遠端主機受到 GLSA-202208-02 中所述的弱點影響 (Go：多個弱點)

  - Go 1.14.12 之前版本以及 1.15.5 之前的 1.15.x 版本允許發生程式碼插入攻擊。(CVE-2020-28366)

  - Go 1.14.12 之前版本以及 1.15.5 之前的 1.15.x 版本允許發生引數插入攻擊。(CVE-2020-28367)

  - 在 Go 1.15.9 版和 1.16.x 版的 1.16.1 之前版本中，如果自訂 TokenReader (對於 xml.NewTokenDecoder) 在元件中間返回 EOF，則 encoding/xml 會發生無限迴圈。Decode、DecodeElement 或 Skip 方法中皆可發生此問題。(CVE-2021-27918)

  - 在 Go 1.16.1 之前的 1.16.x 版本中，archive/zip 允許攻擊者在針對任何檔案名稱開頭出現 ../ 的 ZIP 封存嘗試使用 Reader.Open API 時，造成程式拒絕服務 (發生錯誤)。(CVE-2021-27919)

  - Go 1.17 之前版本未正確考量 IP 位址八位元組開頭的無關零字元，由於非預期的八進位轉譯，這 (在某些情況下) 允許攻擊者繞過以 IP 位址為基礎的存取控制。這會影響 net.ParseIP 和 net.ParseCIDR。(CVE-2021-29923)

  - 在 Go 1.14.14 和 1.15.x 版的 1.15.7 之前版本中，crypto/elliptic/p224.go 可以生成不正確的輸出，此問題與最後完整還原過程中 P-224 欄位中最低分支的反向溢位相關。
    (CVE-2021-3114)

  - Windows 上的 Go 1.14.14 和 1.15.x 版的 1.15.7 之前版本在使用 go get 命令擷取利用 CGO 的模組時 (例如，CGO 可以從不受信任的下載來源執行 GCC 程序)，很容易受到命令插入和遠端程式碼執行攻擊。(CVE-2021-3115)

  - 1.15.12 版之前的 net/http (在 Go 中) 和 1.16.4 版之前的 1.16.x 允許遠端攻擊者透過傳送至 ReadRequest 或 ReadResponse 的大形標頭，以引發拒絕服務 (不穩定)。伺服器、傳輸和用戶端在某些組態中都會受到影響。(CVE-2021-31525)

  - 1.15.13 之前的 Go 和 1.16.5 之前的 1.16.x 具有不驗證來自 DNS 伺服器的回覆的 DNS 查閱函式，因此傳回值可能包含不符合 RFC1035 格式的不安全插入 (例如 XSS)。(CVE-2021-33195)

  - 在 Go 1.15.13 版和 1.16.x 的 1.16.5 之前版本中，封存/ZIP 中特製的檔案數（在封存的標頭中）可能會導致 NewReader 或 OpenReader 錯誤。(CVE-2021-33196)

  - 在 1.15.13 版之前的 Go 和 1.16.5 版之前的 1.16.x，攻擊者可以利用 ReverseProxy 的一些配置 (來自 net/http/httputil) 插入任意標頭。
    (CVE-2021-33197)

  - 在 1.15.13 版之前的 Go 和 1.16.x 版之前的 1.16.5，大量使用 math/big.Rat SetString 或 UnmarshalText 方法可能會引起錯誤。(CVE-2021-33198)

  - 在 Go 1.16.5 版以及之前的所有版本中，crypto/tls 套件在進行 RSA 型金鑰交換時，未正確宣告 X.509 憑證中的公開金鑰類型符合預期類型，惡意 TLS 伺服器會藉此造成 TLS 用戶端不穩定。(CVE-2021-34558)

  - 1.15.15 之前的版本和 1.16.7 之前的 1.16.x 存在一個爭用情形，可導致 ErrAbortHandler 中止時發生 net/http/httputil ReverseProxy 錯誤。(CVE-2021-36221)

  - 使用 GOARCH=wasm GOOS=js 時，Go 1.16.9 之前版本和 Go 1.17.x 至 1.17.2 版本會透過大型引數從 WASM 模組叫用函式來造成緩衝區溢位。(CVE-2021-38297)

  - 在早於 1.16.10 版的 Go 和早於 1.17.x 版的 Go 1.17.3 中，debug/macho (針對 Open 或 OpenFat) 中的 ImportedSymbols 會存取緩衝區結尾後的記憶體位置，此情形亦即「超出邊界分割」。
    (CVE-2021-41771)

  - Go 1.16.10 之前版本和 Go 1.17.x 至 1.17.3 版本允許透過建構包含無效名稱或空白檔案名稱欄位的 ZIP 封存造成 archive/zip Reader.Open 錯誤。(CVE-2021-41772)

  - 在早於 1.16.12 版的 Go 和早於 1.17.x 版的  Go 1.17.5 中，net/http 允許透過 HTTP/2 要求在標頭標準化快取中消耗不受控制的記憶體。(CVE-2021-44716)

  - 由於在檔案描述符號耗儘後錯誤關閉檔案描述符號 0，因此 UNIX 上早於 1.16.12 的 Go 版本和早於 1.17.x 的 Go 1.17.5 版本允許寫入非預定檔案或非預定網路連線。(CVE-2021-44717)

  - 在 Go 1.16.14 之前版本和 Go 1.17.x 至 1.17.7 版本中，math/big 的 Rat.SetString 內有溢位問題，可能導致不受控制的記憶體消耗。(CVE-2022-23772)

  - 在 Go 1.16.14 之前版本和 1.17.x 至 1.17.7 版本中，cmd/go 會錯誤地將分支名稱解釋為版本標籤。如果執行者能夠建立分支，但不能建立標籤，此弱點有可能會導致不正確的存取控制問題。(CVE-2022-23773)

  - 在 Go 1.16.14 之前版本和 Go 1.17.x 至 1.17.7 版本中，crypto/elliptic 內的 Curve.IsOnCurve 在 big.Int 值不是有效欄位元素的情況下，可能會不正確地傳回 true。(CVE-2022-23806)

  - 在 Go 1.17.9 之前版本以及 1.18.x 的 1.18.1 之前版本中，encoding/pem 允許透過大量 PEM 資料造成解碼堆疊溢位問題。(CVE-2022-24675)

  - Go 1.16.15 之前版本和 Go 1.17.x 至 1.17.8 版本中的 regexp.Compile 允許透過深度巢狀運算式造成堆疊耗盡。(CVE-2022-24921)

  - 在 Go 1.18.x 版的 1.18.1 之前版本中，當提供某些格式錯誤的憑證時，crypto/x509 中的 Certificate.Verify 可能會在 macOS 上發生錯誤，這允許遠端 TLS 伺服器造成 TLS 用戶端發生錯誤。(CVE-2022-27536)

  - 在 Go 1.17.9 之前版本以及 1.18.x 的 1.18.1 之前版本中，crypto/elliptic 的一般 P-256 特徵允許透過長純量輸入造成錯誤。(CVE-2022-28327)

  - 在 Go 1.17.10 之前版本和 1.18.2 之前的 1.18.x 版本中具有不正確的權限指派。使用非零旗標參數呼叫時，Faccessat 函式可能會錯誤報告檔案可供存取。
    (CVE-2022-29526)

  - golang：net/http：不當清理 Transfer-Encoding 標頭 (CVE-2022-1705)

  - golang：encoding/xml：Decoder.Skip 中的堆疊耗盡弱點 (CVE-2022-28131)

  - grafana-8.5.6-1.fc37 的自動更新。##### **變更記錄** ``` * 2022 年 6 月 29 日星期三 Andreas Gerstmayr <agerstmayr@redhat.com> 8.5.6-1 - 更新標記 8.5.6 的上游社群原始程式碼，請參閱變更記錄 - 已更新 AGPLv3 的授權 - 在 /etc/grafana/grafana.ini 中放置加註解的範例組態檔案 - 在構建程序中啟用 Go 模組 - 根據 yarn v3 和 Zero Install 功能調整 Node.js bundling * Sun 2022 年 6 月 19 日 Robert-Andr Mauchin <zebob.m@gmail.com> - 7.5.15-3 - 針對 CVE-2022-1996、CVE-2022-24675、CVE-2022-28327、CVE-2022-27191、CVE-2022-29526、CVE-2022-30629 重新構建``` (CVE-2022-30629)

  - golang：io/fs：Glob 中的堆疊耗盡弱點 (CVE-2022-30630)

  - golang：compress/gzip：Reader.Read 中的堆疊耗盡弱點 (CVE-2022-30631)

  - golang：path/filepath：Glob 中的堆疊耗盡弱點 (CVE-2022-30632)

