The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5615 advisory.

  - lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c (CVE-2015-8011)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2077 advisory.

    Open vSwitch provides standard network bridging functions and support for     the OpenFlow protocol for remote per-flow control of traffic.

    Security Fix(es):

    * lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c     (CVE-2015-8011)

    * openvswitch: limitation in the OVS packet parsing in userspace leads to DoS     (CVE-2020-35498)

    * lldp/openvswitch: denial of service via externally triggered memory leak     (CVE-2020-27827)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5611 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-     virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed     using a special build of Red Hat Enterprise Linux with only the packages required to host virtual     machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing     administrative tasks.

    The following packages have been upgraded to a later upstream version: cockpit-ovirt (0.14.15), redhat-     release-virtualization-host (4.4.3), redhat-virtualization-host (4.4.3), v2v-conversion-host (1.16.2).
    (BZ#1898023, BZ#1902301, BZ#1907539)

    Security Fix(es):

    * lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c (CVE-2015-8011)

    * nodejs-lodash: prototype pollution in zipObjectDeep function (CVE-2020-8203)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Previously, upgrade from Red Had Virtualization (RHV) 4.4.1 to RHV 4.4.2 failed due to dangling symlinks     from the iSCSI Storage Domain that weren't cleaned up. In this release, the upgrade succeeds. (BZ#1895356)

    * Previously, when migrating a Windows virtual machine from a VMware environment to Red Hat Virtualization     4.4.3, the migration failed due to a file permission error. In this release, the migration succeeds.
    (BZ#1901423)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0988 advisory.

    The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization     Manager. The appliance is available to download as an OVA file from the Customer Portal.

    The following packages have been upgraded to a later upstream version: rhvm-appliance (4.4). (BZ#1915881)

    Security Fix(es):

    * lldpd: buffer overflow in the lldp_decode function in daemon/protocols/lldp.c (CVE-2015-8011)

    * postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

    * postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The lldpd developer Vincent Bernat reports :

A buffer overflow may allow arbitrary code execution only if hardening was disabled.

Malformed packets should not make lldpd crash. Ensure we can handle them by not using assert() in this part.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017643 advisory.

    Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote     attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via vectors     involving large management addresses and TLV boundaries.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
312496	RHCOS 4 : OpenShift Container Platform 4.6.9 (RHSA-2020:5615)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/5/6	critical
149839	RHEL 7 : openvswitch (RHSA-2021:2077)	Nessus	Red Hat Local Security Checks	2021/5/21	2024/11/7	critical
144405	RHEL 8 : Red Hat Virtualization (RHSA-2020:5611)	Nessus	Red Hat Local Security Checks	2020/12/18	2024/11/7	critical
148122	RHEL 8 : rhvm-appliance (RHSA-2021:0988)	Nessus	Red Hat Local Security Checks	2021/3/25	2024/11/7	critical
86620	FreeBSD : lldpd -- Buffer overflow/Denial of service (2a4a112a-7c1b-11e5-bd77-0800275369e2)	Nessus	FreeBSD Local Security Checks	2015/10/28	2021/1/6	critical
313756	Unity Linux 20.1060e / 20.1070e Security Update: openvswitch (UTSA-2026-017643)	Nessus	Unity Linux Local Security Checks	2026/5/11	2026/5/11	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical