The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2049 advisory.

  - golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)

  - buildah: full container escape at build time (CVE-2024-1753)

  - jose-go: improper handling of highly compressed data (CVE-2024-28180)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2671 advisory.

  - golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1748002217 advisory.

  - Using go get to fetch a module with the .git suffix may unexpectedly fallback to the insecure git://     protocol if the module is unavailable via the secure https:// and git+ssh:// protocols, even if     GOINSECURE is not set for said module. This only affects users who are not using the module proxy and are     fetching modules directly (i.e. GOPROXY=off). (CVE-2023-45285)

  - An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive     number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and     CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is     allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an     HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to     be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the     receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header     frames we will process before closing a connection. (CVE-2023-45288)

  - The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6     addresses, returning false for addresses which would return true in their traditional IPv4 forms.
    (CVE-2024-24790)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_2724 advisory.

    * golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)

    * golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect     (CVE-2023-45289)

    * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2612-1 advisory.

    This update for google-guest-agent fixes the following issues

    Security issues:

    - CVE-2026-39821: Update golang.org/x/net/idna dependency (bsc#1266603).
    - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39829: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39830: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39831: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39832: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39833: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39834: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-39835: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-42508: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46595: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46597: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2026-46598: Update golang.org/x/crypto dependency (bsc#1266171).
    - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533).
    - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause     authorization bypass in       golang.org/x/crypto (bsc#1234563).
    - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of     golang.org/x/crypto/ssh       (bsc#1239334).
    - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory     consumption       (bsc#1253889).
    - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2     :path pseudo-       header (bsc#1260264).
    - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad     SETTINGS_MAX_FRAME_SIZE       (bsc#1265762).
    - CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead     to a denial of       service (bsc#1262926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
311884	RHCOS 4 : OpenShift Container Platform 4.13.41 (RHSA-2024:2049)	Nessus	Red Hat Local Security Checks	2026/5/4	2026/5/4	medium
311885	RHCOS 4 : Red Hat build of MicroShift 4.14.24 (RHSA-2024:2671)	Nessus	Red Hat Local Security Checks	2026/5/4	2026/5/4	high
351869	AlmaLinux 9.2 [TuxCare] Security Update: golang / golang-bin / golang-docs / golang-misc / golang-race / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1748002217)	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/9/30	critical
355249	Rocky Linux 9 [CIQ] Security Update: git-lfs / git-lfs-debuginfo / git-lfs-debugsource Multiple Vulnerabilities (crlsa-2024_2724)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
322894	SUSE SLES15 Security Update : google-guest-agent (SUSE-SU-2026:2612-1)	Nessus	SuSE Local Security Checks	2026/6/26	2026/6/26	high

检测

插件搜索

medium

high

critical

medium

high