Test Kennung:	1.3.6.1.4.1.25623.1.0.813437
Kategorie:	Web application abuses
Titel:	Tenable Nessus Multiple Vulnerabilities (TNS-2018-08)
Zusammenfassung:	Nessus is prone to multiple vulnerabilities.
Beschreibung:	Summary: Nessus is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist as some of the third-party components used within Nessus to provide underlying functionality were found to contain various vulnerabilities. The components with vulnerabilities include expat, libjpeg, libXML2, libXMLSEC, libXSLT, Zlib and libPCRE Vulnerability Impact: Successful exploitation will allow remote attackers potentially to gain privileges, execute arbitrary code, bypass security restrictions, conduct denial-of-service, gain access to potentially sensitive information, conduct XML External Entity (XXE) attacks and unspecified other impacts. Affected Software/OS: Nessus versions prior to version 7.1.1. Solution: Update to version 7.1.1 or later. Please see the references for more information. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9233 BugTraq ID: 99276 http://www.securityfocus.com/bid/99276 Debian Security Information: DSA-3898 (Google Search) http://www.debian.org/security/2017/dsa-3898 https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E http://www.openwall.com/lists/oss-security/2017/06/17/7 http://www.securitytracker.com/id/1039427 Common Vulnerability Exposure (CVE) ID: CVE-2016-9063 BugTraq ID: 94337 http://www.securityfocus.com/bid/94337 https://www.debian.org/security/2017/dsa-3898 http://www.securitytracker.com/id/1037298 Common Vulnerability Exposure (CVE) ID: CVE-2016-0718 http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html BugTraq ID: 90729 http://www.securityfocus.com/bid/90729 Debian Security Information: DSA-3582 (Google Search) http://www.debian.org/security/2016/dsa-3582 http://seclists.org/fulldisclosure/2017/Feb/68 https://security.gentoo.org/glsa/201701-21 http://packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.html http://www.openwall.com/lists/oss-security/2016/05/17/12 RedHat Security Advisories: RHSA-2016:2824 http://rhn.redhat.com/errata/RHSA-2016-2824.html RedHat Security Advisories: RHSA-2018:2486 https://access.redhat.com/errata/RHSA-2018:2486 http://www.securitytracker.com/id/1036348 http://www.securitytracker.com/id/1036415 http://www.securitytracker.com/id/1037705 SuSE Security Announcement: SUSE-SU-2016:1508 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html SuSE Security Announcement: SUSE-SU-2016:1512 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html SuSE Security Announcement: openSUSE-SU-2016:1441 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html SuSE Security Announcement: openSUSE-SU-2016:1523 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html SuSE Security Announcement: openSUSE-SU-2016:1964 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.html SuSE Security Announcement: openSUSE-SU-2016:2026 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.html http://www.ubuntu.com/usn/USN-2983-1 http://www.ubuntu.com/usn/USN-3044-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-5300 BugTraq ID: 91159 http://www.securityfocus.com/bid/91159 Debian Security Information: DSA-3597 (Google Search) http://www.debian.org/security/2016/dsa-3597 http://www.openwall.com/lists/oss-security/2016/06/04/4 http://www.openwall.com/lists/oss-security/2016/06/04/5 http://www.ubuntu.com/usn/USN-3010-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-0876 http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html BugTraq ID: 52379 http://www.securityfocus.com/bid/52379 Debian Security Information: DSA-2525 (Google Search) http://www.debian.org/security/2012/dsa-2525 http://www.mandriva.com/security/advisories?name=MDVSA-2012:041 http://bugs.python.org/issue13703#msg151870 http://mail.libexpat.org/pipermail/expat-discuss/2012-March/002768.html RedHat Security Advisories: RHSA-2012:0731 http://rhn.redhat.com/errata/RHSA-2012-0731.html RedHat Security Advisories: RHSA-2016:0062 http://rhn.redhat.com/errata/RHSA-2016-0062.html RedHat Security Advisories: RHSA-2016:2957 http://rhn.redhat.com/errata/RHSA-2016-2957.html http://secunia.com/advisories/49504 http://secunia.com/advisories/51024 http://secunia.com/advisories/51040 http://www.ubuntu.com/usn/USN-1527-1 http://www.ubuntu.com/usn/USN-1613-1 http://www.ubuntu.com/usn/USN-1613-2 Common Vulnerability Exposure (CVE) ID: CVE-2016-4472 BugTraq ID: 91528 http://www.securityfocus.com/bid/91528 http://www.ubuntu.com/usn/USN-3013-1 Common Vulnerability Exposure (CVE) ID: CVE-2012-6702 BugTraq ID: 91483 http://www.securityfocus.com/bid/91483 http://www.openwall.com/lists/oss-security/2016/06/03/8 http://www.openwall.com/lists/oss-security/2016/06/04/1 Common Vulnerability Exposure (CVE) ID: CVE-2017-9050 BugTraq ID: 98568 http://www.securityfocus.com/bid/98568 Debian Security Information: DSA-3952 (Google Search) http://www.debian.org/security/2017/dsa-3952 https://security.gentoo.org/glsa/201711-01 http://www.openwall.com/lists/oss-security/2017/05/15/1 Common Vulnerability Exposure (CVE) ID: CVE-2017-9049 BugTraq ID: 98601 http://www.securityfocus.com/bid/98601 Common Vulnerability Exposure (CVE) ID: CVE-2017-9048 BugTraq ID: 98556 http://www.securityfocus.com/bid/98556 Common Vulnerability Exposure (CVE) ID: CVE-2017-9047 BugTraq ID: 98599 http://www.securityfocus.com/bid/98599 Common Vulnerability Exposure (CVE) ID: CVE-2017-8872 https://bugzilla.gnome.org/show_bug.cgi?id=775200 https://lists.debian.org/debian-lts-announce/2020/09/msg00009.html Common Vulnerability Exposure (CVE) ID: CVE-2017-7375 BugTraq ID: 98877 http://www.securityfocus.com/bid/98877 https://www.debian.org/security/2017/dsa-3952 http://www.securitytracker.com/id/1038623 Common Vulnerability Exposure (CVE) ID: CVE-2017-5969 BugTraq ID: 96188 http://www.securityfocus.com/bid/96188 https://bugzilla.gnome.org/show_bug.cgi?id=778519 http://www.openwall.com/lists/oss-security/2016/11/05/3 http://www.openwall.com/lists/oss-security/2017/02/13/1 Common Vulnerability Exposure (CVE) ID: CVE-2016-9318 BugTraq ID: 94347 http://www.securityfocus.com/bid/94347 https://bugzilla.gnome.org/show_bug.cgi?id=772726 https://github.com/lsh123/xmlsec/issues/43 https://usn.ubuntu.com/3739-1/ https://usn.ubuntu.com/3739-2/ Common Vulnerability Exposure (CVE) ID: CVE-2016-5131 http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html BugTraq ID: 92053 http://www.securityfocus.com/bid/92053 Debian Security Information: DSA-3637 (Google Search) http://www.debian.org/security/2016/dsa-3637 https://security.gentoo.org/glsa/201610-09 https://security.gentoo.org/glsa/201701-37 RedHat Security Advisories: RHSA-2016:1485 http://rhn.redhat.com/errata/RHSA-2016-1485.html http://www.securitytracker.com/id/1036428 SuSE Security Announcement: openSUSE-SU-2016:1865 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html SuSE Security Announcement: openSUSE-SU-2016:1868 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html SuSE Security Announcement: openSUSE-SU-2016:1869 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html SuSE Security Announcement: openSUSE-SU-2016:1918 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html http://www.ubuntu.com/usn/USN-3041-1 Common Vulnerability Exposure (CVE) ID: CVE-2018-9251 https://bugzilla.gnome.org/show_bug.cgi?id=794914 https://lists.debian.org/debian-lts-announce/2018/09/msg00035.html Common Vulnerability Exposure (CVE) ID: CVE-2012-6139 Debian Security Information: DSA-2654 (Google Search) http://www.debian.org/security/2013/dsa-2654 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/102065.