The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11059:01 advisory.

    * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)
      * libtiff: Libtiff Write-What-Where (CVE-2025-9900)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-419c60783f advisory.

    Update to 2.1.0. Update bundled libpng, libtiff, to latest versions. Built against TCL/TK 9. Fix FTBFS.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0077 advisory.

    Spice client MSI installers for Windows clients

    Security Fix(es):

    * sqlite: Integer Truncation in SQLite (CVE-2025-6965)

    * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)

    * libtiff: Libtiff Write-What-Where (CVE-2025-9900)

    * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing (CVE-2025-59375)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0076 advisory.

    Spice client MSI installers for Windows clients

    Security Fix(es):

    * sqlite: Integer Truncation in SQLite (CVE-2025-6965)

    * libtiff: LibTIFF Use-After-Free Vulnerability (CVE-2025-8176)

    * libtiff: Libtiff Write-What-Where (CVE-2025-9900)

    * expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small     document that is submitted for parsing (CVE-2025-59375)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
283197	MiracleLinux 8 : mingw-libtiff-4.0.9-3.el8_10 (AXSA:2025-11059:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/13	medium
280111	Fedora 42 : tkimg (2025-419c60783f)	Nessus	Fedora Local Security Checks	2025/12/28	2026/2/19	critical
281860	RHEL 8 : spice-client-win (RHSA-2026:0077)	Nessus	Red Hat Local Security Checks	2026/1/6	2026/2/18	high
281886	RHEL 8 : spice-client-win (RHSA-2026:0076)	Nessus	Red Hat Local Security Checks	2026/1/6	2026/2/18	high

检测

插件搜索

medium

critical

high

high