According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Windows Libarchive Remote Code Execution Vulnerability(CVE-2024-20696)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libarchive security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Windows Libarchive Remote Code Execution Vulnerability (CVE-2024-20696)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3950 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3950-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     November 11, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libarchive     Version        : 3.4.3-2+deb11u2     CVE ID         : CVE-2021-36976 CVE-2022-26280 CVE-2022-36227 CVE-2024-20696     Debian Bug     : 991442 1008953 1024669 1086155

    Multiple vulnerabilities have been fixed in libarchive,     a multi-format archive and compression library.

    CVE-2021-36976

        RAR reader use-after-free

    CVE-2022-26280

        ZIP reader out-of-bounds-read

    CVE-2022-36227

        archive_write NULL dereference

    CVE-2024-20696

        RAR reader out-of-bounds write

    For Debian 11 bullseye, these problems have been fixed in version     3.4.3-2+deb11u2.

    We recommend that you upgrade your libarchive packages.

    For the detailed security status of libarchive please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libarchive

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034130. It is, therefore, affected by multiple vulnerabilities

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654)

  - BitLocker Security Feature Bypass Vulnerability (CVE-2024-20666)

  - Windows Kerberos Security Feature Bypass Vulnerability (CVE-2024-20674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034123. It is, therefore, affected by multiple vulnerabilities

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654)

  - BitLocker Security Feature Bypass Vulnerability (CVE-2024-20666)

  - Windows Kerberos Security Feature Bypass Vulnerability (CVE-2024-20674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5034122. It is, therefore, affected by multiple vulnerabilities

  - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2024-20654)

  - BitLocker Security Feature Bypass Vulnerability (CVE-2024-20666)

  - Windows Kerberos Security Feature Bypass Vulnerability (CVE-2024-20674)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

遠端 Debian 12 主機上安裝的多個套件受到 dsa-5806 公告中提及的一個弱點影響。

    - ------------------------------------------------------------------------- Debian 安全公告 DSA-5806-1 security@debian.org https://www.debian.org/security/Salvatore Bonaccorso 2024 年 11 月 9 日https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    套件：libarchive CVE ID：CVE-2024-20696 Debian 錯誤：1086155

    在多格式封存和壓縮程式庫 libarchive 中發現一個堆積型超出邊界寫入弱點，如果處理特製的 RAR 封存，可能會導致執行任意程式碼。

    針對穩定的發行版本 (bookworm)，已在 3.6.2-1+deb12u2 版本中修正此問題。

    建議您升級 libarchive 套件。

    如需有關 libarchive 安全性狀態的詳細資訊，請參閱其安全追蹤頁面：
    https://security-tracker.debian.org/tracker/libarchive

    有關 Debian 安全公告、如何將這些更新套用至您的系統以及常見問題的詳細資訊，請參閱：https://www.debian.org/security/

    郵寄清單：debian-security-announce@lists.debian.org

Tenable 已直接從 Debian 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Windows Libarchive 遠端程式碼執行弱點 (CVE-2024-20696)

請注意，Nessus 依賴供應商報告的套件存在。

遠端 Debian 11 主機上安裝的多個套件受到 dla-3950 公告中提及的多個弱點影響。

    - ------------------------------------------------------------------------- Debian LTS 公告 DLA-3950-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Adrian Bunk 2024 年 11 月 11 日 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    套件：libarchive 版本：3.4.3-2+deb11u2 CVE ID： CVE-2021-36976 CVE-2022-26280 CVE-2022-36227 CVE-2024-20696 Debian 錯誤： 991442 1008953 1024669 1086155

    已在多重格式封存與壓縮程式庫 libarchive 中修正多個弱點。

    CVE-2021-36976

        RAR 讀取器釋放後使用

    CVE-2022-26280

        ZIP 讀取器超出邊界讀取

    CVE-2022-36227

        archive_write NULL 解除參照

    CVE-2024-20696

        RAR 讀取器超出邊界寫入

    針對 Debian 11 Bullseye，這些問題已在 3.4.3-2+deb11u2 版本中修正。

    建議您升級 libarchive 套件。

    如需有關 libarchive 安全性狀態的詳細資訊，請參閱其安全追蹤頁面：
    https://security-tracker.debian.org/tracker/libarchive

    有關 Debian LTS 安全公告、如何將這些更新套用至您的系統以及常見問題的詳細資訊，請參閱：https://wiki.debian.org/LTS

Tenable 已直接從 Debian 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Windows 主機缺少安全性更新 5034130，因此會受到多個弱點影響

  - Microsoft ODBC 驅動程式遠端程式碼執行弱點 (CVE-2024-20654)

  - BitLocker 安全功能繞過弱點 (CVE-2024-20666)

  - Windows Kerberos 安全功能繞過弱點 (CVE-2024-20674)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Windows 主機缺少安全性更新 5034123，因此會受到多個弱點影響

  - Microsoft ODBC 驅動程式遠端程式碼執行弱點 (CVE-2024-20654)

  - BitLocker 安全功能繞過弱點 (CVE-2024-20666)

  - Windows Kerberos 安全功能繞過弱點 (CVE-2024-20674)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Windows 主機缺少安全性更新 5034122，因此會受到多個弱點影響

  - Microsoft ODBC 驅動程式遠端程式碼執行弱點 (CVE-2024-20654)

  - BitLocker 安全功能繞過弱點 (CVE-2024-20666)

  - Windows Kerberos 安全功能繞過弱點 (CVE-2024-20674)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

ID	名稱	產品	系列	已發布	已更新	嚴重性
209784	EulerOS Virtualization 2.12.1 : libarchive (EulerOS-SA-2024-2753)	Nessus	Huawei Local Security Checks	2024/10/27	2024/10/27	high
248289	Linux Distros Unpatched Vulnerability : CVE-2024-20696	Nessus	Misc.	2025/8/11	2025/8/11	high
210823	Debian dla-3950 : libarchive-dev - security update	Nessus	Debian Local Security Checks	2024/11/12	2024/11/12	critical
187789	KB5034130: Windows 11 version 22H2 Security Update (January 2024)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/6/17	high
187797	KB5034123: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (January 2024)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/10/21	high
187795	KB5034122: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (January 2024)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/6/17	high
210720	Debian dsa-5806：libarchive-dev - 安全性更新	Nessus	Debian Local Security Checks	2024/11/9	2024/11/9	high
248289	Linux Distros 未修補的弱點：CVE-2024-20696	Nessus	Misc.	2025/8/11	2025/8/11	high
210823	Debian dla-3950：libarchive-dev - 安全性更新	Nessus	Debian Local Security Checks	2024/11/12	2024/11/12	critical
187789	KB5034130：Windows 11 22H2 版安全性更新 (2024 年 1 月)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/6/17	high
187797	KB5034123：Windows 11 22H2 版安全性更新 (2024 年 1 月)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/10/21	high
187795	KB5034122：Windows 10 21H2 版/Windows 10 22H2 版安全性更新 (2024 年 1 月)	Nessus	Windows : Microsoft Bulletins	2024/1/9	2024/6/17	high

偵測

搜尋 Plugin

high

high

critical

high

high

high

high

high

critical

high

high

high