The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0078 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-37450:
    A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to     arbitrary code execution.

    CVE-2023-41993:
    The issue was addressed with improved checks. This issue is fixed in Safari 17, iOS 16.7 and iPadOS 16.7,     macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report     that this issue may have been actively exploited against versions of iOS before iOS 16.7.

    CVE-2024-23222:
    A type confusion issue was addressed with improved checks. This issue is fixed in tvOS 17.3, iOS 17.3 and     iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3, macOS Ventura 13.6.4, macOS     Monterey 12.7.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is     aware of a report that this issue may have been exploited.

    CVE-2024-27808:
    The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, visionOS 1.2,     Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to     arbitrary code execution.

    CVE-2023-32435:
    A memory corruption issue was addressed with improved state management. This issue is fixed in Safari     16.4, iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3, iOS 15.7.7 and iPadOS 15.7.7. Processing web content     may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively     exploited against versions of iOS released before iOS 15.7.

    CVE-2023-32439:
    A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS     16.5.1, Safari 16.5.1, macOS Ventura 13.4.1, iOS 15.7.7 and iPadOS 15.7.7. Processing maliciously crafted     web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been     actively exploited.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A memory corruption issue was addressed with improved state management. This issue is fixed in macOS     Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content     may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively     exploited against versions of iOS released before iOS 15.7. (CVE-2023-32435)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
236273	Alibaba Cloud Linux 3 : 0078: webkit2gtk3 (ALINUX3-SA-2023:0078)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
225856	Linux Distros Unpatched Vulnerability : CVE-2023-32435	Nessus	Misc.	2025/3/5	2026/11/6	high
276044	TencentOS Server 2: webkitgtk4 (TSSA-2025:0554)	Nessus	Tencent Local Security Checks	2025/11/20	2026/11/5	critical

検出

プラグインの検索

high

high

critical