According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization sudo security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-10110 advisory.

    [1.9.5p2-1.0.1]
    - Fixes sudo -s unclosed sessions when use_pty option used   [Orabug: 36952911]

    [1.9.5p2-10.1]     RHEL 8.10.0.Z ERRATUM
    - CVE-2025-32462 sudo: LPE via host option     Resolves: RHEL-100014

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0106 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-32462:
    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:10518 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: LPE via host option (CVE-2025-32462)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2025_10110 advisory.

    * sudo: LPE via host option (CVE-2025-32462)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1751913242 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24f4b495-56a1-11f0-9621-93abbef07693 advisory.

    Todd C. Miller reports, crediting Rich Mirch from Stratascale Cyber Research Unit (CRU):
    Sudo 1.9.17p1:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0513 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-32463:
    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-     controlled directory is used with the --chroot option.

    CVE-2025-32462:
    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11537 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: LPE via host option (CVE-2025-32462)

    * sudo: LPE via chroot option (CVE-2025-32463)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 10.0.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.3 advisory.

  - LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize),     affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data     corruption.) NOTE: the vendor states only a few specific / uncommon usages of the API are at risk.
    (CVE-2019-17543)

  - setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python     packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version     78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the     permissions of the process running the Python code, which could escalate to remote code execution     depending on the context. Version 78.1.1 fixes the issue. (CVE-2025-47273)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

  - A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations     can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of     service when processing crafted input. (CVE-2025-6021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
297311	EulerOS Virtualization 2.10.1 : sudo (EulerOS-SA-2026-1147)	Nessus	Huawei Local Security Checks	2026/1/31	2026/4/30	high
297358	EulerOS Virtualization 2.10.0 : sudo (EulerOS-SA-2026-1198)	Nessus	Huawei Local Security Checks	2026/1/31	2026/4/30	high
241222	Oracle Linux 8 : sudo (ELSA-2025-10110)	Nessus	Oracle Linux Local Security Checks	2025/7/2	2026/4/30	low
241393	Alibaba Cloud Linux 3 : 0106: sudo (ALINUX3-SA-2025:0106)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/7/7	2025/7/7	low
241496	RHEL 8 : sudo (RHSA-2025:10518)	Nessus	Red Hat Local Security Checks	2025/7/7	2025/7/7	low
357787	Rocky Linux 8 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource (crlsa-2025_10110)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	high
361839	CentOS Linux 8 [TuxCare] Security Update: sudo / sudo-devel (CENTOS-STREAM8:CLSA-2025:1751913242)	Nessus	CentOS Local Security Checks	2026/10/1	2026/10/2	high
241125	FreeBSD : sudo -- privilege escalation vulnerability through host and chroot options (24f4b495-56a1-11f0-9621-93abbef07693)	Nessus	FreeBSD Local Security Checks	2025/7/1	2026/4/30	high
241458	TencentOS Server 4: sudo (TSSA-2025:0513)	Nessus	Tencent Local Security Checks	2025/7/7	2025/12/17	high
242571	RHEL 10 : sudo (RHSA-2025:11537)	Nessus	Red Hat Local Security Checks	2025/7/22	2025/10/9	high
258029	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.3)	Nessus	Misc.	2025/8/27	2026/8/13	high

检测

插件搜索

high

high

low

low

low

high

high

high

high

high

high