There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small
    file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting
    expansion to the declared image size. An attacker can supply a crafted MSP image to an application that
    loads its pixels. This can exhaust memory and deny service even when the declared pixel count passes the
    decompression-bomb check. This issue is fixed in version 13.0.0. (CVE-2026-112892)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Pillow 是 Python 图像库。From 4.1.013.0.0until ，Pillow 的 MSP RLE 解码器可以将小文件扩展为不受限制的内存中缓冲区。解码器将运行长度输出写入 BytesIO，而不限制扩展至声明的图像大小。攻击者可将构建的 MSP 图像提供给加载其像素的应用程序。这可耗尽内存并拒绝服务，即使声明的像素计数通过了 decompression-bomb 检查。此问题已在 13.0.0 版本中修复。(CVE-2026-112892)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Pillow 是一個 Python 映像庫。從 4.1.0 直到 13.0.0，Pillow 的 MSP RLE 解碼器可以將小檔案擴展為無限的記憶體內緩衝區。解碼器會將執行長度輸出寫入 BytesIO，而不會將擴充限制為宣告的影像大小。攻擊者可以將特製的 MSP 影像提供給載入其像素的應用程式。這可能會耗盡記憶體並拒絕服務，即使宣告的像素計數通過了解壓縮炸彈檢查也是如此。13.0.0 版已修正此問題。(CVE-2026-112892)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Pillow は Python イメージングライブラリです。4.1.0から13.0.0まで、PillowのMSP RLEデコーダーは、小さなファイルを無限のメモリ内バッファに拡張できます。デコーダーは、宣言された画像サイズへの拡張を制限せずに、ランレングス出力を BytesIO に書き込みます。攻撃者が、細工された MSP 画像を、そのピクセルをロードするアプリケーションに仕掛ける可能性があります。これにより、メモリを使い果たし、宣言されたピクセルカウントが decompression-bomb チェックを通過してもサービス拒否が起こる可能性があります。この問題はバージョン 13.0.0 で修正されています。(CVE-2026-112892)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small     file into an unbounded in-memory buffer. The decoder writes run-length output to BytesIO without limiting     expansion to the declared image size. An attacker can supply a crafted MSP image to an application that     loads its pixels. This can exhaust memory and deny service even when the declared pixel count passes the     decompression-bomb check. This issue is fixed in version 13.0.0. (CVE-2026-112892)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b9a3fd21-d2af-11f1-bae2-3497f65b111b advisory.

    The Pillow project published security advisories for issues fixed               in release 13.0.0.  They include an argument injection in the               Ghostscript call used for EPS images, heap buffer overflows in               several image decoders that can lead to code execution, and               infinite loops and unbounded memory use when opening crafted               image files.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4dcd14a170 advisory.

    Backport fix for CVE-2026-112892.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
476892	Chainguard: openstack-horizon-2025.2: security update to 25.5.2_git20260914-r12	Tenable Cloud Security	Chainguard Local Security Checks	2026/10/23	2026/10/28	high
476892	Chainguard: openstack-horizon-2025.2: security update to 25.5.2_git20260914-r12	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	2026/10/23	2026/10/28	high
476595	SCA: security update for pillow (GHSA-gg2r-wvfm-q9rx)	Tenable Cloud Security	SCA Checks	2026/10/22	2026/10/28	high
476595	SCA: security update for pillow (GHSA-gg2r-wvfm-q9rx)	Tenable Self-Hosted Container Security	SCA Checks	2026/10/22	2026/10/28	high
367843	Linux Distros 未修补的漏洞：CVE-2026-112892	Nessus	Misc.	2026/10/20	2026/10/28	high
367843	Linux Distros 未修補弱點：CVE-2026-112892	Nessus	Misc.	2026/10/20	2026/10/28	high
367843	Linux Distros のパッチ未適用の脆弱性: CVE-2026-112892	Nessus	Misc.	2026/10/20	2026/10/28	high
367843	Linux Distros Unpatched Vulnerability : CVE-2026-112892	Nessus	Misc.	2026/10/20	2026/10/28	high
373482	FreeBSD : Pillow -- multiple vulnerabilities (b9a3fd21-d2af-11f1-bae2-3497f65b111b)	Nessus	FreeBSD Local Security Checks	2026/10/29	2026/10/29	critical
373493	Fedora 44 : python-pillow (2026-4dcd14a170)	Nessus	Fedora Local Security Checks	2026/10/29	2026/10/29	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

critical

high