The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline     data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a     heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the     affected library. (CVE-2023-5841)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote NewStart CGSL host, running version MAIN 7.02, has OpenEXR packages installed that are affected by multiple vulnerabilities:

  - Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline     data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a     heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the     affected library. (CVE-2023-5841)

  - An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a     denial of service (DoS) via the convert function of exrmultipart.cpp. (CVE-2024-31047)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 15.x prior to the full release of 15.0. It is, therefore, affected by multiple vulnerabilities:

  - This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia     15. An app may be able to break out of its sandbox. (CVE-2024-44148)

  - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and     libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been     fixed in CUPS version 2.4.7, released in September of 2023. (CVE-2023-4504)

  - Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline     data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a     heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the     affected library. (CVE-2023-5841)

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may     be able to cause a denial-of-service. (CVE-2024-23237)

  - A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A     camera extension may be able to access the internet. (CVE-2024-27795)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 18. It is, therefore, affected by multiple vulnerabilities.

根據標題，遠端裝置上執行的 Apple TV 版本低於 18，因此該應用程式受到 121248 中所述的多個弱點影響

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 由於驗證包含深層掃描線資料之 OpenEXR 檔案的掃描線範例數失敗，Academy Software Foundation OpenEX 影像剖析程式庫 3.2.1 及更舊版本容易受到一個堆積型緩衝區溢位弱點影響。自受影響程式庫的 v3.2.2 和 v3.1.12 版起，此問題已解決。(CVE-2023-5841)

請注意，Nessus 依賴供應商報告的套件存在。

遠端主機執行的 macOS/Mac OS X 版本為 15.0 完整發佈之前的 15.x 版。因此會受到多個弱點影響：

  - 已透過改進檔案屬性驗證方法解決此問題。已在 macOS Sequoia 15 中修正此問題。應用程式可能能夠破解其沙箱。(CVE-2024-44148)

  - 由於無法驗證攻擊者特製的 PPD PostScript 文件所提供的長度，CUPS 和 libppd 容易受到堆積型緩衝區溢位影響，且可能執行程式碼。此問題已在 2023 年 9 月發布的 CUPS 2.4.7 版中修正。(CVE-2023-4504)

  - 由於驗證包含深層掃描線資料之 OpenEXR 檔案的掃描線範例數失敗，Academy Software Foundation OpenEX 影像剖析程式庫 3.2.1 及更舊版本容易受到一個堆積型緩衝區溢位弱點影響。自受影響程式庫的 v3.2.2 和 v3.1.12 版起，此問題已解決。(CVE-2023-5841)

  - 已透過改善記憶體處理解決此問題。已在 macOS Sequoia 15 中修正此問題。應用程式或可造成拒絕服務。(CVE-2024-23237)

  - 已透過其他限制解決了權限問題。已在 macOS Sequoia 15 中修正此問題。相機延伸模組可能能夠存取網際網路。(CVE-2024-27795)

請注意，Nessus 並未測試這些問題，而是僅依據作業系統自我報告的版本號碼作出判斷。

行動裝置上執行的 Apple iOS 版本為 18 之前的版本。因此，會受到多個弱點影響。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
226263	Linux Distros Unpatched Vulnerability : CVE-2023-5841	Nessus	Misc.	2025/3/5	2025/9/14	critical
242802	NewStart CGSL MAIN 7.02 : OpenEXR Multiple Vulnerabilities (NS-SA-2025-0107)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	critical
213517	macOS 15.x < 15.0 Multiple Vulnerabilities (121238)	Nessus	MacOS X Local Security Checks	2025/1/7	2025/1/7	critical
207288	Apple iOS < 18 Multiple Vulnerabilities (121250)	Nessus	Mobile Devices	2024/9/16	2025/10/1	critical
207682	Apple TV < 18 多個弱點 (121248)	Nessus	Misc.	2024/9/24	2024/9/24	critical
226263	Linux Distros 未修補的弱點：CVE-2023-5841	Nessus	Misc.	2025/3/5	2025/9/14	critical
213517	macOS 15.x < 15.0 多個弱點 (121238)	Nessus	MacOS X Local Security Checks	2025/1/7	2025/1/7	critical
207288	Apple iOS < 18 多個弱點 (121250)	Nessus	Mobile Devices	2024/9/16	2025/10/1	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical