The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8089-1 advisory.

    Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher, and Kaan Onarlioglu discovered that     servers using Go Networking could hang during shutdown if preempted by a fatal error. An attacker could     possibly use this to cause a denial of service. This issue only affected Ubuntu 22.04 LTS.
    (CVE-2022-27664)

    Arpad Ryszka and Jakob Ackermann discovered that a maliciously crafted stream could cause excessive CPU     usage in Go Networking's HPACK decoder. An attacker could possibly use this to cause a denial of service.
    This issue only affected Ubuntu 22.04 LTS. (CVE-2022-41723)

    Mohammad Thoriq Aziz discovered that Go Networking did not properly sanitize some text nodes. An attacker     could possibly use this to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS.
    (CVE-2023-3978)

    Sean Ng discovered an error in Go Networking's HTML tag handling. An attacker could possibly use this to     cause a denial of service. (CVE-2025-22872)

    Guido Vranken and Jakub Ciolek discovered that a maliciously crafted HTML document could exhaust system     resources on servers using Go Networking. An attacker could possibly use this to cause a denial of     service. (CVE-2025-47911)

    Guido Vranken discovered that a maliciously crafted HTML document could put servers using Go Networking     into an infinite loop. An attacker could possibly use this to cause a denial of service. (CVE-2025-58190)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain     inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
    (CVE-2025-58190)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20132-1 advisory.

    elemental-register was updated to 1.8.1:

    Changes on top of v1.8.1:

      * Update headers to 2026
      * Update questions to include SL Micro 6.2

    Update to v1.8.1:

      * Install yip config files in before-install step
      * Bump github.com/rancher-sandbox/go-tpm and its dependencies         This includes few CVE fixes:
        * bsc#1241826 (CVE-2025-22872)
        * bsc#1241857 (CVE-2025-22872)
        * bsc#1251511 (CVE-2025-47911)
        * bsc#1251679 (CVE-2025-58190)

    elemental-toolkit was updated to v2.3.2:

      * Bump golang.org/x/crypto library         This includes few CVE fixes:
        * bsc#1241826 (CVE-2025-22872)
        * bsc#1241857 (CVE-2025-22872)
        * bsc#1251511 (CVE-2025-47911)
        * bsc#1251679 (CVE-2025-58190)
        * bsc#1253581 (CVE-2025-47913)
        * bsc#1253901 (CVE-2025-58181)
        * bsc#1254079 (CVE-2025-47914)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-openSUSE-RU-2026:20010-1 advisory.

    - Update to version 0.68.2:
      * release: v0.68.2 [release/v0.68] (#9950)
      * fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949)
      * ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
302214	Ubuntu 22.04 LTS / 24.04 LTS : Go Networking vulnerabilities (USN-8089-1)	Nessus	Ubuntu Local Security Checks	2026/3/13	2026/3/13	medium
298280	Linux Distros Unpatched Vulnerability : CVE-2025-58190	Nessus	Misc.	2026/2/6	2026/4/29	medium
297788	openSUSE 16 Security Update : elemental-register, elemental-toolkit (openSUSE-SU-2026:20132-1)	Nessus	SuSE Local Security Checks	2026/2/4	2026/2/19	medium
282650	openSUSE 16 : Recommended update for trivy (SUSE-SU-openSUSE-RU-2026:20010-1)	Nessus	SuSE Local Security Checks	2026/1/13	2026/2/19	medium

检测

插件搜索

medium

medium

medium

medium