The remote host is affected by the vulnerability described in GLSA-201412-11 (AMD64 x86 emulation base libraries: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in AMD64 x86 emulation       base libraries. Please review the CVE identifiers referenced below for       details.
  Impact :

    A context-dependent attacker may be able to execute arbitrary code,       cause a Denial of Service condition, or obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-007 applied. 

This security update contains fixes for the following products :

  - AFP Server
  - Apache mod_perl
  - ATS
  - CFNetwork
  - CoreGraphics
  - CoreText
  - CUPS
  - Directory Services
  - diskdev_cmds
  - Disk Images
  - Flash Player plug-in
  - gzip
  - ImageIO
  - Image RAW
  - MySQL
  - Password Server
  - PHP
  - Printing
  - python
  - QuickLook
  - Safari RSS
  - Wiki Server
  - X11

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-387:01 advisory.

    The libpng package contains a library of functions for creating and manipulating PNG (Portable Network     Graphics) image format files.  PNG is a bit-mapped graphics format similar to the GIF format.  PNG was     created to replace the GIF format, since GIF uses a patented data compression algorithm.
    Libpng should be installed if you need to manipulate PNG format image     Security issues fixed with this release:
    CVE-2009-2042     libpng before 1.2.37 does not properly parse 1-bit interlaced images with width values that are not     divisible by 8, which causes libpng to include uninitialized bits in certain rows of a PNG file and might     allow remote attackers to read portions of sensitive memory via out-of-bounds pixels in the file.
    CVE-2010-0205     The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and     1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately     large uncompressed representation, which allows remote attackers to cause a denial of service (memory and     CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate     compression method on data composed of many occurrences of the same character, related to a decompression     bomb attack.
    CVE-2010-1205     Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive     applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an     additional data row.
    CVE-2010-2249     Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to     cause a denial of service (memory consumption and application crash) via a PNG image containing malformed     Physical Scale (aka sCAL) chunks.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
79964	GLSA-201412-11 : AMD64 x86 emulation base libraries: Multiple vulnerabilities (Heartbleed)	Nessus	Gentoo Local Security Checks	2014/12/15	2022/5/5	critical
50549	Mac OS X Multiple Vulnerabilities (Security Update 2010-007)	Nessus	MacOS X Local Security Checks	2010/11/10	2024/5/28	critical
284118	MiracleLinux 3 : libpng-1.2.10-7.1.3.0.1.AXS3 (AXSA:2010-387:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical

检测

插件搜索

critical

critical

critical