There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability
    in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char.
    Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or
    longer to corrupt heap memory, crash applications, and possibly execute code. (CVE-2025-71436)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - Raptor RDF 語法程式庫 from through 2.0.16 包含 2.0.15 raptor_new_term_from_counted_literal（） 中的堆積型緩衝區溢位弱點，該弱點是由將語言標籤長度截斷為未簽名字元所引起。
    攻擊者可以提供具有 256 位元組或更長語言標籤的 Turtle、TriG、N-Triples 或 N-Quads 文檔，以損壞堆積記憶體、使應用程式崩潰，並可能執行程式碼。（CVE-2025-71436）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Raptor RDF Syntax Library from 2.0.15 through 2.0.16 在 raptor_new_term_from_counted_literal（） 中包含将语言标记长度截断为无符号字符造成的基于堆的缓冲区溢出漏洞。
    攻击者可以提供具有长度或超过 256 字节的语言标签的 Turtle、TriG、N-Triples 或 N-Quads 文档，以损坏堆内存、使应用程序崩溃并可能执行代码。（CVE-2025-71436）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 2.0.15 から 2.0.16 までの Raptor RDF 構文ライブラリには、raptor_new_term_from_counted_literal() のヒープベースのバッファオーバーフローの脆弱性が含まれています。これは、言語タグ長を符号なし char に切り捨てることにより引き起こされます。
    攻撃者が、256 バイト以上の言語タグを持つ Turtle、TriG、N-Triples、または N-Quads ドキュメントを提供して、ヒープメモリを破損させ、アプリケーションをクラッシュさせ、またおそらくはコードを実行する可能性があります。(CVE-2025-71436)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:94519 advisory.

    Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating     triples from RDF/XML or N-Triples.

    Security Fix(es):

    * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling     (CVE-2025-71436)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:94519 advisory.

    * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling     (CVE-2025-71436)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2254:01 advisory.

    * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling     (CVE-2025-71436)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98509 advisory.

    Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating     triples from RDF/XML or N-Triples.

    Security Fix(es):

    * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling     (CVE-2025-71436)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-94519 advisory.

    - CVE-2025-71436 raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag     handling       heap-based buffer overflow in language tag handling

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_98509 advisory.

    * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling     (CVE-2025-71436)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_94519 advisory.

    * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling     (CVE-2025-71436)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability     in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char.
    Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or     longer to corrupt heap memory, crash applications, and possibly execute code. (CVE-2025-71436)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:98509 advisory.

    * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling     (CVE-2025-71436)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99116 advisory.

    Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating     triples from RDF/XML or N-Triples.

    Security Fix(es):

    * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling     (CVE-2025-71436)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
477731	Echo: raptor2: security update to 2.0.16-6+e2	Tenable Cloud Security	Echo Local Security Checks	2026/10/28	2026/10/28	high
477731	Echo: raptor2: security update to 2.0.16-6+e2	Tenable Self-Hosted Container Security	Echo Local Security Checks	2026/10/28	2026/10/28	high
369011	Linux Distros 未修補弱點：CVE-2025-71436	Nessus	Misc.	2026/10/21	2026/11/13	high
369011	Linux Distros 未修补的漏洞：CVE-2025-71436	Nessus	Misc.	2026/10/21	2026/11/13	high
369011	Linux Distros のパッチ未適用の脆弱性: CVE-2025-71436	Nessus	Misc.	2026/10/21	2026/11/13	high
375552	RHEL 8 : raptor2 (RHSA-2026:94519)	Nessus	Red Hat Local Security Checks	2026/11/3	2026/11/3	high
375849	RockyLinux 8 : raptor2 (RLSA-2026:94519)	Nessus	Rocky Linux Local Security Checks	2026/11/4	2026/11/4	high
376295	MiracleLinux 8 : raptor2-2.0.15-18.el8_10 (AXSA:2026-2254:01)	Nessus	Miracle Linux Local Security Checks	2026/11/5	2026/11/5	high
378803	RHEL 9 : raptor2 (RHSA-2026:98509)	Nessus	Red Hat Local Security Checks	2026/11/11	2026/11/11	high
376155	Oracle Linux 8 : raptor2 (ELSA-2026-94519)	Nessus	Oracle Linux Local Security Checks	2026/11/4	2026/11/4	high
381074	Rocky Linux 9 [CIQ] Security Update: raptor2 / raptor2-debuginfo / raptor2-debugsource / raptor2-devel (crlsa-2026_98509)	Nessus	Rocky Linux Local Security Checks	2026/11/14	2026/11/14	high
376431	Rocky Linux 8 [CIQ] Security Update: raptor2 / raptor2-debuginfo / raptor2-debugsource / raptor2-devel (crlsa-2026_94519)	Nessus	Rocky Linux Local Security Checks	2026/11/5	2026/11/5	high
369011	Linux Distros Unpatched Vulnerability : CVE-2025-71436	Nessus	Misc.	2026/10/21	2026/11/13	high
380249	RockyLinux 9 : raptor2 (RLSA-2026:98509)	Nessus	Rocky Linux Local Security Checks	2026/11/13	2026/11/13	high
379511	RHEL 9 : raptor2 (RHSA-2026:99116)	Nessus	Red Hat Local Security Checks	2026/11/12	2026/11/12	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high