Amazon Linux 2023 : lemon, sqlite, sqlite-analyzer (ALAS2023-2023-264)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-264 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks ...

Amazon Linux 2023 : python3-tornado (ALAS2023-2025-1002)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1002 advisory. Tornado is a Python web framework and asynchronous networking library. When Tornado's multipart/form- data parser encounters certain errors, it logs a warning but continues trying to parse the remainde...

Amazon Linux 2023 : mariadb1011, mariadb1011-backup, mariadb1011-client-utils (ALAS2023-2025-1016)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1016 advisory. MariaDB Server 10.10 through 10.11. and 11.0 through 11.4. crashes in JOIN::fixallsplittingsinplan. CVE-2023-52971 Tenable has extracted the preceding description block directly from the tested product...

Amazon Linux 2023 : bpftool, kernel6.12, kernel6.12-modules-extra (ALAS2023-2025-995)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-995 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: track changespktdata property for global functions CVE-2024-58098 In the Linux kernel, the following vulnerability has...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2025-1013)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1013 advisory. SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read...

Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2025-1007)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1007 advisory. Thread creation while a directory handle is open does a fchdir, affecting other threads race condition CVE-2025-40909 Tenable has extracted the preceding description block directly from the tested...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2025-1008)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1008 advisory. External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network. CVE-2025-26646 Tenable has extracted th...

Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2025-998)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-998 advisory. A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the...

Medium: libcusparse-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Important: cni-plugins

Issue Overview: The various Is methods IsPrivate, IsLoopback, etc did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. CVE-2024-24790 The net/http package accepted data in the chunked transfer encoding...

Medium: libnvjpeg-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Medium: ecs-init

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Amazon Linux 2023 : libcusparse-12, libcusparse-devel-12 (ALAS2023NVIDIA-2025-082)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-082 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-compiler-12 (ALAS2023NVIDIA-2025-119)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-119 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-nvprof-12 (ALAS2023NVIDIA-2025-102)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-102 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-profiler-api-12 (ALAS2023NVIDIA-2025-096)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-096 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : gds-tools-12, libcufile-12, libcufile-devel-12 (ALAS2023NVIDIA-2025-087)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-087 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : nvidia-gds-12 (ALAS2023NVIDIA-2025-074)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-074 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-sanitizer-12 (ALAS2023NVIDIA-2025-093)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-093 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-gdb-12, cuda-gdb-src-12 (ALAS2023NVIDIA-2025-111)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-111 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...