#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(246337);
script_version("1.18");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/03");
script_cve_id("CVE-2025-48924");
script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2025-48924");
script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.
- Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang:
Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before
3.18.0. The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an
Error is usually not handled by applications and libraries, a StackOverflowError could cause an
application to stop. Users are recommended to upgrade to version 3.18.0, which fixes the issue.
(CVE-2025-48924)
Note that Nessus relies on the presence of the package as reported by the vendor.");
script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2025-48924");
script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2025-48924");
script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
script_set_attribute(attribute:"agent", value:"unix");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-48924");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vendor_unpatched", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2025/07/11");
script_set_attribute(attribute:"plugin_publication_date", value:"2025/08/08");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:25.04");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:25.10");
script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:10");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:6");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libcommons-lang-java");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libcommons-lang3-java");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:aopalliance");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:apache-commons-cli");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:apache-commons-codec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:apache-commons-io");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:apache-commons-lang3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:apache-commons-logging");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:atinject");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:cdi-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:exec-maven-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:exec-maven-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:geronimo-annotation");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:glassfish-el");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:glassfish-el-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:google-guice");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:guava");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:guava20");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:hawtjni");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:hawtjni-runtime");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:httpcomponents-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:httpcomponents-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-jss");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-jss-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-pki-acme");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-pki-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-pki-ca");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-pki-est");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-pki-java");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-pki-kra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-pki-server");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:idm-pki-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jackson-module-jaxb-annotations");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jackson-modules-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jakarta-mail");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jakarta-mail-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jansi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jansi-native");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jboss-interceptors-1.2-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jcl-over-slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jmc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jsoup");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jsr-305");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jss");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jss-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:jul-to-slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:log4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:log4j-jcl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:log4j-over-slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:log4j-slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:log4j-web");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-changes-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-changes-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-compiler-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-compiler-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-dependency-analyzer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-dependency-analyzer-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-dependency-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-dependency-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-dependency-tree");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-dependency-tree-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-logging-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-apt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-confluence");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-docbook-simple");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-fml");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-fo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-latex");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-rtf