The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:3837 advisory.

  - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations,     e.g., plausible sudoers files in which the systemctl status command may be executed. Specifically,     systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This     presents a substantial security risk when running systemctl from Sudo, because less executes as root when     the terminal size is too small to show the complete systemctl output. (CVE-2023-26604)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 8 : systemd (ALSA-2023:3837)

high Nessus Plugin ID 177839

Version 1.0