The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-22011 advisory.

    - fixes '[Minor Incident] CVE-2025-52881 buildah: container escape and denial of service due to arbitrary     write gadgets and procfs write redirects [rhel-9.7.z]'
    - rebuild for CVE-2025-58183

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:22012 advisory.

    * runc: container escape and denial of service due to arbitrary write gadgets and procfs write redirects     (CVE-2025-52881)
      * golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:21701 advisory.

  - golang: archive/tar: Unbounded allocation when parsing GNU sparse map (CVE-2025-58183)

  - kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766137317 advisory.

  - runc is a CLI tool for spawning and running containers according to the OCI specification. In versions     1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs     files through the use of a racing container with shared mounts (we have also verified this attack is     possible to exploit using a standard Dockerfile with docker buildx build as that also permits triggering     parallel execution of containers with custom shared mounts configured). This redirect could be through     symbolic links in a tmpfs or theoretically other methods such as regular bind-mounts. While similar, the     mitigation applied for the related CVE, CVE-2019-19921, was fairly limited and effectively only caused     runc to verify that when LSM labels are written they are actually procfs files. This issue is fixed in     versions 1.2.8, 1.3.3, and 1.4.0-rc.3. (CVE-2025-52881)

  - tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0     sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader     to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a     small compressed input can result in large allocations. (CVE-2025-58183)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766049566 advisory.

  - Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go,     including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT)     standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE input, Go     JOSE could use excessive memory. The code used strings.Split(token, .) to split JWT tokens, which is     vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number     of `.` characters. An attacker could exploit this by sending numerous malformed tokens, leading to memory     exhaustion and a Denial of Service. Version 4.0.5 fixes this issue. As a workaround, applications could     pre-validate that payloads passed to Go JOSE do not contain an excessive number of `.` characters.
    (CVE-2025-27144)

  - runc is a CLI tool for spawning and running containers according to the OCI specification. In versions     1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs     files through the use of a racing container with shared mounts (we have also verified this attack is     possible to exploit using a standard Dockerfile with docker buildx build as that also permits triggering     parallel execution of containers with custom shared mounts configured). This redirect could be through     symbolic links in a tmpfs or theoretically other methods such as regular bind-mounts. While similar, the     mitigation applied for the related CVE, CVE-2019-19921, was fairly limited and effectively only caused     runc to verify that when LSM labels are written they are actually procfs files. This issue is fixed in     versions 1.2.8, 1.3.3, and 1.4.0-rc.3. (CVE-2025-52881)

  - tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0     sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader     to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a     small compressed input can result in large allocations. (CVE-2025-58183)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
276895	Oracle Linux 9 : buildah (ELSA-2025-22011)	Nessus	Oracle Linux Local Security Checks	2025/11/26	2026/3/3	high
277566	AlmaLinux 10 : buildah (ALSA-2025:22012)	Nessus	Alma Linux Local Security Checks	2025/12/5	2025/12/5	high
319586	RHCOS 4 : OpenShift Container Platform 4.20.24 (RHSA-2026:21701)	Nessus	Red Hat Local Security Checks	2026/6/6	2026/10/15	high
359914	AlmaLinux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766137317)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	high
359930	Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766049566)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

high

high

high

high

high