According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that     can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
    NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: 'In     rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it,     then writing or reading memory is possible, which may lead to code execution.' (CVE-2022-36227)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libarchive packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that     can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
    NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: 'In     rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it,     then writing or reading memory is possible, which may lead to code execution.' (CVE-2022-36227)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202309-14 (libarchive: Multiple Vulnerabilities)

  - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that     can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
    NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: In     rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it,     then writing or reading memory is possible, which may lead to code execution. (CVE-2022-36227)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2279 advisory.

    In libarchive 3.6.1, the software does not check for an error after calling calloc function that can     return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference or,     in some cases, even arbitrary code execution. (CVE-2022-36227)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0613 advisory.

  - A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as     @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states we are in     the process of marking this report as invalid; however, some third parties takes the position that A     prototype injection/Prototype pollution is not just when global objects are polluted with recursive merge     or deep cloning but also when a target object is polluted. (CVE-2022-37616)

  - When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by     finalizing the operation with a rename from a temporary name to the final target file name.In that rename     operation, it might accidentally *widen* the permissions for the target file, leaving the updated file     accessible to more users than intended. (CVE-2022-32207)

  - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the     XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to     access an array at a negative 2GB offset, typically leading to a segmentation fault. (CVE-2022-40303)

  - An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a     hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be     provoked. (CVE-2022-40304)

  - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.
    X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME     incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently     interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL     checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may     allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or     enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate     chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these     inputs, the other input must already contain an X.400 address as a CRL distribution point, which is     uncommon. As such, this vulnerability is most likely to only affect applications which have implemented     their own functionality for retrieving CRLs over a network. (CVE-2023-0286)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000140954 advisory.

    In libarchive before 3.6.2, the software does not check for an error after calling calloc function that     can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference.
    NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: In     rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it,     then writing or reading memory is possible, which may lead to code execution.(CVE-2022-36227)

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4202-1 advisory.

    - CVE-2022-36227: Fixed potential NULL pointer dereference in __archive_write_allocate_filter()     (bsc#1205629).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
175772	EulerOS Virtualization 2.10.1 : libarchive (EulerOS-SA-2023-1890)	Nessus	Huawei Local Security Checks	2023/5/16	2023/5/16	critical
177163	EulerOS Virtualization 3.0.6.0 : libarchive (EulerOS-SA-2023-2223)	Nessus	Huawei Local Security Checks	2023/6/13	2023/6/13	critical
182371	GLSA-202309-14 : libarchive: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2023/9/29	2023/9/29	critical
182637	Amazon Linux 2 : libarchive (ALAS-2023-2279)	Nessus	Amazon Linux Local Security Checks	2023/10/5	2024/12/11	critical
194919	Splunk Enterprise < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0613)	Nessus	CGI abuses	2024/5/2	2024/7/26	critical
206680	F5 Networks BIG-IP : libarchive vulnerability (K000140954)	Nessus	F5 Networks Local Security Checks	2024/9/5	2025/11/25	critical
168168	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2022:4202-1)	Nessus	SuSE Local Security Checks	2022/11/24	2026/6/26	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical