Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.10)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(335153);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/13");

  script_cve_id(
    "CVE-2025-10911",
    "CVE-2026-3039",
    "CVE-2026-3833",
    "CVE-2026-5260",
    "CVE-2026-5946",
    "CVE-2026-6893",
    "CVE-2026-33845",
    "CVE-2026-33846",
    "CVE-2026-35177",
    "CVE-2026-42009",
    "CVE-2026-42010",
    "CVE-2026-42011",
    "CVE-2026-42012",
    "CVE-2026-42013",
    "CVE-2026-42014",
    "CVE-2026-42015",
    "CVE-2026-43964",
    "CVE-2026-45186"
  );

  script_name(english:"Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.10)");

  script_set_attribute(attribute:"synopsis", value:
"The Nutanix AOS host is affected by multiple vulnerabilities .");
  script_set_attribute(attribute:"description", value:
"The version of AOS installed on the remote host is prior to 7.5.1.10. It is, therefore, affected by multiple
vulnerabilities as referenced in the NXSA-AOS-7.5.1.10 advisory.

  - A flaw was found in gnutls. Servers configured with RSA-PSK (RivestShamirAdleman  Pre-Shared Key)
    wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could
    exploit this by sending a specially crafted username, leading to an authentication bypass. This
    vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
    (CVE-2026-42010)

  - A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,
    leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is
    remotely exploitable and may cause information disclosure or denial of service. (CVE-2026-33845)

  - A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The
    issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based
    solely on handshake type, without validating that the message_length field remains consistent across all
    fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with
    conflicting message_length values, causing the implementation to allocate a buffer based on a smaller
    initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because
    the merge operation does not enforce proper bounds checking against the allocated buffer size, this
    results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without
    authentication via the DTLS handshake path and can lead to application crashes or potential memory
    corruption. (CVE-2026-33846)

  - A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons
    of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within
    `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf
    certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass
    where a certificate that should be rejected is instead accepted. This could result in unauthorized access
    or information disclosure. (CVE-2026-3833)

  - A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer
    Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by
    sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to
    unstable packet ordering or undefined behavior, resulting in a denial of service. (CVE-2026-42009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://portal.nutanix.com/page/documents/security-advisories/release-advisories/details?id=NXSA-AOS-7.5.1.10
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?d39cee59");
  script_set_attribute(attribute:"solution", value:
"Update the Nutanix AOS software to the recommended version. Before upgrading: if this cluster is registered with Prism
Central, ensure that Prism Central has been upgraded first to a compatible version. Refer to the Software Product
Interoperability page on the Nutanix portal.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-42010");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/09/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/07/27");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/13");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:nutanix:aos");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("nutanix_collect.nasl");
  script_require_keys("Host/Nutanix/Data/lts", "Host/Nutanix/Data/Service", "Host/Nutanix/Data/Version", "Host/Nutanix/Data/arch");

  exit(0);
}

include('vcf.inc');
include('vcf_extras.inc');

var app_info = vcf::nutanix::get_app_info();

var constraints = [
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.8', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.9', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.11', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.13', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.14', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.15', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.1.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.1.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.0.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.0.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.0.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.4', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.7', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.9', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.10', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.12', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.14', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.0.5', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.0.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1.1', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1.2', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1.6', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1.8', 'product' : 'AOS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.8', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.9', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.11', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.13', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.14', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.0.1.15', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.1.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.1.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.0.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.0.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.0.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.4', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.7', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.9', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.10', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.12', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.3.1.14', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.0.5', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.0.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1.1', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1.2', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1.6', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' },
  { 'fixed_version' : '7.5.1.10', 'equal' : '7.5.1.8', 'product' : 'NDFS', 'fixed_display' : 'Upgrade the AOS install to 7.5.1.10 or higher.' }
];

vcf::nutanix::check_version_and_report(
    app_info:app_info,
    constraints:constraints,
    severity:SECURITY_HOLE
);