  - golang：encoding/xml：Unmarshal 中的堆疊耗盡弱點 (CVE-2022-30633)

  - golang：encoding/gob：Decoder.Decode 中的堆疊耗盡弱點 (CVE-2022-30635)

  - golang：net/http/httputil：NewSingleHostReverseProxy - 省略 X-Forwarded-For 無法運作 (CVE-2022-32148)

  - Go 專案報告：encoding/gob 與 math/big：解碼 big.Float 和 big.Rat 可能會發生錯誤。如果編碼的訊息太短，則解碼 big.Float 和 big.Rat 類型可能會發生錯誤。
    (CVE-2022-32189)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 8 主機上安裝的多個套件受到 RHSA-2022:6042 公告中提及的多個弱點影響。

  - golang: net/http：不當清理 Transfer-Encoding 標頭 (CVE-2022-1705)

  - golang：所有 Parse* 函式中的堆疊耗盡弱點 (CVE-2022-1962)

  - go-restful：透過使用者控制的金鑰繞過授權 (CVE-2022-1996)

  - prometheus/client_golang：使用 InstrumentHandlerCounter 的拒絕服務 (CVE-2022-21698)

  - golang：encoding/pem：修正 Decode 中的堆疊溢位問題 (CVE-2022-24675)

  - golang: regexp：透過深度巢狀運算式造成堆疊耗盡 (CVE-2022-24921)

  - golang: encoding/xml：Decoder.Skip 中的堆疊耗盡弱點 (CVE-2022-28131)

  - golang：crypto/elliptic：過大的純量造成的錯誤 (CVE-2022-28327)

  - golang：crypto/tls：工作階段工單缺少隨機 ticket_age_add (CVE-2022-30629)

  - golang：io/fs：Glob 中的堆疊耗盡弱點 (CVE-2022-30630)

  - golang：compress/gzip：Reader.Read 中的堆疊耗盡弱點 (CVE-2022-30631)

  - golang：path/filepath：Glob 中的堆疊耗盡弱點 (CVE-2022-30632)

  - golang: encoding/xml：Unmarshal 中的堆疊耗盡弱點 (CVE-2022-30633)

  - golang: encoding/gob：Decoder.Decode 中的堆疊耗盡弱點 (CVE-2022-30635)

  - golang: net/http/httputil：NewSingleHostReverseProxy - 省略 X-Forwarded-For 無法運作 (CVE-2022-32148)

請注意，Nessus 並未測試這些問題，而是僅根據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 9 主機上安裝的套件受到 RHSA-2022: 5799 公告中提及的多個弱點影響。

  - golang：net/http：不當清理 Transfer-Encoding 標頭 (CVE-2022-1705)

  - golang：go/parser：所有 Parse* 函式中的堆疊耗盡弱點 (CVE-2022-1962)

  - golang：編碼/pem：修正 Decode 中的堆疊溢位 (CVE-2022-24675)

  - golang：regexp：透過深度巢狀運算式造成堆疊耗盡 (CVE-2022-24921)

  - golang：encoding/xml：Decoder.Skip 中的堆疊耗盡弱點 (CVE-2022-28131)

  - golang：crypto/elliptic：過大的純量造成的錯誤 (CVE-2022-28327)

  - golang：syscall：faccessat 檢查錯誤群組 (CVE-2022-29526)

  - golang：crypto/tls：工作階段票證缺少隨機 ticket_age_add (CVE-2022-30629)

  - golang：io/fs：Glob 中的堆疊耗盡弱點 (CVE-2022-30630)

  - golang：compress/gzip：Reader.Read 中的堆疊耗盡弱點 (CVE-2022-30631)

  - golang：path/filepath：Glob 中的堆疊耗盡弱點 (CVE-2022-30632)

  - golang：encoding/xml：Unmarshal 中的堆疊耗盡弱點 (CVE-2022-30633)

  - golang：encoding/gob：Decoder.Decode 中的堆疊耗盡弱點 (CVE-2022-30635)

  - golang：net/http/httputil：NewSingleHostReverseProxy - 省略 X-Forwarded-For 無法運作 (CVE-2022-32148)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 7 / 8 主機上安裝的多個套件受到 RHSA-2023:0407 公告中提及的多個弱點影響。

  - golang：golang.org/x/text/language 中的超出邊界讀取錯誤導致 DoS 弱點 (CVE-2021-38561)