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-twiki");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-xdoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-module-xhtml");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-sink-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-sitetools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-sitetools-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-test-docs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-doxia-tests");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-ear-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-ear-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-enforcer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-enforcer-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-enforcer-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-enforcer-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-enforcer-rules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-failsafe-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-jar-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-jar-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-javadoc-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-javadoc-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-jxr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-jxr-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-lib");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-openjdk11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-openjdk17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-openjdk8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-plugin-jxr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-release");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-release-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-release-manager");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-release-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-resolver");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-resolver-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-resolver-connector-basic");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-resolver-impl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-resolver-spi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-resolver-transport-wagon");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-resolver-util");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-scm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-scm-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-scm-test");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-shade-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-shade-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-shared-utils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-surefire");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-surefire-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-surefire-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-surefire-provider-junit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-surefire-provider-testng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-surefire-report-parser");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-surefire-report-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-wagon");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-wagon-file");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-wagon-http");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-wagon-http-shared");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-wagon-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-wagon-provider-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-wagon-provider-test");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:maven-wagon-scm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-acme");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-base-java");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-ca");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-jackson-module-jaxb-annotations");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-kra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-server");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-symkey");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pki-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-cipher");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-classworlds");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-compiler");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-compiler-extras");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-compiler-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-compiler-pom");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-containers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-containers-component-annotations");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-interpolation");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-sec-dispatcher");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:plexus-utils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python-qpid-qmf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-idm-pki");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:python3-pki");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qdox");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qdox-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-client-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-client-devel-docs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-client-rdma");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-client-ssl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-server");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-server-cluster");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-server-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-server-rdma");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-server-ssl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-server-store");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-cpp-server-xml");