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:141 http://www.securitytracker.com/id/1028338 http://secunia.com/advisories/52745 http://secunia.com/advisories/52805 http://secunia.com/advisories/52813 http://secunia.com/advisories/52884 SuSE Security Announcement: SUSE-SU-2013:1654 (Google Search) https://www.suse.com/support/update/announcement/2013/suse-su-20131654-1.html SuSE Security Announcement: SUSE-SU-2013:1656 (Google Search) https://www.suse.com/support/update/announcement/2013/suse-su-20131656-1.html SuSE Security Announcement: openSUSE-SU-2013:0585 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-04/msg00020.html SuSE Security Announcement: openSUSE-SU-2013:0593 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-04/msg00028.html http://www.ubuntu.com/usn/USN-1784-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-7995 http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html BugTraq ID: 77325 http://www.securityfocus.com/bid/77325 Debian Security Information: DSA-3605 (Google Search) http://www.debian.org/security/2016/dsa-3605 http://www.openwall.com/lists/oss-security/2015/10/27/10 http://www.openwall.com/lists/oss-security/2015/10/28/4 http://www.securitytracker.com/id/1034736 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.386546 SuSE Security Announcement: openSUSE-SU-2016:1439 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00123.html Common Vulnerability Exposure (CVE) ID: CVE-2015-9019 https://bugzilla.gnome.org/show_bug.cgi?id=758400 https://bugzilla.suse.com/show_bug.cgi?id=934119 Common Vulnerability Exposure (CVE) ID: CVE-2016-1683 http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html http://lists.apple.com/archives/security-announce/2016/Jul/msg00005.html BugTraq ID: 90876 http://www.securityfocus.com/bid/90876 BugTraq ID: 91826 http://www.securityfocus.com/bid/91826 Debian Security Information: DSA-3590 (Google Search) http://www.debian.org/security/2016/dsa-3590 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/ https://security.gentoo.org/glsa/201607-07 RedHat Security Advisories: RHSA-2016:1190 https://access.redhat.com/errata/RHSA-2016:1190 http://www.securitytracker.com/id/1035981 SuSE Security Announcement: openSUSE-SU-2016:1430 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html SuSE Security Announcement: openSUSE-SU-2016:1433 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html SuSE Security Announcement: openSUSE-SU-2016:1496 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html http://www.ubuntu.com/usn/USN-2992-1 Common Vulnerability Exposure (CVE) ID: CVE-2016-1684 Common Vulnerability Exposure (CVE) ID: CVE-2017-5029 BugTraq ID: 96767 http://www.securityfocus.com/bid/96767 Debian Security Information: DSA-3810 (Google Search) http://www.debian.org/security/2017/dsa-3810 RedHat Security Advisories: RHSA-2017:0499 http://rhn.redhat.com/errata/RHSA-2017-0499.html http://www.securitytracker.com/id/1038157 Common Vulnerability Exposure (CVE) ID: CVE-2016-9840 BugTraq ID: 95131 http://www.securityfocus.com/bid/95131 http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html https://bugzilla.redhat.com/show_bug.cgi?id=1402345 https://github.com/madler/zlib/commit/6a043145ca6e9c55184013841a67b2fef87e44c0 