The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-e821b64a4c advisory.

    add sub-package with xen build (resolves: rhbz#2170730)

    ----

    update openssl (CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304).

    ----

    cherry-pick aarch64 bugfixes,     set firmware build release date,     add ext4 sub-package

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 36 : edk2 (2023-e821b64a4c)

critical Nessus Plugin ID 172108

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Nov 15, 2024, 4:11 AM CVSS metrics ("Cvssv4 score" set to 9.3) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N") Plugin metadata Plugin Feed: 202411150411
Version 1.1 Apr 30, 2024, 4:27 AM Plugin metadata Plugin Feed: 202404300427
Version 1.0 Mar 5, 2023, 11:59 PM New Plugin Feed: 202303052359