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-qmf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:qpid-qmf-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ruby-qpid-qmf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:sisu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:sisu-inject");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:sisu-plexus");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j-ext");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j-jcl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j-jdk14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j-log4j12");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j-manual");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j-migrator");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:slf4j-sources");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:velocity");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:velocity-demo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:velocity-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:velocity-manual");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:aopalliance");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-cli");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-codec");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-io");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-lang3");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:apache-commons-logging");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atinject");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:cdi-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:exec-maven-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:exec-maven-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:geronimo-annotation");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-el");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:glassfish-el-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:google-guice");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:guava");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:guava20");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hawtjni");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:hawtjni-runtime");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpcomponents-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:httpcomponents-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-jss");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-jss-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-pki-acme");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-pki-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-pki-ca");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-pki-est");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-pki-java");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-pki-kra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-pki-server");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:idm-pki-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jackson-module-jaxb-annotations");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jackson-modules-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jakarta-mail");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jakarta-mail-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jansi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jansi-native");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jboss-interceptors-1.2-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jcl-over-slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jmc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jsoup");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jsr-305");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jss");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jss-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:jul-to-slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:log4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:log4j-jcl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:log4j-over-slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:log4j-slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:log4j-web");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-changes-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-changes-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-compiler-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-compiler-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-dependency-analyzer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-dependency-analyzer-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-dependency-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-dependency-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-dependency-tree");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-dependency-tree-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-logging-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-apt");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-confluence");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-docbook-simple");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-fml");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-fo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-latex");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-rtf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-twiki");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-xdoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-module-xhtml");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-modules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-sink-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-sitetools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-sitetools-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-test-docs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-doxia-tests");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-ear-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-ear-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