The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-9200 advisory.

    - Rebuild for CVEs: CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
    - rebuild for following CVEs:
    CVE-2021-43784 CVE-2022-41724 CVE-2023-28642
    - runc 1.1.5 resolves CVE-2023-25809 and CVE-2023-27561

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10212:04 advisory.

    * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
      * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)
      * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
      * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
      * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http     (CVE-2024-24791)
      * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-9101:06 advisory.

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-9099:02 advisory.

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite     loop. (CVE-2024-24788)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5291 advisory.

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f974cb8ce5 advisory.

    Includes security fixes to the net/http package, as well as bug fixes to the runtime and the go command.
    [Full changelog](https://github.com/golang/go/issues?q=milestone%3AGo1.23.8+label%3ACherryPickApproved).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0184 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-24788:
    A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite     loop.

    CVE-2024-24789:
    The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most     zip implementations. This misalignment could be exploited to create an zip file with contents that vary     depending on the implementation reading the file. The archive/zip package now rejects files containing     these errors.

    CVE-2024-24790:
    The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6     addresses, returning false for addresses which would return true in their traditional IPv4 forms.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:7256 advisory.

    Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics     with text pointers inside Git, while storing the file contents on a remote server.

    Security Fix(es):

    * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)

    * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

    * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:9089 advisory.

    The Container Network Interface (CNI) project consists of a specification and libraries for writing plug-     ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI     concerns itself only with network connectivity of containers and removing allocated resources when the     container is deleted.

    Security Fix(es):

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

    * net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9212:19 advisory.

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
      * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
      * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
      * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104)
      * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http     (CVE-2024-24791)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-9094:06 advisory.

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
      * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http     (CVE-2024-24791)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
211562	Oracle Linux 9 : runc (ELSA-2024-9200)	Nessus	Oracle Linux Local Security Checks	2024/11/19	2025/9/11	high
282805	MiracleLinux 9 : git-lfs-3.6.1-1.el9 (AXSA:2025-10212:04)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	high
292363	MiracleLinux 9 : runc-1.1.13-4.el9 (AXSA:2024-9101:06)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293512	MiracleLinux 9 : oci-seccomp-bpf-hook-1.2.10-2.el9 (AXSA:2024-9099:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
227725	Linux Distros Unpatched Vulnerability : CVE-2024-24788	Nessus	Misc.	2025/3/5	2025/11/13	high
235587	RockyLinux 8 : grafana (RLSA-2024:5291)	Nessus	Rocky Linux Local Security Checks	2025/5/7	2025/5/7	critical
234731	Fedora 40 : golang (2025-f974cb8ce5)	Nessus	Fedora Local Security Checks	2025/4/23	2025/5/8	critical
236047	Alibaba Cloud Linux 3 : 0184: grafana (ALINUX3-SA-2024:0184)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
237308	RHEL 9 : git-lfs (RHSA-2025:7256)	Nessus	Red Hat Local Security Checks	2025/5/27	2025/6/5	high
210583	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.22-openssl (SUSE-SU-2024:3938-1)	Nessus	SuSE Local Security Checks	2024/11/8	2024/11/8	critical
210802	RHEL 9 : containernetworking-plugins (RHSA-2024:9089)	Nessus	Red Hat Local Security Checks	2024/11/12	2025/3/6	high
292301	MiracleLinux 9 : grafana-10.2.6-4.el9 (AXSA:2024-9212:19)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
292753	MiracleLinux 9 : containernetworking-plugins-1.5.1-2.el9 (AXSA:2024-9094:06)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

critical

critical

critical

high

critical

high

critical

high