https://support.apple.com/HT208112 https://support.apple.com/HT208113 https://support.apple.com/HT208115 https://support.apple.com/HT208144 https://security.gentoo.org/glsa/201701-56 https://security.gentoo.org/glsa/202007-54 https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib https://wiki.mozilla.org/images/0/09/Zlib-report.pdf https://www.oracle.com/security-alerts/cpujul2020.html https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html http://www.openwall.com/lists/oss-security/2016/12/05/21 RedHat Security Advisories: RHSA-2017:1220 https://access.redhat.com/errata/RHSA-2017:1220 RedHat Security Advisories: RHSA-2017:1221 https://access.redhat.com/errata/RHSA-2017:1221 RedHat Security Advisories: RHSA-2017:1222 https://access.redhat.com/errata/RHSA-2017:1222 RedHat Security Advisories: RHSA-2017:2999 https://access.redhat.com/errata/RHSA-2017:2999 RedHat Security Advisories: RHSA-2017:3046 https://access.redhat.com/errata/RHSA-2017:3046 RedHat Security Advisories: RHSA-2017:3047 https://access.redhat.com/errata/RHSA-2017:3047 RedHat Security Advisories: RHSA-2017:3453 https://access.redhat.com/errata/RHSA-2017:3453 SuSE Security Announcement: openSUSE-SU-2016:3202 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html SuSE Security Announcement: openSUSE-SU-2017:0077 (Google Search) http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html SuSE Security Announcement: openSUSE-SU-2017:0080 (Google Search) http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html https://usn.ubuntu.com/4246-1/ https://usn.ubuntu.com/4292-1/ Common Vulnerability Exposure (CVE) ID: CVE-2016-9841 http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html https://bugzilla.redhat.com/show_bug.cgi?id=1402346 https://github.com/madler/zlib/commit/9aaec95e82117c1cb0f9624264c3618fc380cecb https://security.netapp.com/advisory/ntap-20171019-0001/ http://www.securitytracker.com/id/1039596 Common Vulnerability Exposure (CVE) ID: CVE-2016-9842 https://bugzilla.redhat.com/show_bug.cgi?id=1402348 https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958 Common Vulnerability Exposure (CVE) ID: CVE-2016-9843 https://bugzilla.redhat.com/show_bug.cgi?id=1402351 https://github.com/madler/zlib/commit/d1d577490c15a0c6862473d7576352a9f18ef811 https://security.netapp.com/advisory/ntap-20181018-0002/ http://www.securitytracker.com/id/1041888 Common Vulnerability Exposure (CVE) ID: CVE-2014-8964 BugTraq ID: 71206 http://www.securityfocus.com/bid/71206 http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145843.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147474.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147516.html http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147511.html https://security.gentoo.org/glsa/201607-02 http://www.mandriva.com/security/advisories?name=MDVSA-2015:002 http://www.mandriva.com/security/advisories?name=MDVSA-2015:137 http://www.openwall.com/lists/oss-security/2014/11/21/6 RedHat Security Advisories: RHSA-2015:0330 http://rhn.redhat.com/errata/RHSA-2015-0330.html SuSE Security Announcement: openSUSE-SU-2015:0858 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-05/msg00014.html Common Vulnerability Exposure (CVE) ID: CVE-2014-9769 BugTraq ID: 85570 http://www.securityfocus.com/bid/85570 http://www.openwall.com/lists/oss-security/2016/03/26/1 http://www.securitytracker.com/id/1035424 Common Vulnerability Exposure (CVE) ID: CVE-2015-2327 BugTraq ID: 74924 http://www.securityfocus.com/bid/74924 http://www.fortiguard.com/advisory/FG-VD-15-010/ http://www.openwall.com/lists/oss-security/2015/11/29/1 RedHat Security Advisories: RHSA-2016:2750 http://rhn.redhat.com/errata/RHSA-2016-2750.html Common Vulnerability Exposure (CVE) ID: CVE-2015-2328 http://www.fortiguard.com/advisory/FG-VD-15-014/ RedHat Security Advisories: RHSA-2016:1025 http://rhn.redhat.com/errata/RHSA-2016-1025.