The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-00368e9022 advisory.

    - Update to release v1.32.10
    - Resolves: rhbz#2414539
    - Resolves: rhbz#2398587, rhbz#2398848, rhbz#2399249, rhbz#2399522
    - Resolves: rhbz#2399703, rhbz#2399721, rhbz#2407788, rhbz#2408058
    - Resolves: rhbz#2408315, rhbz#2408609, rhbz#2408672, rhbz#2408730
    - Resolves: rhbz#2409237, rhbz#2409527, rhbz#2409788, rhbz#2410202
    - Resolves: rhbz#2410477, rhbz#2410738, rhbz#2411117, rhbz#2411376
    - Resolves: rhbz#2411634, rhbz#2412569, rhbz#2412588, rhbz#2412803
    - Upstream fixes

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0747 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-61725:
    The ParseAddress function constructs domain-literal address components through repeated string     concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.

    CVE-2025-61724:
    The Reader.ReadResponse function constructs a response string through repeated string concatenation of     lines. When the number of lines in a response is large, this can cause excessive CPU consumption.

    CVE-2025-58187:
    Due to the design of the name constraint checking algorithm, the processing time of some inputs scals non-     linearly with respect to the size of the certificate. This affects programs which validate arbitrary     certificate chains.

    CVE-2025-58183:
    tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0     sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader     to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a     small compressed input can result in large allocations.

    CVE-2025-58186:
    Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have     a limit. By sending a lot of very small cookies such as a=;, an attacker can make an HTTP server     allocate a large amount of structs, causing large memory consumption.

    CVE-2025-58189:
    When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information (the     ALPN protocols sent by the client) which is not escaped.

    CVE-2025-58185:
    Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory     exhaustion.

    CVE-2025-61723:
    The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the     input. This affects programs which parse untrusted PEM inputs.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1c78e384e3 advisory.

    Update to 1.3.0

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20308-1 advisory.

    - Update to version 1.24.13 (jsc#SLE-18320)
    - CVE-2025-58189: crypto/tls: ALPN negotiation error contains attacker controlled information.
    (bsc#1251255)
    - CVE-2025-61725: net/mail: excessive CPU consumption in ParseAddress. (bsc#1251253)
    - CVE-2025-58188: crypto/x509: panic when validating certificates with DSA public keys. (bsc#1251260)
    - CVE-2025-58185: encoding/asn1: pre-allocating memory when parsing DER payload can cause memory     exhaustion. (bsc#1251258)
    - CVE-2025-58186: net/http: lack of limit when parsing cookies can cause memory exhaustion. (bsc#1251259)
    - CVE-2025-61723: encoding/pem: quadratic complexity when parsing some invalid inputs. (bsc#1251256)
    - CVE-2025-58183: archive/tar: unbounded allocation when parsing GNU sparse map. (bsc#1251261)
    - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames. (bsc#1251257)
    - CVE-2025-58187: crypto/x509: quadratic complexity when checking name constraints. (bsc#1251254)
    - CVE-2025-61724: net/textproto: excessive CPU consumption in Reader.ReadResponse. (bsc#1251262)
    - CVE-2025-61729: crypto/x509: excessive resource consumption in printing error string for host     certificate validation. (bsc#1254431)
    - CVE-2025-61727: crypto/x509: excluded subdomain constraint doesn't preclude wildcard SAN. (bsc#1254430)
    - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level.
    (bsc#1256821)
    - CVE-2025-61731: cmd/go: bypass of flag sanitization can lead to arbitrary code execution. (bsc#1256819)
    - CVE-2025-61726: net/http: memory exhaustion in Request.ParseForm. (bsc#1256817)
    - CVE-2025-61728: archive/zip: denial of service when parsing arbitrary ZIP archives. (bsc#1256816)
    - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session     resumption does not account for the expiration of full certificate chain. (bsc#1256818)
    - CVE-2025-61732: cmd/go: potential code smuggling using doc comments. (bsc#1257692)
    - CVE-2025-68119: cmd/go: unexpected code execution when invoking toolchain. (bsc#1256820)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
276517	Fedora 43 : kubernetes1.32 (2025-00368e9022)	Nessus	Fedora Local Security Checks	2025/11/22	2026/3/10	medium
330795	TencentOS Server 4: skopeo (TSSA-2026:0747)	Nessus	Tencent Local Security Checks	2026/7/29	2026/7/29	medium
328432	Fedora 43 : dnsx (2026-1c78e384e3)	Nessus	Fedora Local Security Checks	2026/7/20	2026/7/22	medium
301313	openSUSE 16 Security Update : go1.24-openssl (openSUSE-SU-2026:20308-1)	Nessus	SuSE Local Security Checks	2026/3/6	2026/3/6	critical

检测

插件搜索

medium

medium

medium

critical