-enforcer");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-enforcer-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-enforcer-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-enforcer-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-enforcer-rules");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-failsafe-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-jar-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-jar-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-javadoc-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-javadoc-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-jxr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-jxr-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-lib");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-openjdk11");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-openjdk17");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-openjdk8");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-plugin-jxr");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-release");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-release-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-release-manager");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-release-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-resolver");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-resolver-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-resolver-connector-basic");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-resolver-impl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-resolver-spi");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-resolver-transport-wagon");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-resolver-util");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-scm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-scm-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-scm-test");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-shade-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-shade-plugin-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-shared-utils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-surefire");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-surefire-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-surefire-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-surefire-provider-junit");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-surefire-provider-testng");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-surefire-report-parser");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-surefire-report-plugin");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-wagon");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-wagon-file");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-wagon-http");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-wagon-http-shared");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-wagon-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-wagon-provider-api");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-wagon-provider-test");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:maven-wagon-scm");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-acme");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-base");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-base-java");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-ca");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-core");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-jackson-module-jaxb-annotations");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-kra");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-server");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-symkey");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pki-tools");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-cipher");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-classworlds");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-compiler");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-compiler-extras");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-compiler-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-compiler-pom");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-containers");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-containers-component-annotations");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-interpolation");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-sec-dispatcher");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:plexus-utils");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python-qpid-qmf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-idm-pki");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python3-pki");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qdox");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qdox-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client-devel-docs");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client-rdma");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-client-ssl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server-cluster");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server-rdma");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server-ssl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server-store");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-cpp-server-xml");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-qmf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:qpid-qmf-devel");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ruby-qpid-qmf");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sisu");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sisu-inject");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:sisu-plexus");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-ext");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-jcl");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-jdk14");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-log4j12");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-manual");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-migrator");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:slf4j-sources");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:velocity");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:velocity-demo");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:velocity-javadoc");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:velocity-manual");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
script_require_ports("Host/OS/CentOS Linux-7", "Host/OS/CentOS Linux-8", "Host/OS/Red Hat Enterprise Linux-10", "Host/OS/Red Hat Enterprise Linux-6", "Host/OS/Red Hat Enterprise Linux-7", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Red Hat Enterprise Linux-9", "Host/OS/Ubuntu Linux-25.04", "Host/OS/Ubuntu Linux-25.10");
exit(0);
}
if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/Debian/dpkg-l")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);
include('linux_unpatched.inc');
var distro_constraints_array = {
"Ubuntu Linux-25.10": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "25.10",
"pkgs": [
{"reference": "libcommons-lang3-java"}
]
}
]
},
"Ubuntu Linux-25.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "25.04",
"pkgs": [
{"reference": "libcommons-lang-java"},
{"reference": "libcommons-lang3-java"}
]
}
]
},
"Red Hat Enterprise Linux-10": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "10",
"pkgs": [
{"reference": "jakarta-mail"},
{"reference": "jakarta-mail-javadoc"},
{"reference": "jcl-over-slf4j"},
{"reference": "jul-to-slf4j"},
{"reference": "log4j-over-slf4j"},
{"reference": "qdox"},
{"reference": "qdox-javadoc"},
{"reference": "slf4j"},
{"reference": "slf4j-javadoc"},
{"reference": "slf4j-jcl"},
{"reference": "slf4j-jdk14"},
{"reference": "slf4j-manual"},
{"reference": "slf4j-migrator"},
{"reference": "slf4j-sources"}
]
}
]
},
"Red Hat Enterprise Linux-6": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "6",
"pkgs": [
{"reference": "python-qpid-qmf"},
{"reference": "qpid-cpp"},
{"reference": "qpid-cpp-client"},
{"reference": "qpid-cpp-client-devel"},
{"reference": "qpid-cpp-client-devel-docs"},
{"reference": "qpid-cpp-client-rdma"},
{"reference": "qpid-cpp-client-ssl"},
{"reference": "qpid-cpp-server"},
{"reference": "qpid-cpp-server-cluster"},
{"reference": "qpid-cpp-server-devel"},
{"reference": "qpid-cpp-server-rdma"},
{"reference": "qpid-cpp-server-ssl"},
{"reference": "qpid-cpp-server-store"},
{"reference": "qpid-cpp-server-xml"},
{"reference": "qpid-qmf"},
{"reference": "qpid-qmf-devel"},
{"reference": "ruby-qpid-qmf"}
]
}
]
},
"CentOS Linux-7": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "7",
"pkgs": [
{"reference": "exec-maven-plugin"},
{"reference": "exec-maven-plugin-javadoc"},
{"reference": "maven-changes-plugin"},
{"reference": "maven-changes-plugin-javadoc"},
{"reference": "maven-doxia"},
{"reference": "maven-doxia-core"},
{"reference": "maven-doxia-javadoc"},
{"reference": "maven-doxia-logging-api"},
{"reference": "maven-doxia-module-apt"},
{"reference": "maven-doxia-module-confluence"},
{"reference": "maven-doxia-module-docbook-simple"},
{"reference": "maven-doxia-module-fml"},
{"reference": "maven-doxia-module-fo"},
{"reference": "maven-doxia-module-latex"},
{"reference": "maven-doxia-module-rtf"},
{"reference": "maven-doxia-module-twiki"},
{"reference": "maven-doxia-module-xdoc"},
{"reference": "maven-doxia-module-xhtml"},
{"reference": "maven-doxia-modules"},
{"reference": "maven-doxia-sink-api"},
{"reference": "maven-doxia-test-docs"},
{"reference": "maven-doxia-tests"},
{"reference": "maven-ear-plugin"},
{"reference": "maven-ear-plugin-javadoc"},
{"reference": "maven-enforcer"},
{"reference": "maven-enforcer-api"},
{"reference": "maven-enforcer-javadoc"},
{"reference": "maven-enforcer-plugin"},
{"reference": "maven-enforcer-rules"},
{"reference": "maven-failsafe-plugin"},
{"reference": "maven-javadoc-plugin"},
{"reference": "maven-javadoc-plugin-javadoc"},
{"reference": "maven-jxr"},
{"reference": "maven-jxr-javadoc"},
{"reference": "maven-plugin-jxr"},
{"reference": "maven-release"},
{"reference": "maven-release-javadoc"},
{"reference": "maven-release-manager"},
{"reference": "maven-release-plugin"},
{"reference": "maven-scm"},
{"reference": "maven-scm-javadoc"},
{"reference": "maven-scm-test"},
{"reference": "maven-shade-plugin"},
{"reference": "maven-shade-plugin-javadoc"},
{"reference": "maven-surefire"},
{"reference": "maven-surefire-javadoc"},
{"reference": "maven-surefire-plugin"},
{"reference": "maven-surefire-provider-junit"},
{"reference": "maven-surefire-provider-testng"},
{"reference": "maven-surefire-report-parser"},
{"reference": "maven-surefire-report-plugin"},
{"reference": "maven-wagon"},
{"reference": "maven-wagon-javadoc"},
{"reference": "maven-wagon-provider-test"},
{"reference": "maven-wagon-scm"},
{"reference": "slf4j"},
{"reference": "slf4j-javadoc"},
{"reference": "slf4j-manual"},
{"reference": "velocity"},
{"reference": "velocity-demo"},
{"reference": "velocity-javadoc"},
{"reference": "velocity-manual"}
]
}
]
},
"Red Hat Enterprise Linux-7": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "7",
"pkgs": [
{"reference": "exec-maven-plugin"},
{"reference": "exec-maven-plugin-javadoc"},
{"reference": "maven-changes-plugin"},
{"reference": "maven-changes-plugin-javadoc"},
{"reference": "maven-doxia"},
{"reference": "maven-doxia-core"},
{"reference": "maven-doxia-javadoc"},
{"reference": "maven-doxia-logging-api"},
{"reference": "maven-doxia-module-apt"},
{"reference": "maven-doxia-module-confluence"},
{"reference": "maven-doxia-module-docbook-simple"},
{"reference": "maven-doxia-module-fml"},
{"reference": "maven-doxia-module-fo"},
{"reference": "maven-doxia-module-latex"},
{"reference": "maven-doxia-module-rtf"},
{"reference": "maven-doxia-module-twiki"},
{"reference": "maven-doxia-module-xdoc"},
{"reference": "maven-doxia-module-xhtml"},
{"reference": "maven-doxia-modules"},
{"reference": "maven-doxia-sink-api"},
{"reference": "maven-doxia-test-docs"},
{"reference": "maven-doxia-tests"},
{"reference": "maven-ear-plugin"},
{"reference": "maven-ear-plugin-javadoc"},
{"reference": "maven-enforcer"},
{"reference": "maven-enforcer-api"},
{"reference": "maven-enforcer-javadoc"},
{"reference": "maven-enforcer-plugin"},
{"reference": "maven-enforcer-rules"},
{"reference": "maven-failsafe-plugin"},
{"reference": "maven-javadoc-plugin"},
{"reference": "maven-javadoc-plugin-javadoc"},
{"reference": "maven-jxr"},
{"reference": "maven-jxr-javadoc"},
{"reference": "maven-plugin-jxr"},
{"reference": "maven-release"},
{"reference": "maven-release-javadoc"},
{"reference": "maven-release-manager"},
{"reference": "maven-release-plugin"},
{"reference": "maven-scm"},
{"reference": "maven-scm-javadoc"},
{"reference": "maven-scm-test"},
{"reference": "maven-shade-plugin"},
{"reference": "maven-shade-plugin-javadoc"},
{"reference": "maven-surefire"},
{"reference": "maven-surefire-javadoc"},
{"reference": "maven-surefire-plugin"},
{"reference": "maven-surefire-provider-junit"},
{"reference": "maven-surefire-provider-testng"},
{"reference": "maven-surefire-report-parser"},
{"reference": "maven-surefire-report-plugin"},
{"reference": "maven-wagon"},
{"reference": "maven-wagon-javadoc"},
{"reference": "maven-wagon-provider-test"},
{"reference": "maven-wagon-scm"},
{"reference": "slf4j"},
{"reference": "slf4j-javadoc"},
{"reference": "slf4j-manual"},
{"reference": "velocity"},
{"reference": "velocity-demo"},
{"reference": "velocity-javadoc"},
{"reference": "velocity-manual"}
]
}
]
},
"CentOS Linux-8": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "8",
"pkgs": [
{"reference": "aopalliance"},
{"reference": "apache-commons-cli"},
{"reference": "apache-commons-codec"},
{"reference": "apache-commons-io"},
{"reference": "apache-commons-lang3"},
{"reference": "apache-commons-logging"},
{"reference": "atinject"},
{"reference": "cdi-api"},
{"reference": "exec-maven-plugin"},
{"reference": "exec-maven-plugin-javadoc"},
{"reference": "geronimo-annotation"},
{"reference": "glassfish-el"},
{"reference": "glassfish-el-api"},
{"reference": "google-guice"},
{"reference": "guava"},
{"reference": "guava20"},
{"reference": "hawtjni"},
{"reference": "hawtjni-runtime"},
{"reference": "httpcomponents-client"},
{"reference": "httpcomponents-core"},
{"reference": "idm-jss"},
{"reference": "idm-jss-javadoc"},
{"reference": "jackson-module-jaxb-annotations"},
{"reference": "jackson-modules-base"},
{"reference": "jansi"},
{"reference": "jansi-native"},
{"reference": "jboss-interceptors-1.2-api"},
{"reference": "jcl-over-slf4j"},
{"reference": "jsoup"},
{"reference": "jsr-305"},
{"reference": "jss"},
{"reference": "jss-javadoc"},
{"reference": "jul-to-slf4j"},
{"reference": "log4j"},
{"reference": "log4j-jcl"},
{"reference": "log4j-over-slf4j"},
{"reference": "log4j-slf4j"},
{"reference": "log4j-web"},
{"reference": "maven"},
{"reference": "maven-compiler-plugin"},
{"reference": "maven-compiler-plugin-javadoc"},
{"reference": "maven-dependency-analyzer"},
{"reference": "maven-dependency-analyzer-javadoc"},
{"reference": "maven-dependency-plugin"},
{"reference": "maven-dependency-plugin-javadoc"},
{"reference": "maven-dependency-tree"},
{"reference": "maven-dependency-tree-javadoc"},
{"reference": "maven-doxia"},
{"reference": "maven-doxia-core"},
{"reference": "maven-doxia-javadoc"},
{"reference": "maven-doxia-logging-api"},
{"reference": "maven-doxia-module-apt"},
{"reference": "maven-doxia-module-confluence"},
{"reference": "maven-doxia-module-docbook-simple"},
{"reference": "maven-doxia-module-fml"},
{"reference": "maven-doxia-module-latex"},
{"reference": "maven-doxia-module-rtf"},
{"reference": "maven-doxia-module-twiki"},
{"reference": "maven-doxia-module-xdoc"},
{"reference": "maven-doxia-module-xhtml"},
{"reference": "maven-doxia-modules"},
{"reference": "maven-doxia-sink-api"},
{"reference": "maven-doxia-sitetools"},
{"reference": "maven-doxia-sitetools-javadoc"},
{"reference": "maven-doxia-test-docs"},
{"reference": "maven-doxia-tests"},
{"reference": "maven-enforcer"},
{"reference": "maven-enforcer-api"},
{"reference": "maven-enforcer-javadoc"},
{"reference": "maven-enforcer-plugin"},
{"reference": "maven-enforcer-rules"},
{"reference": "maven-failsafe-plugin"},
{"reference": "maven-jar-plugin"},
{"reference": "maven-jar-plugin-javadoc"},
{"reference": "maven-lib"},
{"reference": "maven-openjdk11"},
{"reference": "maven-openjdk17"},
{"reference": "maven-openjdk8"},
{"reference": "maven-resolver"},
{"reference": "maven-resolver-api"},
{"reference": "maven-resolver-connector-basic"},
{"reference": "maven-resolver-impl"},
{"reference": "maven-resolver-spi"},
{"reference": "maven-resolver-transport-wagon"},
{"reference": "maven-resolver-util"},
{"reference": "maven-shade-plugin"},
{"reference": "maven-shade-plugin-javadoc"},
{"reference": "maven-shared-utils"},
{"reference": "maven-surefire"},
{"reference": "maven-surefire-javadoc"},
{"reference": "maven-surefire-plugin"},
{"reference": "maven-surefire-provider-junit"},
{"reference": "maven-surefire-provider-testng"},
{"reference": "maven-surefire-report-parser"},
{"reference": "maven-surefire-report-plugin"},
{"reference": "maven-wagon"},
{"reference": "maven-wagon-file"},
{"reference": "maven-wagon-http"},
{"reference": "maven-wagon-http-shared"},
{"reference": "maven-wagon-provider-api"},
{"reference": "plexus-cipher"},
{"reference": "plexus-classworlds"},
{"reference": "plexus-compiler"},
{"reference": "plexus-compiler-extras"},
{"reference": "plexus-compiler-javadoc"},
{"reference": "plexus-compiler-pom"},
{"reference": "plexus-containers"},
{"reference": "plexus-containers-component-annotations"},
{"reference": "plexus-interpolation"},
{"reference": "plexus-sec-dispatcher"},
{"reference": "plexus-utils"},
{"reference": "qdox"},
{"reference": "qdox-javadoc"},
{"reference": "sisu"},
{"reference": "sisu-inject"},
{"reference": "sisu-plexus"},
{"reference": "slf4j"},
{"reference": "slf4j-ext"},
{"reference": "slf4j-javadoc"},
{"reference": "slf4j-jcl"},
{"reference": "slf4j-jdk14"},
{"reference": "slf4j-log4j12"},
{"reference": "slf4j-manual"},
{"reference": "slf4j-sources"}
]
}
]
},
"Red Hat Enterprise Linux-8": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "8",
