The remote Rocky Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3661 advisory.

  - LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from     an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also     affects TeX Live before 2023 r66984 and MiKTeX before 23.5. (CVE-2023-32700)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Rocky Linux 8 / 9 : texlive (RLSA-2023:3661)

high Nessus Plugin ID 177603

Version 1.0