According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Sudo before 1.9.13 does not escape control characters in log messages. (CVE-2023-28486)

  - Sudo before 1.9.13 does not escape control characters in sudoreplay output. (CVE-2023-28487)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0811 advisory.

  - Sudo before 1.9.13 does not escape control characters in log messages. (CVE-2023-28486)

  - Sudo before 1.9.13 does not escape control characters in sudoreplay output. (CVE-2023-28487)

  - Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation)     because application logic sometimes is based on not equaling an error value (instead of equaling a success     value), and because the values do not resist flips of a single bit. (CVE-2023-42465)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2024:0811 advisory.

  - Sudo before 1.9.13 does not escape control characters in log messages. (CVE-2023-28486)

  - Sudo before 1.9.13 does not escape control characters in sudoreplay output. (CVE-2023-28487)

  - Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation)     because application logic sometimes is based on not equaling an error value (instead of equaling a success     value), and because the values do not resist flips of a single bit. (CVE-2023-42465)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4472 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4472-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     February 06, 2026                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : sudo     Version        : 1.9.5p2-3+deb11u3     CVE ID         : CVE-2023-28486 CVE-2023-28487

    Sudo, a program designed to allow a sysadmin to give limited     root privileges to users and log root activity, was     affected by multiple vulnerabilities.

    CVE-2023-28486

        Sudo did not escape control characters in log messages.

    CVE-2023-28487

        Sudo did not escape control characters in sudoreplay output.

    For Debian 11 bullseye, these problems have been fixed in version     1.9.5p2-3+deb11u3.

    We recommend that you upgrade your sudo packages.

    For the detailed security status of sudo please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/sudo

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of sudo installed on the remote host is prior to 1.8.23-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2301 advisory.

    Sudo before 1.9.13 does not escape control characters in log messages. (CVE-2023-28486)

    Sudo before 1.9.13 does not escape control characters in sudoreplay output. (CVE-2023-28487)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-7518:01 advisory.

    The sudo packages contain the sudo utility which allows system     administrators to provide certain users with the permission to execute     privileged commands, which are used for system management purposes, without     having to log in as root.
    Bug Fix(es) and Enhancement(s):
      * CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
      * CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
      * CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables     CVE-2023-28486     Sudo before 1.9.13 does not escape control characters in log messages.
    CVE-2023-28487     Sudo before 1.9.13 does not escape control characters in sudoreplay output.
    CVE-2023-42465     Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation)     because application logic sometimes is based on not equaling an error value (instead of equaling a success     value), and because the values do not resist flips of a single bit.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1451 advisory.

    This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 9.6. It addresses 5 CVEs:
    CVE-2023-28486, CVE-2026-35535, CVE-2025-32462, CVE-2023-42465, CVE-2023-28487.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0970 advisory.

    This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 8.8. It addresses 3 CVEs:
    CVE-2023-28486, CVE-2023-42465, CVE-2023-28487.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
188890	EulerOS Virtualization 2.11.1 : sudo (EulerOS-SA-2023-2744)	Nessus	Huawei Local Security Checks	2024/1/16	2024/2/8	medium
190513	AlmaLinux 9 : sudo (ALSA-2024:0811)	Nessus	Alma Linux Local Security Checks	2024/2/14	2026/1/21	high
190850	CentOS 8 : sudo (CESA-2024:0811)	Nessus	CentOS Local Security Checks	2024/2/21	2026/1/21	high
298270	Debian dla-4472 : sudo - security update	Nessus	Debian Local Security Checks	2026/2/6	2026/2/6	medium
178991	EulerOS Virtualization 2.10.0 : sudo (EulerOS-SA-2023-2494)	Nessus	Huawei Local Security Checks	2023/7/28	2024/2/8	medium
183465	Amazon Linux 2 : sudo (ALAS-2023-2301)	Nessus	Amazon Linux Local Security Checks	2023/10/20	2024/12/11	medium
292184	MiracleLinux 8 : sudo-1.9.5p2-1.el8_9 (AXSA:2024-7518:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
354537	Rocky Linux 9.6 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc Multiple Vulnerabilities (ciqsa-2026_1451)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/13	high
356716	Rocky Linux 8.8 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-devel Multiple Vulnerabilities (ciqsa-2026_0970)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high

検出

プラグインの検索

medium

high

high

medium

medium

medium

high

high

high