WID-SEC-W-2024-0992

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

view advisory published 2024-04-29

Ein Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Dateien zu manipulieren oder Sicherheitsmaßnahmen zu umgehen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2024-25629USmedium5.5—
c-ares is a C library for asynchronous DNS requests. `ares__read_line()` is used to parse local configuration files such as `/etc/resolv.conf`, `/etc/nsswitch.conf`, the `HOSTALIAS…
CVE-2023-46219USmedium5.3OT elevated—
When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should o…
CVE-2023-46218USmedium6.5—
This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to…
CVE-2023-28711USmedium5.5—
Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to potentially enable denial of service vi…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan