The remote Red Hat Enterprise Linux CoreOS 4 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8418 advisory.

  - github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp     (CVE-2024-5569)

  - Podman: Buildah: CRI-O: symlink traversal vulnerability in the containers/storage library can cause Denial     of Service (DoS) (CVE-2024-9676)

  - golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7256 advisory.

    [3.6.1-1]
    - Update to 3.6.1
    - Resolves: RHEL-73940

    [3.6.0-1]
    - Update to 3.6.0
    - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791

    [3.4.1-3]
    - Make Git-LFS FIPS compliant
    - Resolves: RHEL-53086

    [3.4.1-2]
    - Rebuild with new Golang
    - Resolves: RHEL-32571

    [3.4.1-1]
    - Update to 3.4.1
    - Resolves: RHEL-17101

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5291 advisory.

    Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB &     OpenTSDB.

    Security Fix(es):

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-10212:04 advisory.

    * golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
      * golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)
      * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
      * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
      * net/[http:](http:) Denial of service due to improper 100-continue handling in net/http     (CVE-2024-24791)
      * golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5291 advisory.

    * golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of cri-tools installed on the remote host is prior to 1.32.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2870 advisory.

    The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6     addresses, returning false for addresses which would return true in their traditional IPv4 forms.
    (CVE-2024-24790)

    The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line     terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a     bare LF in a chunk extension as part of the extension, this could permit request smuggling.
    (CVE-2025-22871)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1012 advisory.

    The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6     addresses, returning false for addresses which would return true in their traditional IPv4 forms.
    (CVE-2024-24790)

    The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line     terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a     bare LF in a chunk extension as part of the extension, this could permit request smuggling.
    (CVE-2025-22871)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
311930	RHCOS 4 / 9 : OpenShift Container Platform 4.16.z (RHSA-2024:8418)	Nessus	Red Hat Local Security Checks	2026/5/4	2026/5/4	medium
237035	Oracle Linux 9 : git-lfs (ELSA-2025-7256)	Nessus	Oracle Linux Local Security Checks	2025/5/22	2025/9/11	high
205517	RHEL 8 : grafana (RHSA-2024:5291)	Nessus	Red Hat Local Security Checks	2024/8/14	2025/3/6	critical
282805	MiracleLinux 9 : git-lfs-3.6.1-1.el9 (AXSA:2025-10212:04)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	high
235587	RockyLinux 8 : grafana (RLSA-2024:5291)	Nessus	Rocky Linux Local Security Checks	2025/5/7	2025/5/7	critical
237470	Amazon Linux 2 : cri-tools (ALAS-2025-2870)	Nessus	Amazon Linux Local Security Checks	2025/5/29	2025/5/29	critical
238284	Amazon Linux 2023 : cni-plugins (ALAS2023-2025-1012)	Nessus	Amazon Linux Local Security Checks	2025/6/12	2026/5/11	critical

检测

插件搜索

medium

high

critical

high

critical

critical

critical