The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5873-1 advisory.

    It was discovered that Go Text incorrectly handled certain encodings. An attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2020-14040)

    It was discovered that Go Text incorrectly handled certain BCP 47 language tags. An attacker could     possibly use this issue to cause a denial of service. CVE-2020-28851, CVE-2020-28852 and CVE-2021-38561     affected only Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-28851, CVE-2020-28852, CVE-2021-38561,     CVE-2022-32149)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2020_4694 advisory.

    * containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters     (CVE-2020-10749)

    * QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

    * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of golang installed on the remote host is prior to 1.13.15-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1494 advisory.

    The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the     UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker     could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an     infinite loop if the String function on the Decoder is called, or the Decoder is passed to     golang.org/x/text/transform.String.A denial of service vulnerability was found in the golang.org/x/text     library. A library or application must use one of the vulnerable functions, such as unicode.Transform,     transform.String, or transform.Byte, to be susceptible to this vulnerability. If an attacker is able to     supply specific characters or strings to the vulnerable application, there is the potential to cause an     infinite loop to occur using more memory, resulting in a denial of service. (CVE-2020-14040)

    Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in     encoding/binary via invalid inputs. (CVE-2020-16845)



Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3665 advisory.

  - golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

  - golang: data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586)

  - golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs     (CVE-2020-16845)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-887:04 advisory.

    * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)
      * podman: environment variables leak between containers when started via Varlink or Docker-compatible     REST API (CVE-2020-14370)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-886:03 advisory.

    * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4297 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    The runC tool is a lightweight, portable implementation of the Open Container Format (OCF) that provides     container runtime.

    The skopeo command lets you inspect images from container image registries, get images and image layers,     and use signatures to create and verify files.

    Security Fix(es):

    * jenkins-jira-plugin: plugin information disclosure (CVE-2019-16541)

    * jenkins-2-plugins/mailer: Missing hostname validation in Mailer Plugin could result in MITM     (CVE-2020-2252)

    * jenkins-2-plugins/blueocean: Path traversal vulnerability in Blue Ocean Plugin could allow to read     arbitrary files (CVE-2020-2254)

    * jenkins-2-plugins/blueocean: Blue Ocean Plugin does not perform permission checks in several HTTP     endpoints implementing connection tests. (CVE-2020-2255)

    * kubernetes: Docker config secrets leaked when file is malformed and loglevel >= 4 (CVE-2020-8564)

    * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

    * podman: environment variables leak between containers when started via Varlink or Docker-compatible REST     API (CVE-2020-14370)

    * golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs     (CVE-2020-16845)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4694 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters     (CVE-2020-10749)

    * QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

    * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3369 advisory.

    Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for     installation into an on-premise OpenShift Container Platform installation.

    Security Fix(es):

    * golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic (CVE-2020-9283)

    * nodejs-lodash: prototype pollution in zipObjectDeep function (CVE-2020-8203)

    * jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code     execution (CVE-2020-11023)

    * macaron: open redirect in the static handler (CVE-2020-12666)

    * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-942:01 advisory.

    * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode     could lead to crash (CVE-2020-14040)
    * golang: data race in certain net/http servers including ReverseProxy can lead     to DoS (CVE-2020-15586)
    * golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from     invalid inputs (CVE-2020-16845)     CVE(s):
    CVE-2020-14040     CVE-2020-15586     CVE-2020-16845     Modularity name: go-toolset     Stream: rhel8

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3665 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    Security Fix(es):

    * golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash     (CVE-2020-14040)

    * golang: data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586)

    * golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs     (CVE-2020-16845)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4297 advisory.

  - jenkins-jira-plugin: plugin information disclosure (CVE-2019-16541)

  - jenkins-2-plugins/mailer: Missing hostname validation in Mailer Plugin could result in MITM     (CVE-2020-2252)

  - jenkins-2-plugins/blueocean: Path traversal vulnerability in Blue Ocean Plugin could allow to read     arbitrary files (CVE-2020-2254)

  - jenkins-2-plugins/blueocean: Blue Ocean Plugin does not perform permission checks in several HTTP     endpoints implementing connection tests. (CVE-2020-2255)

  - kubernetes: Docker config secrets leaked when file is malformed and loglevel >= 4 (CVE-2020-8564)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of golang installed on the remote host is prior to 1.13.15-1.59. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1436 advisory.

    The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the     UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker     could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to trigger an     infinite loop if the String function on the Decoder is called, or the Decoder is passed to     golang.org/x/text/transform.String. A denial of service vulnerability was found in the golang.org/x/text     library. A library or application must use one of the vulnerable functions, such as unicode.Transform,     transform.String, or transform.Byte, to be susceptible to this vulnerability. If an attacker is able to     supply specific characters or strings to the vulnerable application, there is the potential to cause an     infinite loop to occur using more memory, resulting in a denial of service. (CVE-2020-14040)

    Go before 1.13.15 and 14.x before 1.14.7 can have an infinite read loop in ReadUvarint and ReadVarint in     encoding/binary via invalid inputs. (CVE-2020-16845)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0014 advisory.

    This advisory aggregates security fixes for the buildah SRPM in CIQ LTS 8.6. It addresses 37 CVEs:
    CVE-2019-10214, CVE-2023-48795, CVE-2024-24788, CVE-2021-4024, CVE-2024-24791, and 32 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
171575	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Go Text vulnerabilities (USN-5873-1)	Nessus	Ubuntu Local Security Checks	2023/2/16	2025/9/3	high
359328	Rocky Linux 8 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4694)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
141107	Amazon Linux 2 : golang (ALAS-2020-1494)	Nessus	Amazon Linux Local Security Checks	2020/10/1	2024/12/11	high
145887	CentOS 8 : go-toolset:rhel8 (CESA-2020:3665)	Nessus	CentOS Local Security Checks	2021/2/1	2023/2/8	high
291650	MiracleLinux 7 : podman-1.6.4-26.el7 (AXSA:2020-887:04)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	medium
294337	MiracleLinux 7 : buildah-1.11.6-12.el7 (AXSA:2020-886:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
142002	RHEL 7 / 8 : OpenShift Container Platform 4.6.1 (RHSA-2020:4297)	Nessus	Red Hat Local Security Checks	2020/10/28	2024/11/7	critical
142451	RHEL 8 : container-tools:rhel8 (RHSA-2020:4694)	Nessus	Red Hat Local Security Checks	2020/11/4	2025/3/13	medium
139385	RHEL 7 / 8 : Red Hat OpenShift Service Mesh (RHSA-2020:3369)	Nessus	Red Hat Local Security Checks	2020/8/7	2025/1/24	high
291636	MiracleLinux 8 : go-toolset:rhel8 (AXSA:2020-942:01)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	high
140391	RHEL 8 : go-toolset:rhel8 (RHSA-2020:3665)	Nessus	Red Hat Local Security Checks	2020/9/8	2025/3/13	high
312408	RHCOS 4 : OpenShift Container Platform 4.6.1 (RHSA-2020:4297)	Nessus	Red Hat Local Security Checks	2026/5/6	2026/5/6	critical
141969	Amazon Linux AMI : golang (ALAS-2020-1436)	Nessus	Amazon Linux Local Security Checks	2020/10/28	2024/12/11	high
358310	Rocky Linux 8.6 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc Multiple Vulnerabilities (ciqsa-2026_0014)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	medium

检测

插件搜索

high

medium

high

high

medium

high

critical

medium

high

high

high

critical

high

medium