  - golang: net/http：限制標頭正準化快取的增長 (CVE-2021-44716)

  - golang: syscall：在發生 ForkExec 錯誤時不關閉 fd 0 (CVE-2021-44717)

  - golang: net/http：不當清理 Transfer-Encoding 標頭 (CVE-2022-1705)

  - golang：所有 Parse* 函式中的堆疊耗盡弱點 (CVE-2022-1962)

  - golang: regexp：透過深度巢狀運算式造成堆疊耗盡 (CVE-2022-24921)

  - golang: encoding/xml：Decoder.Skip 中的堆疊耗盡弱點 (CVE-2022-28131)

  - golang：crypto/tls：工作階段工單缺少隨機 ticket_age_add (CVE-2022-30629)

  - golang：io/fs：Glob 中的堆疊耗盡弱點 (CVE-2022-30630)

  - golang：compress/gzip：Reader.Read 中的堆疊耗盡弱點 (CVE-2022-30631)

  - golang：path/filepath：Glob 中的堆疊耗盡弱點 (CVE-2022-30632)

  - golang: encoding/xml：Unmarshal 中的堆疊耗盡弱點 (CVE-2022-30633)

  - golang: encoding/gob：Decoder.Decode 中的堆疊耗盡弱點 (CVE-2022-30635)

  - golang: net/http/httputil：NewSingleHostReverseProxy - 省略 X-Forwarded-For 無法運作 (CVE-2022-32148)

請注意，Nessus 並未測試這些問題，而是僅根據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2022: 6277 公告中提及的多個弱點影響。

  - golang：編碼/pem：修正 Decode 中的堆疊溢位 (CVE-2022-24675)

  - Moment.js：moment.locale 中存在路徑遊走弱點 (CVE-2022-24785)

  - golang：regexp：透過深度巢狀運算式造成堆疊耗盡 (CVE-2022-24921)

  - golang：crypto/elliptic：過大的純量造成的錯誤 (CVE-2022-28327)

  - golang：syscall：faccessat 檢查錯誤群組 (CVE-2022-29526)

  - golang：crypto/tls：工作階段票證缺少隨機 ticket_age_add (CVE-2022-30629)

  - moment：低效剖析演算法可導致 DoS (CVE-2022-31129)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0808 advisory.

  - The go command may execute arbitrary code at build time when using cgo. This may occur when running go     get on a malicious module, or when running any other command which builds untrusted code. This is can by     triggered by linker flags, specified via a #cgo LDFLAGS directive. Flags containing embedded spaces are     mishandled, allowing disallowed flags to be smuggled through the LDFLAGS sanitization by including them in     the argument of another flag. This only affects usage of the gccgo compiler. (CVE-2023-29405)

  - When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by     finalizing the operation with a rename from a temporary name to the final target file name.In that rename     operation, it might accidentally *widen* the permissions for the target file, leaving the updated file     accessible to more users than intended. (CVE-2022-32207)

  - decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. (CVE-2022-38900)

  - The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.
    (CVE-2022-33987)

  - Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the     name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3. (CVE-2022-37601)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the go package has been released.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6042 advisory.

    Red Hat OpenShift Serverless Client kn 1.24.0 provides a CLI to interact with Red Hat OpenShift Serverless     1.24.0. The kn CLI is delivered as an RPM package for installation on RHEL platforms, and as binaries for     non-Linux platforms.

    Security Fix(es):
    - prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)
    - go-restful: Authorization Bypass Through User-Controlled Key (CVE-2022-1996)
    - golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
    - golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
    - golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
    - golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
    - golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
    - golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)
    - golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)
    - golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
    - golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
    - golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)
    - golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)
    - golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)
    - golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

    For more details about the security issue(s), including the impact; a CVSS     score; acknowledgments; and other related information refer to the CVE page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating     that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of     an incomplete fix for CVE-2021-33196. (CVE-2021-39293)

  - Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return     true in situations with a big.Int value that is not a valid field element. (CVE-2022-23806)

  - regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested     expression. (CVE-2022-24921)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5799 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    The golang packages provide the Go programming language compiler.

    Security Fix(es):

    * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

    * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

    * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

    * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

    * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

    * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

    * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

    * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

    * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Clean up dist-git patches (BZ#2109174)

    * Update Go to version 1.17.12 (BZ#2109183)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6277 advisory.

    Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for     installation into an OpenShift Container Platform installation.

