The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0925 advisory.

    * bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail). (CVE-2019-12900)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14231-1 advisory.

  - ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated     attacker can cause a denial of service condition by sending crafted messages to an affected system.
    (CVE-2019-12625)

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors. (CVE-2019-12900)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2019:14139-1 advisory.

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors. (CVE-2019-12900)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K68713584 advisory.

    BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors.(CVE-2019-12900)ImpactBIG-IP AAMIf an iSession tunnel is configured with an iSession profile     that has bzip2 compression enabled, an attacker using specially crafted compressed files can exploit a     vulnerability that exists in the decompress functionality of thebzip2utility, causing an out-of-bounds     write. For more information about out-of-bounds writes, refer toCWE-787: Out-of-bounds Write.Note: This     link takes you to a resource outside of AskF5, and the third party could remove the document without our     knowledge.BIG-IP, BIG-IQ, Enterprise Manager, iWorkflow, and Traffix SDCA locally authenticated attacker,     using specially crafted compressed files, can exploit a vulnerability that exists in the decompress     functionality of thebzip2utility, causing an out-of-bounds write. For more information about out-of-bounds     writes, refer toCWE-787: Out-of-bounds Write.Note: This link takes you to a resource outside of AskF5, and     the third party could remove the document without our knowledge.

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

ID	Name	Product	Family	Published	Updated	Severity
232927	RockyLinux 9 : bzip2 (RLSA-2025:0925)	Nessus	Rocky Linux Local Security Checks	3/19/2025	3/19/2025	critical
150535	SUSE SLES11 Security Update : clamav (SUSE-SU-2019:14231-1)	Nessus	SuSE Local Security Checks	6/10/2021	6/10/2021	critical
150600	SUSE SLES11 Security Update : bzip2 (SUSE-SU-2019:14139-1)	Nessus	SuSE Local Security Checks	6/10/2021	6/10/2021	critical
176552	F5 Networks BIG-IP : bzip2 vulnerability (K68713584)	Nessus	F5 Networks Local Security Checks	6/1/2023	3/27/2025	critical
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	6/30/2023	7/6/2023	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical