There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-
    Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a
    information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
    (CVE-2020-6104)

  - An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools
    F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code
    execution. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2020-6105)

  - An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-
    Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used to disclose information. An
    attacker can provide a malicious file to trigger this vulnerability. (CVE-2020-6106)

  - An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools
    F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an
    information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
    (CVE-2020-6107)

  - An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools
    F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code
    execution. An attacker can provide a malicious file to trigger this vulnerability. (CVE-2020-6108)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - F2fs-Tools F2fs.Fsck 1.13的 dev_read 功能中存在一個可遭惡意利用的資訊洩漏弱點。特製的 f2fs 檔案系統可造成未初始化的讀取進而導致資訊洩漏。攻擊者可能透過提供惡意檔案，來觸發此弱點。
    (CVE-2020-6107)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - F2fs-Tools F2fs.Fsck 的 dev_read 功能中存在一个可利用的信息泄露漏洞 1.13。特别构建的 f2fs 文件系统可造成未初始化读取从而导致信息泄露。攻击者可提供恶意路径来触发此漏洞。
    (CVE-2020-6107)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

遠端主機受到 GLSA-202101-26 中所述的弱點影響 (f2fs-tools：多個弱點)

    在 f2fs-tools 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。
  影響：

    如需詳細資料，請檢閱提及的 CVE 識別碼。
  因應措施：

    目前尚無已知的因應措施。

远程主机受到 GLSA-202101-26 中所述漏洞的影响（f2fs-tools：多个漏洞）

    在 f2fs-tools 中发现多个漏洞。请检查下方引用的 CVE 标识符以了解详细信息。
  影响：

    请查看供参考的 CVE 标识符，了解详细信息。
  变通方案：

    目前无任何已知的变通方案。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - F2fs-Tools F2fs.Fsck の dev_read 機能に悪用可能な情報漏洩の脆弱性が存在します 1.13 特別に細工された f2fs ファイルシステムが、初期化されていない読み取りを引き起こし、情報漏洩を引き起こす可能性があります。攻撃者が悪意のあるファイルを提供してこの脆弱性を利用する可能性があります。
    (CVE-2020-6107)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools     F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an     information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
    (CVE-2020-6107)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202101-26 (f2fs-tools: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in f2fs-tools. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093579 advisory.

    An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools     F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an     information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
423896	Alpine: f2fs-tools: security update to 1.14.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
423896	Alpine: f2fs-tools: security update to 1.14.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
255318	Linux Distros 未修補的弱點：CVE-2020-6107	Nessus	Misc.	2025/8/26	2026/9/2	medium
255318	Linux Distros 未修补的漏洞：CVE-2020-6107	Nessus	Misc.	2025/8/26	2026/9/2	medium
145424	GLSA-202101-26：f2fs-tools：多個弱點	Nessus	Gentoo Local Security Checks	2021/1/26	2024/1/26	high
145424	GLSA-202101-26 : f2fs-tools：多个漏洞	Nessus	Gentoo Local Security Checks	2021/1/26	2024/1/26	high
255318	Linux Distros のパッチ未適用の脆弱性: CVE-2020-6107	Nessus	Misc.	2025/8/26	2026/9/2	medium
255318	Linux Distros Unpatched Vulnerability : CVE-2020-6107	Nessus	Misc.	2025/8/26	2026/9/2	medium
145424	GLSA-202101-26 : f2fs-tools: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2021/1/26	2024/1/26	high
340458	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: f2fs-tools (UTSA-2026-093579)	Nessus	Unity Linux Local Security Checks	2026/8/26	2026/8/28	medium

检测

插件搜索

high

high

medium

medium

high

high

medium

medium

high

medium