    This advisory covers the RPM packages for the release.

    Security Fix(es):

    * moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)
    * golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)
    * moment: Moment.js: Path traversal in moment.locale (CVE-2022-24785)
    * golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)
    * golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)
    * golang: syscall: faccessat checks wrong group (CVE-2022-29526)
    * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9363 advisory.

    - Addresses CVE-2022-24726, CVE-2022-24921

    istio

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9362 advisory.

    - Addresses CVE-2022-24726, CVE-2022-24921

    istio

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202208-02 (Go: Multiple Vulnerabilities)

  - Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection. (CVE-2020-28366)

  - Go before 1.14.12 and 1.15.x before 1.15.5 allows Argument Injection. (CVE-2020-28367)

  - encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader     (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode,     DecodeElement, or Skip method. (CVE-2021-27918)

  - archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon     attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the beginning of any     filename. (CVE-2021-27919)

  - Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address     octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses,     because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR. (CVE-2021-29923)

  - In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs,     related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
    (CVE-2021-3114)

  - Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code     execution when using the go get command to fetch modules that make use of cgo (for example, cgo can     execute a gcc program from an untrusted download). (CVE-2021-3115)

  - net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of     service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each     be affected in some configurations. (CVE-2021-31525)

  - Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from     DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to     the RFC1035 format. (CVE-2021-33195)

  - In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's     header) can cause a NewReader or OpenReader panic. (CVE-2021-33196)

  - In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from     net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.
    (CVE-2021-33197)

  - In Go before 1.15.13 and 1.16.x before 1.16.5, there can be a panic for a large exponent to the     math/big.Rat SetString or UnmarshalText method. (CVE-2021-33198)

  - The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an     X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS     server to cause a TLS client to panic. (CVE-2021-34558)

  - Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil     ReverseProxy panic upon an ErrAbortHandler abort. (CVE-2021-36221)

  - Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function     invocation from a WASM module, when GOARCH=wasm GOOS=js is used. (CVE-2021-38297)

  - ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3     Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.
    (CVE-2021-41771)

  - Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP     archive containing an invalid name or an empty filename field. (CVE-2021-41772)

  - net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the     header canonicalization cache via HTTP/2 requests. (CVE-2021-44716)

  - Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or     unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-     descriptor exhaustion. (CVE-2021-44717)

  - Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to     Uncontrolled Memory Consumption. (CVE-2022-23772)

  - cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to     be version tags. This can lead to incorrect access control if an actor is supposed to be able to create     branches but not tags. (CVE-2022-23773)

  - Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return     true in situations with a big.Int value that is not a valid field element. (CVE-2022-23806)

  - encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount     of PEM data. (CVE-2022-24675)

  - regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested     expression. (CVE-2022-24921)

  - Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when     presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to     panic. (CVE-2022-27536)

  - The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic     via long scalar input. (CVE-2022-28327)

  - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero     flags parameter, the Faccessat function could incorrectly report that a file is accessible.
    (CVE-2022-29526)

  - golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

  - golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

  - Automatic update for grafana-8.5.6-1.fc37.  ##### **Changelog**  ``` * Wed Jun 29 2022 Andreas Gerstmayr     <agerstmayr@redhat.com> 8.5.6-1 - update to 8.5.6 tagged upstream community sources, see CHANGELOG -     updated license to AGPLv3 - place commented sample config file in /etc/grafana/grafana.ini - enable Go     modules in build process - adapt Node.js bundling to yarn v3 and Zero Install feature * Sun Jun 19 2022     Robert-Andr Mauchin <zebob.m@gmail.com> - 7.5.15-3 - Rebuilt for CVE-2022-1996, CVE-2022-24675,     CVE-2022-28327, CVE-2022-27191,   CVE-2022-29526, CVE-2022-30629  ``` (CVE-2022-30629)

  - golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

  - golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  - golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

  - golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

  - golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

  - golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

  - The Go project reports: encoding/gob & math/big: decoding big.Float and             big.Rat can panic     Decoding big.Float and big.Rat types can panic if the             encoded message is too short.
    (CVE-2022-32189)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0407 advisory.

    OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container     Platform.This advisory contains OpenShift Virtualization 4.12.0 RPMs.