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3217 BugTraq ID: 75018 http://www.securityfocus.com/bid/75018 http://www.openwall.com/lists/oss-security/2015/06/03/7 RedHat Security Advisories: RHSA-2016:1132 https://access.redhat.com/errata/RHSA-2016:1132 Common Vulnerability Exposure (CVE) ID: CVE-2015-5073 BugTraq ID: 75430 http://www.securityfocus.com/bid/75430 http://www.openwall.com/lists/oss-security/2015/06/26/1 http://www.openwall.com/lists/oss-security/2015/06/26/3 http://www.securitytracker.com/id/1033154 Common Vulnerability Exposure (CVE) ID: CVE-2015-8380 BugTraq ID: 77695 http://www.securityfocus.com/bid/77695 http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173700.html https://blog.fuzzing-project.org/29-Heap-Overflow-in-PCRE.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8381 BugTraq ID: 76187 http://www.securityfocus.com/bid/76187 Common Vulnerability Exposure (CVE) ID: CVE-2015-8382 BugTraq ID: 76157 http://www.securityfocus.com/bid/76157 http://www.openwall.com/lists/oss-security/2015/08/04/3 Common Vulnerability Exposure (CVE) ID: CVE-2015-8383 http://lists.fedoraproject.org/pipermail/package-announce/2016-January/174931.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8384 Common Vulnerability Exposure (CVE) ID: CVE-2015-8385 BugTraq ID: 85572 http://www.securityfocus.com/bid/85572 Common Vulnerability Exposure (CVE) ID: CVE-2015-8386 BugTraq ID: 82990 http://www.securityfocus.com/bid/82990 Common Vulnerability Exposure (CVE) ID: CVE-2015-8387 Common Vulnerability Exposure (CVE) ID: CVE-2015-8388 BugTraq ID: 85576 http://www.securityfocus.com/bid/85576 Common Vulnerability Exposure (CVE) ID: CVE-2015-8389 Common Vulnerability Exposure (CVE) ID: CVE-2015-8390 Common Vulnerability Exposure (CVE) ID: CVE-2015-8391 Common Vulnerability Exposure (CVE) ID: CVE-2015-8392 Common Vulnerability Exposure (CVE) ID: CVE-2015-8394 Common Vulnerability Exposure (CVE) ID: CVE-2015-8395 Common Vulnerability Exposure (CVE) ID: CVE-2016-1283 BugTraq ID: 79825 http://www.securityfocus.com/bid/79825 http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178193.html http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178955.html http://www.securitytracker.com/id/1034555 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.343110 Common Vulnerability Exposure (CVE) ID: CVE-2016-3191 BugTraq ID: 84810 http://www.securityfocus.com/bid/84810 Common Vulnerability Exposure (CVE) ID: CVE-2017-6004 BugTraq ID: 96295 http://www.securityfocus.com/bid/96295 https://security.gentoo.org/glsa/201706-11 http://www.securitytracker.com/id/1037850 Common Vulnerability Exposure (CVE) ID: CVE-2017-7186 BugTraq ID: 97030 http://www.securityfocus.com/bid/97030 https://security.gentoo.org/glsa/201710-09 https://security.gentoo.org/glsa/201710-25 https://blogs.gentoo.org/ago/2017/03/14/libpcre-invalid-memory-read-in-match-pcre_exec-c/ Common Vulnerability Exposure (CVE) ID: CVE-2017-7244 BugTraq ID: 97067 http://www.securityfocus.com/bid/97067 https://blogs.gentoo.org/ago/2017/03/20/libpcre-invalid-memory-read-in-_pcre32_xclass-pcre_xclass-c/ Common Vulnerability Exposure (CVE) ID: CVE-2017-7245 https://blogs.gentoo.org/ago/2017/03/20/libpcre-two-stack-based-buffer-overflow-write-in-pcre32_copy_substring-pcre_get-c/ Common Vulnerability Exposure (CVE) ID: CVE-2017-7246
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.