The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - kernel: Authvalue leak in Bluetooth Mesh Provisioning (CVE-2020-26559)

  - bluez: BlueZ allows physically proximate attackers to cause a denial of service because malformed and     invalid capabilities can be processed in profiles/audio/avdtp.c (CVE-2022-39177)

  - Pairing in Bluetooth Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials     with two pairing devices via adjacent access when the unauthenticated user initiates different pairing     methods in each peer device and an end-user erroneously completes both pairing procedures with the MITM     using the confirmation number of one peer as the passkey of the other. An adjacent, unauthenticated     attacker could be able to initiate any Bluetooth operation on either attacked device exposed by the     enabled Bluetooth profiles. This exposure may be limited when the user must authorize certain access     explicitly, but so long as a user assumes that it is the intended remote device requesting permissions,     device-local protections may be weakened. (CVE-2020-10134)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

移动设备上运行的 Apple iOS 版本低于 13.4。因此，该主机受到多个漏洞的影响。

モバイルデバイスで実行中のApple iOSのバージョンは、13.4より前です。したがって、複数の脆弱性の影響を受けます。

行動裝置上執行的 Apple iOS 版本比 13.4 舊。因此，會受到多個弱點影響。

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - bluez: heap-based buffer overflow via crafted request (CVE-2019-8922)

  - Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line     function used in some userland utilities. (CVE-2016-7837)

  - In BlueZ 5.42, a buffer over-read was observed in l2cap_dump function in tools/parser/l2cap.c source     file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.
    (CVE-2016-9797)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The version of Apple iOS running on the mobile device is prior to 13.4. It is, therefore, affected by multiple vulnerabilities.

ID	名稱	產品	系列	已發布	已更新	嚴重性
198738	RHEL 8 : bluez (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
134950	Apple iOS < 13.4 多个漏洞	Nessus	Mobile Devices	2020/3/27	2024/5/20	critical
134950	Apple iOS < 13.4の複数の脆弱性	Nessus	Mobile Devices	2020/3/27	2024/5/20	critical
134950	Apple iOS < 13.4 多個弱點	Nessus	Mobile Devices	2020/3/27	2024/5/20	critical
198714	RHEL 7 : bluez (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
134950	Apple iOS < 13.4 Multiple Vulnerabilities	Nessus	Mobile Devices	2020/3/27	2024/5/20	critical

偵測

搜尋 Plugin

high

critical

critical

critical

high

critical