to trigger excessive memory usage.
    Impact scales with request size and concurrency, potentially leading to worker crashes or severe garbage-     collection overhead. All Rack applications processing multipart form submissions are affected. Versions     2.2.19, 3.1.17, and 3.2.2 enforce a reasonable size cap for non-file fields (e.g., 2 MiB). Workarounds     include restricting maximum request body size at the web-server or proxy layer (e.g., Nginx     `client_max_body_size`) and validating and rejecting unusually large form fields at the application level.
    (CVE-2025-61771)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1790243751 advisory.

  - REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an     XML that has many digits between &# and x...; in a hex numeric character reference (&#x...;). This does     not happen with Ruby 3.2 or later. Ruby 3.1 is the only affected maintained Ruby. The REXML gem 3.3.9 or     later include the patch to fix the vulnerability. (CVE-2024-49761)

  - Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its     params_limit only for parameters separated by &, while still splitting on both & and ;. As a result,     attackers could use ; separators to bypass the parameter count limit and submit more parameters than     intended. Applications or middleware that directly invoke Rack::QueryParser with its default configuration     (no explicit delimiter) could be exposed to increased CPU and memory consumption. This can be abused as a     limited denial-of-service vector. This issue has been patched in version 2.2.18. (CVE-2025-59830)

  - Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2,     `Rack::Multipart::Parser` buffers the entire multipart preamble (bytes before the first boundary) in     memory without any size limit. A client can send a large preamble followed by a valid boundary, causing     significant memory use and potential process termination due to out-of-memory (OOM) conditions. Remote     attackers can trigger large transient memory spikes by including a long preamble in multipart/form-data     requests. The impact scales with allowed request sizes and concurrency, potentially causing worker crashes     or severe slowdown due to garbage collection. Versions 2.2.19, 3.1.17, and 3.2.2 enforce a preamble size     limit (e.g., 16 KiB) or discard preamble data entirely. Workarounds include limiting total request body     size at the proxy or web server level and monitoring memory and set per-process limits to prevent OOM     conditions. (CVE-2025-61770)

  - Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2,     ``Rack::Multipart::Parser` stores non-file form fields (parts without a `filename`) entirely in memory as     Ruby `String` objects. A single large text field in a multipart/form-data request (hundreds of megabytes     or more) can consume equivalent process memory, potentially leading to out-of-memory (OOM) conditions and     denial of service (DoS). Attackers can send large non-file fields to trigger excessive memory usage.
    Impact scales with request size and concurrency, potentially leading to worker crashes or severe garbage-     collection overhead. All Rack applications processing multipart form submissions are affected. Versions     2.2.19, 3.1.17, and 3.2.2 enforce a reasonable size cap for non-file fields (e.g., 2 MiB). Workarounds     include restricting maximum request body size at the web-server or proxy layer (e.g., Nginx     `client_max_body_size`) and validating and rejecting unusually large form fields at the application level.
    (CVE-2025-61771)

  - Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to     6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default     100MB). Since parsing occurs synchronously on the main thread, this creates the possibility of denial-of-     service due to the cost of parsing very large multipart bodies with many parts. This vulnerability is     fixed in 6.5.5. (CVE-2026-31958)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
301100	MiracleLinux 9 : pcs-0.11.10-1.el9_7.1.ML.1 (AXSA:2026-257:03)	Nessus	Miracle Linux Local Security Checks	2026/3/6	2026/3/6	high
272234	RHEL 10 : pcs (RHSA-2025:19513)	Nessus	Red Hat Local Security Checks	2025/11/4	2025/11/4	high
274515	Oracle Linux 10 : pcs (ELSA-2025-19513)	Nessus	Oracle Linux Local Security Checks	2025/11/7	2025/11/7	high
274588	RHEL 8 : Satellite 6.15.5.6 Async Update (Important) (RHSA-2025:19856)	Nessus	Red Hat Local Security Checks	2025/11/10	2025/11/10	high
274603	RockyLinux 9 : pcs (RLSA-2025:19512)	Nessus	Rocky Linux Local Security Checks	2025/11/10	2025/11/10	high
274826	RHEL 10 : pcs (RHSA-2025:21036)	Nessus	Red Hat Local Security Checks	2025/11/11	2025/11/11	high
275257	Fedora 41 : rubygem-rack (2025-a35addbf9b)	Nessus	Fedora Local Security Checks	2025/11/12	2025/11/12	high
276540	RockyLinux 9 : pcs (RLSA-2025:20962)	Nessus	Rocky Linux Local Security Checks	2025/11/22	2025/11/22	high
362172	CentOS Linux 8.4 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790610331)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	high
366404	AlmaLinux 9.2 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792125039)	Nessus	Alma Linux Local Security Checks	2026/10/16	2026/10/19	high
359923	CentOS Linux 8 [TuxCare] Security Update: pcs / pcs-snmp Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1790243751)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high