Test ID:	1.3.6.1.4.1.25623.1.0.118596
Category:	General
Title:	Tenable Nessus Network Monitor < 6.4.0 Multiple Vulnerabilities (TNS-2024-07)
Summary:	Tenable Nessus Network Monitor is prone to multiple; vulnerabilities.
Description:	Summary: Tenable Nessus Network Monitor is prone to multiple vulnerabilities. Vulnerability Insight: Several of the third-party components (hyperscan, curl and c-ares) were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.4.0 updates hyperscan to version 5.4.2, curl to version 8.6.0, and c-ares to version 1.28.0. Affected Software/OS: Tenable Nessus Network Monitor prior to version 6.4.0. Solution: Update to version 6.4.0 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-28711 http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00879.html Common Vulnerability Exposure (CVE) ID: CVE-2023-46218 Debian Security Information: DSA-5587 (Google Search) https://www.debian.org/security/2023/dsa-5587 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UOGXU25FMMT2X6UUITQ7EZZYMJ42YWWD/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3ZX3VW67N4ACRAPMV2QS2LVYGD7H2MVE/ https://curl.se/docs/CVE-2023-46218.html https://hackerone.com/reports/2212193 https://lists.debian.org/debian-lts-announce/2023/12/msg00015.html Common Vulnerability Exposure (CVE) ID: CVE-2023-46219 https://curl.se/docs/CVE-2023-46219.html https://hackerone.com/reports/2236133 Common Vulnerability Exposure (CVE) ID: CVE-2024-25629 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GX37LFPFQ3T6FFMMFYQTEGIQXXN7F27U/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CSCMTSPDIE2UHU34TIXQQHZ6JTE3Y3VF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2P76QYINQNPEHUTEEDOUYIRZ2X6UVZ5K/ https://github.com/c-ares/c-ares/commit/a804c04ddc8245fc8adf0e92368709639125e183 https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.