    Security Fix(es):

    * golang: net/http: limit growth of header canonicalization cache (CVE-2021-44716)

    * golang: out-of-bounds read in golang.org/x/text/language leads to DoS (CVE-2021-38561)

    * golang: syscall: don't close fd 0 on ForkExec error (CVE-2021-44717)

    * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

    * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

    * golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)

    * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

    * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

    * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

    * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

    * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

    * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

    * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

    * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0131 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-38297:
    Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function     invocation from a WASM module, when GOARCH=wasm GOOS=js is used.

    CVE-2021-39293:
    In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating     that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of     an incomplete fix for CVE-2021-33196.

    CVE-2021-41771:
    ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3     Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.

    CVE-2021-41772:
    Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP     archive containing an invalid name or an empty filename field.

    CVE-2021-44716:
    net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the     header canonicalization cache via HTTP/2 requests.

    CVE-2021-44717:
    Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or     unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-     descriptor exhaustion.

    CVE-2022-23772:
    Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to     Uncontrolled Memory Consumption.

    CVE-2022-23773:
    cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to     be version tags. This can lead to incorrect access control if an actor is supposed to be able to create     branches but not tags.

    CVE-2022-23806:
    Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return     true in situations with a big.Int value that is not a valid field element.

    CVE-2022-24675:
    encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount     of PEM data.

    CVE-2022-24921     regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested     expression.

    CVE-2022-28327:
    The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic     via long scalar input.

    CVE-2022-29526:
    Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero     flags parameter, the Faccessat function could incorrectly report that a file is accessible.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
163840	GLSA-202208-02：Go：多個弱點	Nessus	Gentoo Local Security Checks	2022/8/4	2023/10/16	critical
194332	RHEL 8：Release of OpenShift Serverless Client kn 1.24.0 (重要) (RHSA-2022:6042)	Nessus	Red Hat Local Security Checks	2024/4/28	2024/11/7	critical
163676	RHEL 9：go-toolset 和 golang (RHSA-2022: 5799)	Nessus	Red Hat Local Security Checks	2022/8/1	2025/3/6	medium
194211	RHEL 7 / 8：OpenShift Virtualization 4.12.0 RPM (RHSA-2023:0407)	Nessus	Red Hat Local Security Checks	2024/4/28	2024/11/7	medium
164615	RHEL 8：Red Hat OpenShift Service Mesh 2.1.5 (RHSA-2022: 6277)	Nessus	Red Hat Local Security Checks	2022/9/1	2024/11/7	high
194928	Splunk Enterprise 8.2.0 < 8.2.12, 9.0.0 < 9.0.6, 9.1.0 < 9.1.1 (SVD-2023-0808)	Nessus	CGI abuses	2024/5/2	2024/7/29	critical
203803	Photon OS 3.0: Go PHSA-2022-3.0-0375	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/29	high
194332	RHEL 8 : Release of OpenShift Serverless Client kn 1.24.0 (Important) (RHSA-2022:6042)	Nessus	Red Hat Local Security Checks	2024/4/28	2024/11/7	critical
160177	EulerOS 2.0 SP8 : golang (EulerOS-SA-2022-1566)	Nessus	Huawei Local Security Checks	2022/4/25	2022/8/9	critical
163676	RHEL 9 : go-toolset and golang (RHSA-2022:5799)	Nessus	Red Hat Local Security Checks	2022/8/1	2025/3/6	medium
164615	RHEL 8 : Red Hat OpenShift Service Mesh 2.1.5 (RHSA-2022:6277)	Nessus	Red Hat Local Security Checks	2022/9/1	2024/11/7	high
160856	Oracle Linux 7 / 8 : olcne / istio / istio (ELSA-2022-9363)	Nessus	Oracle Linux Local Security Checks	2022/5/10	2024/10/22	high
160858	Oracle Linux 7 / 8 : olcne / istio / istio (ELSA-2022-9362)	Nessus	Oracle Linux Local Security Checks	2022/5/10	2024/10/22	high
163840	GLSA-202208-02 : Go: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2022/8/4	2023/10/16	critical
194211	RHEL 7 / 8 : OpenShift Virtualization 4.12.0 RPMs (RHSA-2023:0407)	Nessus	Red Hat Local Security Checks	2024/4/28	2024/11/7	medium
236557	Alibaba Cloud Linux 3 : 0131: go-toolset:rhel8 (ALINUX3-SA-2022:0131)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical

检测

插件搜索

critical

critical

medium

medium

high

critical

high

critical

critical

medium

high

high

high

critical

medium

critical