Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.16)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(341613);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/31");

  script_cve_id(
    "CVE-2025-6170",
    "CVE-2025-13151",
    "CVE-2026-5435",
    "CVE-2026-5450",
    "CVE-2026-5928",
    "CVE-2026-6238",
    "CVE-2026-15308",
    "CVE-2026-28390",
    "CVE-2026-33416",
    "CVE-2026-34986",
    "CVE-2026-39829",
    "CVE-2026-39830",
    "CVE-2026-39832",
    "CVE-2026-41411",
    "CVE-2026-42508",
    "CVE-2026-44431",
    "CVE-2026-48864",
    "CVE-2026-48962",
    "CVE-2026-50229",
    "CVE-2026-53404",
    "CVE-2026-53434",
    "CVE-2026-54369",
    "CVE-2026-54370",
    "CVE-2026-55276",
    "CVE-2026-55955",
    "CVE-2026-55956",
    "CVE-2026-58016",
    "CVE-2026-59083",
    "CVE-2026-59084"
  );

  script_name(english:"Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.16)");

  script_set_attribute(attribute:"synopsis", value:
"The Nutanix AOS host is affected by multiple vulnerabilities .");
  script_set_attribute(attribute:"description", value:
"The version of AOS installed on the remote host is prior to 7.3.1.16. It is, therefore, affected by multiple
vulnerabilities as referenced in the NXSA-AOS-7.3.1.16 advisory.

  - A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the
    gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a
    `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can
    cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
    (CVE-2026-58016)

  - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable
    Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE`
    each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across
    two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng
    1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS`
    sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets
    `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with
    `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr`
    pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to
    the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both
    functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes
    the issue. (CVE-2026-33416)

  - IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an
    attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in double
    quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING.
    A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are
    evaluated as Perl. Arbitrary Perl in the output glob executes at the calling process's privilege.
    (CVE-2026-48962)

  - Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version
    2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in
    a one byte heap buffer overflow. (CVE-2026-5450)

  - urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed
    from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still
    forward these sensitive headers. This vulnerability is fixed in 2.7.0. (CVE-2026-44431)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://portal.nutanix.com/page/documents/security-advisories/release-advisories/details?id=NXSA-AOS-7.3.1.16
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?13686c5f");
  script_set_attribute(attribute:"solution", value:
"Update the Nutanix AOS software to the recommended version. Before upgrading: if this cluster is registered with Prism
Central, ensure that Prism Central has been upgraded first to a compatible version. Refer to the Software Product
Interoperability page on the Nutanix portal.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:P");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-58016");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2026-15308");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/04/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/31");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/31");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:nutanix:aos");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("nutanix_collect.nasl");
  script_require_keys("Host/Nutanix/Data/lts", "Host/Nutanix/Data/Service", "Host/Nutanix/Data/Version", "Host/Nutanix/Data/arch");

  exit(0);
}

include('vcf.inc');
include('vcf_extras.inc');

var app_info = vcf::nutanix::get_app_info();

var constraints = [
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.8', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.9', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.11', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.12', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.14', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.8', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.9', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.11', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.13', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.14', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.15', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.0.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.0.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.0.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.4', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.9', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.12', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.14', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.8', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.9', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.11', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.12', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '6.10.1.14', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.8', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.9', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.11', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.13', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.14', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.0.1.15', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.0.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.0.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.0.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.4', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.9', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.12', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' },
  { 'fixed_version' : '7.3.1.16', 'equal' : '7.3.1.14', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.3.1.16 or higher.' }
];

vcf::nutanix::check_version_and_report(
    app_info:app_info,
    constraints:constraints,
    severity:SECURITY_HOLE,
    flags:{'xss':TRUE}
);