Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possible to reproduce nor exploit the issue.

According to the versions of the libyaml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue     is the function yaml_emitter_emit_flow_sequence_item of the file /src/libyaml/src/emitter.c. The     manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has     been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259052. NOTE:
    The vendor was contacted early about this disclosure but did not respond in any way.(CVE-2024-3205)

Tenable has extracted the preceding description block directly from the EulerOS libyaml security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libyaml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue     is the function yaml_emitter_emit_flow_sequence_item of the file /src/libyaml/src/emitter.c. The     manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has     been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259052. NOTE:
    The vendor was contacted early about this disclosure but did not respond in any way.(CVE-2024-3205)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libyaml security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libyaml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue     is the function yaml_emitter_emit_flow_sequence_item of the file /src/libyaml/src/emitter.c. The     manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has     been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259052. NOTE:
    The vendor was contacted early about this disclosure but did not respond in any way.(CVE-2024-3205)

Tenable has extracted the preceding description block directly from the EulerOS libyaml security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

ID	Name	Product	Family	Severity
207633	EulerOS 2.0 SP8 : libyaml (EulerOS-SA-2024-2479)	Nessus	Huawei Local Security Checks	critical
206546	EulerOS Virtualization 2.12.1 : libyaml (EulerOS-SA-2024-2310)	Nessus	Huawei Local Security Checks	critical
206523	EulerOS Virtualization 2.12.0 : libyaml (EulerOS-SA-2024-2330)	Nessus	Huawei Local Security Checks	critical
205954	EulerOS Virtualization 2.11.1 : libyaml (EulerOS-SA-2024-2169)	Nessus	Huawei Local Security Checks	critical
205923	EulerOS 2.0 SP12 : libyaml (EulerOS-SA-2024-2218)	Nessus	Huawei Local Security Checks	critical
205905	EulerOS Virtualization 2.11.0 : libyaml (EulerOS-SA-2024-2194)	Nessus	Huawei Local Security Checks	critical
205891	EulerOS 2.0 SP12 : libyaml (EulerOS-SA-2024-2242)	Nessus	Huawei Local Security Checks	critical
202960	EulerOS 2.0 SP8 : libyaml (EulerOS-SA-2024-2041)	Nessus	Huawei Local Security Checks	critical
200934	EulerOS 2.0 SP11 : libyaml (EulerOS-SA-2024-1817)	Nessus	Huawei Local Security Checks	critical
200933	EulerOS 2.0 SP11 : libyaml (EulerOS-SA-2024-1838)	Nessus	Huawei Local Security Checks	critical
195434	RHEL 6 : libyaml (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
195429	RHEL 7 : libyaml (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2024-3205

No Score

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

high