The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1310-1 advisory.

  - Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed     because it should be categorized as a usability problem. (CVE-2023-46048)

  - TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is     disputed because it should be categorized as a usability problem. (CVE-2023-46051)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : texlive (SUSE-SU-2024:1310-1)

medium Nessus Plugin ID 193391

Version 1.1

Version 1.0

Version 1.1 Aug 20, 2024, 9:39 AM CVSS metrics ("CVSSv3 score" set to 6.2) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSSv3 score source (set to "CVE-2023-46048") CVSSv3 severity (based on CVE-2023-46048, severity increased from "Low" to "Medium") Plugin Feed: 202408200939
Version 1.0 Apr 17, 2024, 7:18 AM New Plugin Feed: 202404170718