Synthetic Nmap XML fixture
Service inventory and CVE review
Banner matches are candidates for review. Package backports and configuration can change applicability.
Two curated upstream advisories. No complete CVE coverage is implied. Catalog reviewed 2026-10-13.
| Host | Port | Observed service | Curated rule status |
|---|
| 192.0.2.10 | tcp/80 | Apache httpd 2.4.49 | potential |
| 192.0.2.20 | tcp/22 | OpenSSH 9.2p1 | potential |
| 192.0.2.30 | tcp/22 | OpenSSH 9.8p1 | no-catalog-match |
potential
CVE-2021-41773
Apache httpd 2.4.49 on tcp/80
Exposure depends on the Alias configuration and filesystem access rules. CGI changes the possible impact.
Remediation
Check the package advisory and install a supported patched release. Apache 2.4.50's fix was incomplete, tracked as CVE-2021-42013. Apache 2.4.51 addressed that follow-up issue.
Before closing
Confirm the installed package build and review Alias access rules before closing this finding.
Apache advisory NVD record Incomplete fix
potential
CVE-2024-6387
OpenSSH 9.2p1 on tcp/22
This rule covers the Portable OpenSSH regression. OpenBSD is excluded. The remote banner does not establish platform details or downstream patch status.
Remediation
Install the operating-system vendor's patched package. The upstream fix shipped in OpenSSH 9.8p1. Retest after restarting sshd.
Before closing
Check the distribution security advisory against the full installed package version, including any backported fix.
OpenSSH release notes NVD record
No catalog match means neither of the two curated rules matched. It is not a security assessment.