The remote Ubuntu 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7206-3 advisory.

    USN-7206-1 fixed vulnerabilities in Ubuntu 14.04 LTS to Ubuntu 24.04 LTS. This update provides the     corresponding updates for Ubuntu 24.10.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7206-1 advisory.

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync did not properly handle checksum     lengths. An attacker could use this issue to execute arbitrary code. (CVE-2024-12084)

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync compared checksums with     uninitialized memory. An attacker could exploit this issue to leak sensitive information. (CVE-2024-12085)

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync incorrectly handled file     checksums. A malicious server could use this to expose arbitrary client files. (CVE-2024-12086)

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync mishandled symlinks for some     settings. An attacker could exploit this to write files outside the intended directory. (CVE-2024-12087)

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync failed to verify symbolic link     destinations for some settings. An attacker could exploit this for path traversal attacks.
    (CVE-2024-12088)

    Aleksei Gorban discovered a race condition in rsync's handling of symbolic links. An attacker could use     this to access sensitive information or escalate privileges. (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202501-01 (rsync: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in rsync. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of rsync installed on the remote host is prior to 3.0.6-12.17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1955 advisory.

    A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This     flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a     checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
    (CVE-2024-12085)

    A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the     client's machine. This issue occurs when files are being copied from a client to a server. During this     process, the rsync server will send checksums of local data to the client to compare with in order to     determine what data needs to be sent to the server. By sending specially constructed checksum values for     arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the     responses from the client. (CVE-2024-12086)

    A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client. (CVE-2024-12087)

    A flaw was found in rsync. When using the `--safe-links` option, rsync fails to properly verify if a     symbolic link destination contains another symbolic link within it. This results in a path traversal     vulnerability, which may lead to arbitrary file write outside the desired directory. (CVE-2024-12088)

    A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation. (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the rsync package has been released.

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:1330-1 advisory.

    - Fixed bwlimit=0 option broken by CVE-2024-12088 fix (bsc#1239649).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 10.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3 advisory.

  - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and     xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated     against an XML schema with certain identity constraints, or a crafted XML schema must be used.
    (CVE-2024-56171)

  - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option>     elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods     (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
    (CVE-2020-11023)

  - xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result     prefixes. (CVE-2024-55549)

  - numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath     context node can be modified but never restored. This is related to xsltNumberFormatGetValue,     xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal. (CVE-2025-24855)

  - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and     1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files     outside of what it would otherwise have access to, which is an attack on integrity and confidentiality.
    When `persistent=subdir` is used in the application permissions (represented as `--persist=subdir` in the     command-line interface), that means that an application which otherwise doesn't have access to the real     user home directory will see an empty home directory with a writeable subdirectory `subdir`. Behind the     scenes, this directory is actually a bind mount and the data is stored in the per-application directory as     `~/.var/app/$APPID/subdir`. This allows existing apps that are not aware of the per-application directory     to still work as intended without general home directory access. However, the application does have write     access to the application directory `~/.var/app/$APPID` where this directory is stored. If the source     directory for the `persistent`/`--persist` option is replaced by a symlink, then the next time the     application is started, the bind mount will follow the symlink and mount whatever it points to into the     sandbox. Partial protection against this vulnerability can be provided by patching Flatpak using the     patches in commits ceec2ffc and 98f79773. However, this leaves a race condition that could be exploited by     two instances of a malicious app running in parallel. Closing the race condition requires updating or     patching the version of bubblewrap that is used by Flatpak to add the new `--bind-fd` option using the     patch and then patching Flatpak to use it. If Flatpak has been configured at build-time with     `-Dsystem_bubblewrap=bwrap` (1.15.x) or `--with-system-bubblewrap=bwrap` (1.14.x or older), or a similar     option, then the version of bubblewrap that needs to be patched is a system copy that is distributed     separately, typically `/usr/bin/bwrap`. This configuration is the one that is typically used in Linux     distributions. If Flatpak has been configured at build-time with `-Dsystem_bubblewrap=` (1.15.x) or with     `--without-system-bubblewrap` (1.14.x or older), then it is the bundled version of bubblewrap that is     included with Flatpak that must be patched. This is typically installed as `/usr/libexec/flatpak-bwrap`.
    This configuration is the default when building from source code. For the 1.14.x stable branch, these     changes are included in Flatpak 1.14.10. The bundled version of bubblewrap included in this release has     been updated to 0.6.3. For the 1.15.x development branch, these changes are included in Flatpak 1.15.10.
    The bundled version of bubblewrap in this release is a Meson wrap subproject, which has been updated to     0.10.0. The 1.12.x and 1.10.x branches will not be updated for this vulnerability. Long-term support OS     distributions should backport the individual changes into their versions of Flatpak and bubblewrap, or     update to newer versions if their stability policy allows it. As a workaround, avoid using applications     using the `persistent` (`--persist`) permission. (CVE-2024-42472)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0506 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1366 advisory.

    This advisory aggregates security fixes for the rsync SRPM in CIQ LTS 9.4. It addresses 3 CVEs:
    CVE-2024-12087, CVE-2024-12088, CVE-2024-12747.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
214724	Ubuntu 24.10 : rsync vulnerabilities (USN-7206-3)	Nessus	Ubuntu Local Security Checks	2025/1/28	2025/6/19	high
214143	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : rsync vulnerabilities (USN-7206-1)	Nessus	Ubuntu Local Security Checks	2025/1/14	2025/6/19	high
214234	GLSA-202501-01 : rsync: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2025/1/15	2025/6/19	high
214285	Amazon Linux AMI : rsync (ALAS-2025-1955)	Nessus	Amazon Linux Local Security Checks	2025/1/17	2025/6/23	high
214381	Photon OS 4.0: Rsync PHSA-2025-4.0-0735	Nessus	PhotonOS Local Security Checks	2025/1/18	2025/6/19	high
234544	SUSE SLES12 Security Update : rsync (SUSE-SU-2025:1330-1)	Nessus	SuSE Local Security Checks	2025/4/17	2025/4/17	medium
240537	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3)	Nessus	Misc.	2025/6/25	2026/8/13	high
315752	Splunk Universal Forwarder 9.4.0 < 9.4.11 (SVD-2026-0506)	Nessus	CGI abuses	2026/5/20	2026/10/6	critical
354185	Rocky Linux 9.4 [CIQ] Security Update: rsync / rsync-daemon / rsync-debuginfo / rsync-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_1366)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/5	high

检测

插件搜索

high

high

high

high

high

medium

high

critical

high