The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with certain style attributes.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6f16e3bcee advisory.

  - The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic     backtracking for HTML content with certain style attributes. (CVE-2023-24038)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a42aa9700f advisory.

  - The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic     backtracking for HTML content with certain style attributes. (CVE-2023-24038)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6100-1 advisory.

    It was discovered that HTML::StripScripts does not properly parse HTML content with certain style     attributes. A remote attacker could use this issue to cause a regular expression denial of service     (ReDoS).

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5339 advisory.

  - The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic     backtracking for HTML content with certain style attributes. (CVE-2023-24038)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3296 advisory.

  - The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic     backtracking for HTML content with certain style attributes. (CVE-2023-24038)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
177363	Fedora 37 : perl-HTML-StripScripts (2023-6f16e3bcee)	Nessus	Fedora Local Security Checks	high
177361	Fedora 38 : perl-HTML-StripScripts (2023-a42aa9700f)	Nessus	Fedora Local Security Checks	high
176326	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : HTML::StripScripts vulnerability (USN-6100-1)	Nessus	Ubuntu Local Security Checks	high
171007	Debian DSA-5339-1 : libhtml-stripscripts-perl - security update	Nessus	Debian Local Security Checks	high
170877	Debian DLA-3296-1 : libhtml-stripscripts-perl - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2023-24038

high

Tenable Plugins

high

high

high

high

high