The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4158 advisory.

    The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java     Software Development Kit.

    Security Fix(es):

    * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)

    * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)

    * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)

    * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)

    * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)

    * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [rhel-9] (BZ#2223100)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:4158 advisory.

  - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of     Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.19,     17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7     and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via     multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for     JDK. Successful attacks require human interaction from a person other than the attacker. Successful     attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle     Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. Note: This     vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start     applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the     internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java     deployments, typically in servers, that load and run only trusted code (e.g., code installed by an     administrator). (CVE-2023-22006)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of     Oracle Java SE (component: Utility). Supported versions that are affected are Oracle Java SE: 11.0.19,     17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7     and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via     multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for     JDK. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial     of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK.
    Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web     service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in     clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run     untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.
    (CVE-2023-22036)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371-perf,     11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for     JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to     the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK     executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK.
    Successful attacks of this vulnerability can result in unauthorized access to critical data or complete     access to all Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data.
    Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web     Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from     the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java     deployments, typically in servers, that load and run only trusted code (e.g., code installed by an     administrator). (CVE-2023-22041)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u371,     8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle     GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise     Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read     access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible     data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a     web service which supplies data to the APIs. This vulnerability also applies to Java deployments,     typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load     and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for     security. (CVE-2023-22045)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of     Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u371,     8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle     GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker     with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise     Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle     GraalVM for JDK accessible data. Note: This vulnerability can be exploited by using APIs in the specified     Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to     Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java     applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java     sandbox for security. (CVE-2023-22049)

  - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via     consecutive marks during the process of looking back for base glyphs when attaching marks.
    (CVE-2023-25193)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:2980 advisory.

  - hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via     consecutive marks during the process of looking back for base glyphs when attaching marks.
    (CVE-2023-25193)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6268:14 advisory.

    * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
      * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
      * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
      * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
      * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
      * OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
      * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6263:12 advisory.

    * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
      * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
      * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
      * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
      * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
      * OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
      * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of thunderbird installed on the remote host is prior to 102.8.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1983 advisory.

    2024-02-15: CVE-2023-0616 was added to this advisory.

    If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to     process and display the message, which could cause Thunderbird's user interface to lock up and no longer     respond to the user's actions. An attacker could send a crafted message with this structure to attempt a     DoS attack. (CVE-2023-0616)

    firefox-esr , thunderbird and nss only are affected by this package. (CVE-2023-0767)

    hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via     consecutive marks during the process of looking back for base glyphs when attaching marks.
    (CVE-2023-25193)

    The Mozilla Foundation Security Advisory describes this flaw as:

    The `Content-Security-Policy-Report-Only` header could allow an attacker to leak a child iframe's     unredacted URI when interaction with that iframe triggers a redirect. (CVE-2023-25728)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Permission prompts for opening external schemes were only shown for `ContentPrincipals` resulting in     extensions being able to open them without user interaction via `ExpandedPrincipals`. This could lead to     further malicious actions such as downloading files or interacting with software already installed on the     system. (CVE-2023-25729)

    The Mozilla Foundation Security Advisory describes this flaw as:

    A background script invoking `requestFullscreen` and then blocking the main thread could force the browser     into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks.
    (CVE-2023-25730)

    Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters     could potentially be used to overwrite global objects in privileged code. (CVE-2023-25731)

    When encoding data from an inputStream in xpcom the size of the input being encoded was not correctly     calculated potentially leading to an out of bounds memory write. (CVE-2023-25732)

    The Mozilla Foundation Security Advisory describes this flaw as:

    After downloading a Windows `.url` shortcut from the local filesystem, an attacker could supply a remote     path that would lead to unexpected network requests from the operating system.  This also had the     potential to leak NTLM credentials to the resource.

    *This bug only affects Firefox on Windows. Other operating systems are unaffected.* (CVE-2023-25734)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to     be stored in the main compartment resulting in a use-after-free after unwrapping the proxy.
    (CVE-2023-25735)

    The Mozilla Foundation Security Advisory describes this flaw as:

    An invalid downcast from `nsTextNode` to `SVGElement` could have lead to undefined behavior.
    (CVE-2023-25737)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Module load requests that failed were not being checked as to whether or not they were cancelled causing a     use-after-free in `ScriptLoadContext`. (CVE-2023-25739)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab     to crash. (CVE-2023-25742)

    Mozilla Foundation Security Advisory:

    Mozilla developers Philipp and Gabriele Svelto reported memory safety bugs present in Firefox ESR 102.7.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2023-25746)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
178634	RHEL 9 : java-11-openjdk (RHSA-2023:4158)	Nessus	Red Hat Local Security Checks	2023/7/20	2025/3/14	medium
178724	AlmaLinux 9 : java-11-openjdk (ALSA-2023:4158)	Nessus	Alma Linux Local Security Checks	2023/7/21	2023/7/21	medium
197691	CentOS 8 : harfbuzz (CESA-2024:2980)	Nessus	CentOS Local Security Checks	2024/5/22	2024/5/22	high
291834	MiracleLinux 9 : java-17-openjdk-17.0.8.0.7-2.el9.ML.1 (AXSA:2023-6268:14)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
292506	MiracleLinux 8 : java-17-openjdk-17.0.8.0.7-2.el8 (AXSA:2023-6263:12)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
172153	Amazon Linux 2 : thunderbird (ALAS-2023-1983)	Nessus	Amazon Linux Local Security Checks	2023/3/7	2024/12/11	high

检测

插件搜索

medium

medium

high

medium

medium

high