"pkgs": [
{"reference": "aopalliance"},
{"reference": "apache-commons-cli"},
{"reference": "apache-commons-codec"},
{"reference": "apache-commons-io"},
{"reference": "apache-commons-lang3"},
{"reference": "apache-commons-logging"},
{"reference": "atinject"},
{"reference": "cdi-api"},
{"reference": "exec-maven-plugin"},
{"reference": "exec-maven-plugin-javadoc"},
{"reference": "geronimo-annotation"},
{"reference": "glassfish-el"},
{"reference": "glassfish-el-api"},
{"reference": "google-guice"},
{"reference": "guava"},
{"reference": "guava20"},
{"reference": "hawtjni"},
{"reference": "hawtjni-runtime"},
{"reference": "httpcomponents-client"},
{"reference": "httpcomponents-core"},
{"reference": "idm-jss"},
{"reference": "idm-jss-javadoc"},
{"reference": "jackson-module-jaxb-annotations"},
{"reference": "jackson-modules-base"},
{"reference": "jansi"},
{"reference": "jansi-native"},
{"reference": "jboss-interceptors-1.2-api"},
{"reference": "jcl-over-slf4j"},
{"reference": "jsoup"},
{"reference": "jsr-305"},
{"reference": "jss"},
{"reference": "jss-javadoc"},
{"reference": "jul-to-slf4j"},
{"reference": "log4j"},
{"reference": "log4j-jcl"},
{"reference": "log4j-over-slf4j"},
{"reference": "log4j-slf4j"},
{"reference": "log4j-web"},
{"reference": "maven"},
{"reference": "maven-compiler-plugin"},
{"reference": "maven-compiler-plugin-javadoc"},
{"reference": "maven-dependency-analyzer"},
{"reference": "maven-dependency-analyzer-javadoc"},
{"reference": "maven-dependency-plugin"},
{"reference": "maven-dependency-plugin-javadoc"},
{"reference": "maven-dependency-tree"},
{"reference": "maven-dependency-tree-javadoc"},
{"reference": "maven-doxia"},
{"reference": "maven-doxia-core"},
{"reference": "maven-doxia-javadoc"},
{"reference": "maven-doxia-logging-api"},
{"reference": "maven-doxia-module-apt"},
{"reference": "maven-doxia-module-confluence"},
{"reference": "maven-doxia-module-docbook-simple"},
{"reference": "maven-doxia-module-fml"},
{"reference": "maven-doxia-module-latex"},
{"reference": "maven-doxia-module-rtf"},
{"reference": "maven-doxia-module-twiki"},
{"reference": "maven-doxia-module-xdoc"},
{"reference": "maven-doxia-module-xhtml"},
{"reference": "maven-doxia-modules"},
{"reference": "maven-doxia-sink-api"},
{"reference": "maven-doxia-sitetools"},
{"reference": "maven-doxia-sitetools-javadoc"},
{"reference": "maven-doxia-test-docs"},
{"reference": "maven-doxia-tests"},
{"reference": "maven-enforcer"},
{"reference": "maven-enforcer-api"},
{"reference": "maven-enforcer-javadoc"},
{"reference": "maven-enforcer-plugin"},
{"reference": "maven-enforcer-rules"},
{"reference": "maven-failsafe-plugin"},
{"reference": "maven-jar-plugin"},
{"reference": "maven-jar-plugin-javadoc"},
{"reference": "maven-lib"},
{"reference": "maven-openjdk11"},
{"reference": "maven-openjdk17"},
{"reference": "maven-openjdk8"},
{"reference": "maven-resolver"},
{"reference": "maven-resolver-api"},
{"reference": "maven-resolver-connector-basic"},
{"reference": "maven-resolver-impl"},
{"reference": "maven-resolver-spi"},
{"reference": "maven-resolver-transport-wagon"},
{"reference": "maven-resolver-util"},
{"reference": "maven-shade-plugin"},
{"reference": "maven-shade-plugin-javadoc"},
{"reference": "maven-shared-utils"},
{"reference": "maven-surefire"},
{"reference": "maven-surefire-javadoc"},
{"reference": "maven-surefire-plugin"},
{"reference": "maven-surefire-provider-junit"},
{"reference": "maven-surefire-provider-testng"},
{"reference": "maven-surefire-report-parser"},
{"reference": "maven-surefire-report-plugin"},
{"reference": "maven-wagon"},
{"reference": "maven-wagon-file"},
{"reference": "maven-wagon-http"},
{"reference": "maven-wagon-http-shared"},
{"reference": "maven-wagon-provider-api"},
{"reference": "plexus-cipher"},
{"reference": "plexus-classworlds"},
{"reference": "plexus-compiler"},
{"reference": "plexus-compiler-extras"},
{"reference": "plexus-compiler-javadoc"},
{"reference": "plexus-compiler-pom"},
{"reference": "plexus-containers"},
{"reference": "plexus-containers-component-annotations"},
{"reference": "plexus-interpolation"},
{"reference": "plexus-sec-dispatcher"},
{"reference": "plexus-utils"},
{"reference": "qdox"},
{"reference": "qdox-javadoc"},
{"reference": "sisu"},
{"reference": "sisu-inject"},
{"reference": "sisu-plexus"},
{"reference": "slf4j"},
{"reference": "slf4j-ext"},
{"reference": "slf4j-javadoc"},
{"reference": "slf4j-jcl"},
{"reference": "slf4j-jdk14"},
{"reference": "slf4j-log4j12"},
{"reference": "slf4j-manual"},
{"reference": "slf4j-sources"}
]
}
]
},
"Red Hat Enterprise Linux-9": {
"package_manager": "rpm-list",
"constraints": [
{
"release": "9",
"pkgs": [
{"reference": "idm-jss"},
{"reference": "idm-pki-acme"},
{"reference": "idm-pki-base"},
{"reference": "idm-pki-ca"},
{"reference": "idm-pki-est"},
{"reference": "idm-pki-java"},
{"reference": "idm-pki-kra"},
{"reference": "idm-pki-server"},
{"reference": "idm-pki-tools"},
{"reference": "jackson-modules-base"},
{"reference": "jakarta-mail"},
{"reference": "jcl-over-slf4j"},
{"reference": "jmc"},
{"reference": "jss"},
{"reference": "log4j"},
{"reference": "log4j-jcl"},
{"reference": "log4j-slf4j"},
{"reference": "maven-dependency-tree"},
{"reference": "maven-enforcer-api"},
{"reference": "maven-enforcer-plugin"},
{"reference": "maven-enforcer-rules"},
{"reference": "maven-jar-plugin"},
{"reference": "maven-resolver"},
{"reference": "pki-acme"},
{"reference": "pki-base"},
{"reference": "pki-base-java"},
{"reference": "pki-ca"},
{"reference": "pki-core"},
{"reference": "pki-jackson-module-jaxb-annotations"},
{"reference": "pki-kra"},
{"reference": "pki-server"},
{"reference": "pki-symkey"},
{"reference": "pki-tools"},
{"reference": "python3-idm-pki"},
{"reference": "python3-pki"},
{"reference": "qdox"},
{"reference": "slf4j"},
{"reference": "slf4j-jdk14"}
]
}
]
}
};
var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);
if (!empty_or_null(report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : report
);
exit(0);
}
else
{
audit(AUDIT_HOST_NOT, 'affected');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation