CVE-2019-3982: Input Validation

Q: What is CVE-2019-3982?

CVE-2019-3982 is a Denial of Service vulnerability found in Nessus versions 8.6.0 and earlier.

Q: How does CVE-2019-3982 affect Nessus?

CVE-2019-3982 affects Nessus versions 8.6.0 and earlier by causing the scanner to become temporarily unresponsive.

Q: What is the severity of CVE-2019-3982?

CVE-2019-3982 has a severity rating of medium (6.5).

Q: How can I fix CVE-2019-3982?

To fix CVE-2019-3982, users should update to a version of Nessus that is 8.6.0 or later.

Published Oct 23, 2019

Updated

Nessus versions 8.6.0 and earlier were found to contain a Denial of Service vulnerability due to improper validation of specific imported scan types. An authenticated, remote attacker could potentially exploit this vulnerability to cause a Nessus scanner to become temporarily unresponsive.

Affected Software

1 affected component

Tenable Nessus<=8.6.0

Event History

Oct 23, 2019

CVE Published

via MITRE·06:55 PM

Data Sourced

via MITRE·06:55 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-3982?

CVE-2019-3982 is a Denial of Service vulnerability found in Nessus versions 8.6.0 and earlier.

How does CVE-2019-3982 affect Nessus?

CVE-2019-3982 affects Nessus versions 8.6.0 and earlier by causing the scanner to become temporarily unresponsive.

How can an attacker exploit CVE-2019-3982?

An authenticated, remote attacker could potentially exploit CVE-2019-3982 by causing a Nessus scanner to become temporarily unresponsive.

What is the severity of CVE-2019-3982?

CVE-2019-3982 has a severity rating of medium (6.5).

How can I fix CVE-2019-3982?