The version of docker installed on the remote host is prior to 25.0.14-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-094 advisory.

    SSH Agent servers do not validate the size of messages when processing new identity requests, which may     cause the program to panic if the message is malformed due to an out of bounds read. (CVE-2025-47914)

    SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in     the request, allowing an attacker to cause unbounded memory consumption. (CVE-2025-58181)

    crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

    An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in     the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not     prevent a leaf certificate from claiming the SAN *.example.com. (CVE-2025-61727)

    Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts     that will be printed out. Furthermore, the error string is constructed by repeated string concatenation,     leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in     excessive resource consumption. (CVE-2025-61729)

    A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a     single-line payload larger than 64KB without newline characters. Due to limitations in the internal     bufio.Scanner, the read fails with token too long and the writer pipe is closed, leaving Writer()     unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2.
    The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to     function even if an error is logged. (CVE-2025-65637)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 25.0.14-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-095 advisory.

    SSH Agent servers do not validate the size of messages when processing new identity requests, which may     cause the program to panic if the message is malformed due to an out of bounds read. (CVE-2025-47914)

    SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in     the request, allowing an attacker to cause unbounded memory consumption. (CVE-2025-58181)

    Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts     that will be printed out. Furthermore, the error string is constructed by repeated string concatenation,     leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can result in     excessive resource consumption. (CVE-2025-61729)

    A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a     single-line payload larger than 64KB without newline characters. Due to limitations in the internal     bufio.Scanner, the read fails with token too long and the writer pipe is closed, leaving Writer()     unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2.
    The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to     function even if an error is logged. (CVE-2025-65637)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4526-1 advisory.

    - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated       message size (bsc#1254054)
    - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving       an unexpected message type in response to a key listing or signing request (bsc#1253598)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-openSUSE-RU-2026:20010-1 advisory.

    - Update to version 0.68.2:
      * release: v0.68.2 [release/v0.68] (#9950)
      * fix(deps): bump alpine from `3.22.1` to `3.23.0` [backport: release/v0.68] (#9949)
      * ci: enable `check-latest` for `setup-go` [backport: release/v0.68] (#9946)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20132-1 advisory.

    elemental-register was updated to 1.8.1:

    Changes on top of v1.8.1:

      * Update headers to 2026
      * Update questions to include SL Micro 6.2

    Update to v1.8.1:

      * Install yip config files in before-install step
      * Bump github.com/rancher-sandbox/go-tpm and its dependencies         This includes few CVE fixes:
        * bsc#1241826 (CVE-2025-22872)
        * bsc#1241857 (CVE-2025-22872)
        * bsc#1251511 (CVE-2025-47911)
        * bsc#1251679 (CVE-2025-58190)

    elemental-toolkit was updated to v2.3.2:

      * Bump golang.org/x/crypto library         This includes few CVE fixes:
        * bsc#1241826 (CVE-2025-22872)
        * bsc#1241857 (CVE-2025-22872)
        * bsc#1251511 (CVE-2025-47911)
        * bsc#1251679 (CVE-2025-58190)
        * bsc#1253581 (CVE-2025-47913)
        * bsc#1253901 (CVE-2025-58181)
        * bsc#1254079 (CVE-2025-47914)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2400-1 advisory.

    Update to version 1.7.4, fixes various go embedded security issues:

    - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML     documents       (bsc#1251420).
    - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected     message type in       response to a key listing or signing request (bsc#1253559).
    - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an     out of bounds       read (bsc#1254014).
    - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory     consumption       (bsc#1253935).
    - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when     processing specially       crafted input (bsc#1251615).
    - CVE-2026-7374: virt-handler: Privilege escalation and node compromise via symlink following     vulnerability       (bsc#1265467).
    - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2     :path pseudo-       header (bsc#1260234).

    Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.7.4

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8729dce4b8 advisory.

    Security update to pack 0.40.8

    Fixes CVE-2024-25621: containerd - local privilege escalation     Fixes CVE-2025-47913: golang.org/x/crypto/ssh/agent - SSH client panic     Fixes CVE-2025-47914: golang.org/x/crypto/ssh/agent - SSH Agent server DoS     Fixes CVE-2025-52881: container escape and denial of service     Fixes CVE-2026-27145: crypto/x509 - DoS via excessive DNS SAN processing     Fixes CVE-2026-33762: go-git - DoS via crafted Git index file     Fixes CVE-2026-34165: go-git - DoS via crafted .idx file     Fixes CVE-2026-39828: golang.org/x/crypto/ssh - Unauthorized command execution     Fixes CVE-2026-39829: golang.org/x/crypto/ssh - DoS via crafted public key     Fixes CVE-2026-39830: golang.org/x/crypto/ssh - Resource leak DoS     Fixes CVE-2026-39832: golang.org/x/crypto/ssh/agent - Key restrictions bypass     Fixes CVE-2026-39833: golang.org/x/crypto/ssh/agent - Key confirmation bypass     Fixes CVE-2026-39835: golang.org/x/crypto/ssh - Certificate DoS     Fixes CVE-2026-44740: go-billy - DoS via symlink cycle     Fixes GO-2026-4970: Root escape via symlink plus trailing slash     Fixes GO-2026-5856: Encrypted Client Hello privacy leak

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
294908	Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-094 (ALASECS-2026-094)	Nessus	Amazon Linux Local Security Checks	2026/1/22	2026/1/22	high
294909	Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-095 (ALASDOCKER-2026-095)	Nessus	Amazon Linux Local Security Checks	2026/1/22	2026/3/13	high
280087	SUSE SLES15 Security Update : buildah (SUSE-SU-2025:4526-1)	Nessus	SuSE Local Security Checks	2025/12/27	2026/2/19	high
282650	openSUSE 16 : Recommended update for trivy (SUSE-SU-openSUSE-RU-2026:20010-1)	Nessus	SuSE Local Security Checks	2026/1/13	2026/2/19	medium
297788	openSUSE 16 Security Update : elemental-register, elemental-toolkit (openSUSE-SU-2026:20132-1)	Nessus	SuSE Local Security Checks	2026/2/4	2026/2/19	medium
321638	SUSE SLES15 Security Update : kubevirt (SUSE-SU-2026:2400-1)	Nessus	SuSE Local Security Checks	2026/6/20	2026/6/20	medium
315032	openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:20730-1)	Nessus	SuSE Local Security Checks	2026/5/16	2026/5/16	high
331315	Fedora 44 : pack (2026-8729dce4b8)	Nessus	Fedora Local Security Checks	2026/7/30	2026/7/30	high

检测

插件搜索

high

high

high

medium

medium

medium

high

high