CVE-2023-6178: tenable nessus Out-of-bounds Write

Vulnerability summary

CVE-2023-6178 is a medium (CVSS 6.8) Out-of-bounds Write vulnerability in tenable nessus. EPSS estimates a 0.83% chance of exploitation in the next 30 days, higher than 56.6% of scored vulnerabilities.

Timeline

1. 20-11-2023
   PublishedVulnerability first disclosed.
2. 02-08-2024
   Last modifiedVulnerability information updated.

Description

An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.