The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:9473 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

    * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack     exhaustion. This is a follow-up to CVE-2022-30635.(CVE-2024-34156)

Tenable has extracted the preceding description block directly from the EulerOS golang security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:11216 advisory.

    The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-     ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI     concerns itself only with network connectivity of containers and removing allocated resources when the     container is deleted.

    Security Fix(es):

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:1190 advisory.

    A highly-available key value store for shared configuration

    Security Fix(es):

    * golang: Calling Decoder.Decode on a message which contains deeply nested     structures can cause a panic due to stack exhaustion (CVE-2024-34156)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:9473 advisory.

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

    * dompurify: nesting-based mutation XSS vulnerability (CVE-2024-47875)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0192 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-34156:
    Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack     exhaustion. This is a follow-up to CVE-2022-30635.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:0203 advisory.

    A highly-available key value store for shared configuration

    Security Fix(es):

    * golang: Calling Decoder.Decode on a message which contains deeply nested     structures can cause a panic due to stack exhaustion (CVE-2024-34156)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:11217 advisory.

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0249 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-34156:
    Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack     exhaustion. This is a follow-up to CVE-2022-30635.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-7204 advisory.

    [101-2.0.1]
    - Rebuild on new golang to address CVE-2024-34156

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9454 advisory.

    [5.2.2-9.0.1]
    - Add devices on container startup, not on creation
    - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
    - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

    [4:5.2.2-9]
    - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel       (https://github.com/containers/podman/commit/6df7dfb)
    - Resolves: RHEL-61847

    [4:5.2.2-8]
    - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel       (https://github.com/containers/podman/commit/c03b5f3)
    - Resolves: RHEL-61667

    [4:5.2.2-7]
    - attempt to fix the TMT testing pipeline
    - Resolves: RHEL-59714

    [4:5.2.2-6]
    - podman gating: test CNI, thanks to Ed Santiago
    - Resolves: RHEL-61249

    [4:5.2.2-5]
    - bump Epoch to 4
    - Resolves: RHEL-60963

    [2:5.2.2-4]
    - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel       (https://github.com/containers/podman/commit/8e693ce)
    - Resolves: RHEL-60963

    [2:5.2.2-3]
    - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel       (https://github.com/containers/podman/commit/5f2c188)
    - Resolves: RHEL-59703

    [2:5.2.2-2]
    - Add cni build tag to podman build
    - Resolves: RHEL-59714

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8038 advisory.

    aardvark-dns     [2:1.10.1-2]
    - build off the RHEL maintenance branch
    - Resolves: RHEL-59129

    buildah     cockpit-podman     conmon     containernetworking-plugins     containers-common     container-selinux     criu     crun     fuse-overlayfs     libslirp     netavark     oci-seccomp-bpf-hook     podman     python-podman     runc     [1:1.1.12-5]
    - bump golang buildrequires
    - add no_openssl build tag
    - Resolves RHEL-55757

    skopeo     slirp4netns     udica

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:3773 advisory.

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6912 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    Security Fix(es):

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6913 advisory.

    The golang packages provide the Go programming language compiler.

    Security Fix(es):

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a     panic/stack exhaustion (CVE-2024-34155)

    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)

    * go/build/constraint: golang: Calling Parse on a // +build build tag line with deeply nested     expressions can cause a panic due to stack exhaustion (CVE-2024-34158)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6908 advisory.

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
    * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a     panic/stack exhaustion (CVE-2024-34155)
    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)
    * go/build/constraint: golang: Calling Parse on a // +build build tag line with deeply nested     expressions can cause a panic due to stack exhaustion (CVE-2024-34158)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6913 advisory.

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
    * go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a     panic/stack exhaustion (CVE-2024-34155)
    * encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can     cause a panic due to stack exhaustion (CVE-2024-34156)
    * go/build/constraint: golang: Calling Parse on a // +build build tag line with deeply nested     expressions can cause a panic due to stack exhaustion (CVE-2024-34158)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
210841	RHEL 9 : grafana (RHSA-2024:9473)	Nessus	Red Hat Local Security Checks	2024/11/12	2025/3/6	critical
212632	EulerOS 2.0 SP11 : golang (EulerOS-SA-2024-2981)	Nessus	Huawei Local Security Checks	2024/12/12	2025/1/24	high
213157	RHEL 9 : containernetworking-plugins (RHSA-2024:11216)	Nessus	Red Hat Local Security Checks	2024/12/18	2025/3/6	high
215188	RHEL 9 : Red Hat OpenStack Platform 17.1 (etcd) (RHSA-2025:1190)	Nessus	Red Hat Local Security Checks	2025/2/10	2025/6/5	high
232879	RockyLinux 9 : grafana (RLSA-2024:9473)	Nessus	Rocky Linux Local Security Checks	2025/3/19	2025/3/19	critical
236110	Alibaba Cloud Linux 3 : 0192: git-lfs (ALINUX3-SA-2024:0192)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
213646	RHEL 8 : Red Hat OpenStack Platform 16.2 (etcd) (RHSA-2025:0203)	Nessus	Red Hat Local Security Checks	2025/1/9	2025/6/5	high
232913	RockyLinux 9 : skopeo (RLSA-2024:11217)	Nessus	Rocky Linux Local Security Checks	2025/3/19	2025/3/19	high
236347	Alibaba Cloud Linux 3 : 0249: osbuild-composer (ALINUX3-SA-2024:0249)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
207845	Oracle Linux 9 : osbuild-composer (ELSA-2024-7204)	Nessus	Oracle Linux Local Security Checks	2024/9/27	2025/9/11	high
211667	Oracle Linux 9 : podman (ELSA-2024-9454)	Nessus	Oracle Linux Local Security Checks	2024/11/21	2025/9/11	medium
209004	Oracle Linux 8 : container-tools:ol8 (ELSA-2024-8038)	Nessus	Oracle Linux Local Security Checks	2024/10/14	2025/9/11	high
243110	RockyLinux 9 : delve and golang (RLSA-2025:3773)	Nessus	Rocky Linux Local Security Checks	2025/7/30	2025/7/30	medium
210479	RHEL 8 : go-toolset:rhel8 (RHSA-2024:6912)	Nessus	Red Hat Local Security Checks	2024/11/7	2024/11/7	high
207591	RHEL 9 : golang (RHSA-2024:6913)	Nessus	Red Hat Local Security Checks	2024/9/23	2025/3/6	high
207746	AlmaLinux 8 : go-toolset:rhel8 (ALSA-2024:6908)	Nessus	Alma Linux Local Security Checks	2024/9/25	2025/1/24	high
207753	AlmaLinux 9 : golang (ALSA-2024:6913)	Nessus	Alma Linux Local Security Checks	2024/9/25	2025/1/24	high

检测

插件搜索

critical

high

high

high

critical

high

high

high

high

high

medium

high

medium

high

high

high

high