The version of AHV installed on the remote host is prior to 20230302.103084. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103084 advisory.

  - A vulnerability has been identified in the libarchive library, specifically within the     archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately     lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption,     enabling an attacker to execute arbitrary code or cause a denial-of-service condition. (CVE-2025-5914)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
    Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer     dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service     (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to     potential disruptions in system availability and stability. This vulnerability has been patched in version     41.0.6. (CVE-2023-49083)

  - There is a defect in the CPython tarfile module affecting the TarFile extraction and entry enumeration     APIs. The tar implementation would process tar archives with negative offsets without error, resulting in     an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability     can be mitigated by including the following patch after importing the tarfile module:
    https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1 (CVE-2025-8194)

  - Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into     Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted     Computing Group, is prone to a potential out of bounds (OOB) read vulnerability. The vulnerability occurs     in the CryptHmacSign' function with an inconsistent pairing of the signKey and signScheme parameters,     where the signKey is ALG_KEYEDHASH key and inScheme is an ECC or RSA scheme. The reported vulnerability is     in the CryptHmacSign' function, which is defined in the Part 4: Supporting Routines  Code document,     section 7.151 - /tpm/src/crypt/CryptUtil.c . This vulnerability can be triggered from user-mode     applications by sending malicious commands to a TPM 2.0/vTPM (swtpm) whose firmware is based on an     affected TCG reference implementation. The effect on libtpms is that it will cause an abort due to the     detection of the out-of-bounds access, thus for example making a vTPM (swtpm) unavailable to a VM. This     vulnerability is fixed in 0.7.12, 0.8.10, 0.9.7, and 0.10.1. (CVE-2025-49133)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:14553 advisory.

    * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:15874 advisory.

    * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 10.0.1.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.5 advisory.

  - A vulnerability has been identified in the libarchive library, specifically within the     archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately     lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption,     enabling an attacker to execute arbitrary code or cause a denial-of-service condition. (CVE-2025-5914)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - There is a defect in the CPython tarfile module affecting the TarFile extraction and entry enumeration     APIs. The tar implementation would process tar archives with negative offsets without error, resulting in     an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability     can be mitigated by including the following patch after importing the tarfile module:
    https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1 (CVE-2025-8194)

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
    Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer     dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service     (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to     potential disruptions in system availability and stability. This vulnerability has been patched in version     41.0.6. (CVE-2023-49083)

  - AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output     neutralization vulnerability in AIDE. An attacker can craft a malicious filename by including terminal     escape sequences to hide the addition or removal of the file from the report and/or tamper with the log     output. A local user might exploit this to bypass the AIDE detection of malicious files. Additionally the     output of extended attribute key names and symbolic links targets are also not properly neutralized. This     issue has been patched in version 0.19.2. A workaround involves configuring AIDE to write the report     output to a regular file, redirecting stdout to a regular file, or redirecting the log output written to     stderr to a regular file. (CVE-2025-54389)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2024_3105 advisory.

    * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle Business Intelligence Enterprise Edition (OAS) 7.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory, including the following:

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Server (Stanford CoreNLP)). The supported version that is affected is 7.0.0.0.0.     Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can     result in takeover of Oracle Business Intelligence Enterprise Edition. (CVE-2022-0239)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Server (OpenSSL)). Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0     and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the     infrastructure where Oracle Business Intelligence Enterprise Edition executes to compromise Oracle     Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person     other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete DOS) of Oracle Business Intelligence Enterprise     Edition. (CVE-2024-0727)

  - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics     (component: Analytics Web Answers). Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and     12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP     to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human     interaction from a person other than the attacker and while the vulnerability is in Oracle Business     Intelligence Enterprise Edition, attacks may significantly impact additional products (scope change).     Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to     some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read     access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. (CVE-2024-21139)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202407-06 (cryptography: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in cryptography. Please review the CVE identifiers     referenced below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1640 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * automation-controller: Django: denial-of-service in 'intcomma' template filter (CVE-2024-24680)
    * automation-controller: aiohttp: http request smuggling (CVE-2024-23829)
    * automation-controller: aiohttp: follow_symlinks directory traversal vulnerability (CVE-2024-23334)
    * automation-controller: Jinja2: HTML attribute injection when passing user input as keys to xmlattr     filter (CVE-2024-22195)
    * automation-controller: cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)
    * automation-controller: aiohttp: numerous issues in HTTP parser with header parsing (CVE-2023-47627)
    * automation-controller: Twisted: disordered HTTP pipeline response in twisted.web (CVE-2023-46137)
    * automation-controller: axios: exposure of confidential data stored in cookies (CVE-2023-45857)
    * automation-controller: GitPython: Blind local file inclusion (CVE-2023-41040)
    * python3-aiohttp/python39-aiohttp: http request smuggling (CVE-2024-23829)
    * python3-aiohttp/python39-aiohttp: follow_symlinks directory traversal vulnerability (CVE-2024-23334)
    * python3-django/python39-django: Potential regular expression denial-of-service in     django.utils.text.Truncator.words() (CVE-2024-27351)
    * receptor: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads     (CVE-2024-1394)
    * receptor: golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests     (CVE-2023-39326)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Updates and fixes for automation controller:
    * Fixed bug where schedule prompted variables and survey answers were reset on edit when changing one of     the basic form fields (AAP-20967)
    * Fixed the update execution environment image to no longer fail jobs that use the previous image     (AAP-21733)
    * Removed string validation using comparisons of English literals for comparison, replacing validation     with error/op codes as a universal approach to validation and comparison (AAP-21721)
    * Fixed dispatcher to appropriately terminate child processes when dispatcher terminates (AAP-21049)
    * Fixed upgrade from Ansible Tower 3.8.6 to AAP 2.4 to no longer fail upon database schema migration     (AAP-19738)
    * automation-controller has been updated to 4.5.5

    Updates and fixes for receptor:
    * Fixes a receptor dialing issue where the connection attempt is timed out too aggressively (AAP-21838,     AAP-21828)
    * receptor has been updated to 1.4.5

    Additional fixes:
    * ansible-core has been updated to 2.15.10
    * ansible-runner has been updated to 2.3.6
    * python3-aiohttp/python39-aiohttp has been updated to 3.9.3
    * python3-django/python39-django has been updated  4.2.11
    * python3-pulpcore/python39-pulpcore has been updated 3.28.24

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-2337 advisory.

    - Security fix for CVE-2023-49083

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
    Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer     dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service     (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to     potential disruptions in system availability and stability. This vulnerability has been patched in version     41.0.6. (CVE-2023-49083)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of AHV installed on the remote host is prior to 11.0. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0 advisory.

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and     xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated     against an XML schema with certain identity constraints, or a crafted XML schema must be used.
    (CVE-2024-56171)

  - ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings     in tinfo/read_entry.c in the terminfo library. (CVE-2022-29458)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes. (CVE-2024-55549)

  - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal. (CVE-2025-24855)

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-8275:02 advisory.

    * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:14553 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0825 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-49083:
    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
    Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer     dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service     (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to     potential disruptions in system availability and stability. This vulnerability has been patched in version     41.0.6.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:13101 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:13100 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python-cryptography: NULL-dereference when loading PKCS7 certificates (CVE-2023-49083)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python3 package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
277140	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103084)	Nessus	Misc.	2025/12/3	2026/2/27	high
261711	RockyLinux 8 : python-cryptography (RLSA-2025:14553)	Nessus	Rocky Linux Local Security Checks	2025/9/8	2025/9/8	high
269938	RockyLinux 9 : python-cryptography (RLSA-2025:15874)	Nessus	Rocky Linux Local Security Checks	2025/10/10	2025/10/10	high
304370	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.5)	Nessus	Misc.	2026/3/31	2026/8/13	high
353845	Rocky Linux 8 [CIQ] Security Update: python3.11-cryptography / python3.11-cryptography-debuginfo / etc (crlsa-2024_3105)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/5	high
202907	Oracle Business Intelligence Enterprise Edition (OAS 7.0) (July 2024 CPU)	Nessus	Misc.	2024/7/22	2024/7/23	critical
201182	GLSA-202407-06 : cryptography: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/7/1	2024/7/1	critical
193086	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:1640)	Nessus	Red Hat Local Security Checks	2024/4/9	2026/1/21	critical
195063	Oracle Linux 9 : python3.11-cryptography (ELSA-2024-2337)	Nessus	Oracle Linux Local Security Checks	2024/5/6	2025/9/9	high
227344	Linux Distros Unpatched Vulnerability : CVE-2023-49083	Nessus	Misc.	2025/3/5	2026/8/5	high
278723	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0)	Nessus	Misc.	2025/12/15	2026/8/13	high
293002	MiracleLinux 8 : python3.11-cryptography-37.0.2-6.el8 (AXSA:2024-8275:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
255192	RHEL 8 : python-cryptography (RHSA-2025:14553)	Nessus	Red Hat Local Security Checks	2025/8/26	2025/8/26	high
238611	TencentOS Server 4: python-cryptography (TSSA-2024:0825)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
243923	RHEL 9 : python-cryptography (RHSA-2025:13101)	Nessus	Red Hat Local Security Checks	2025/8/6	2025/8/6	high
243927	RHEL 8 : python-cryptography (RHSA-2025:13100)	Nessus	Red Hat Local Security Checks	2025/8/6	2025/8/6	high
204436	Photon OS 5.0: Python3 PHSA-2024-5.0-0187	Nessus	PhotonOS Local Security Checks	2024/7/24	2026/10/13	medium

检测

插件搜索

high

high

high

high

high

critical

critical

critical

high

high

high

high

high

high

high

high

medium