The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2586 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * podman: golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with     very large exponents (CVE-2021-33198)

    * runc: golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3288-1 advisory.

    - Require Go > 1.20 for building

    - Bump go-retryablehttp to version 0.7.7       (CVE-2024-6104, bsc#1227038)
    - Migrate from `disabled` to `manual` service mode
    - Add0003-Bump-go-retryablehttp.patch
    - Update to 2.45.6 (jsc#PED-3577):
      * Security fixes in dependencies
    - Update to 2.45.5:
      * [BUGFIX] tsdb/agent: ensure that new series get written to WAL         on rollback.
      * [BUGFIX] Remote write: Avoid a race condition when applying         configuration.
    - Update to 2.45.4:
      * [BUGFIX] Remote read: Release querier resources before encoding         the results.
    - Update to 2.45.3:
      * Security fixes in dependencies
      * [BUGFIX] TSDB: Remove double memory snapshot on shutdown.
    - Update to 2.45.2:
      * Security fixes in dependencies
      * [SECURITY] Updated otelhttp to version 0.46.1         (CVE-2023-45142, bsc#1228556)
      * [BUGFIX] TSDB: Fix PostingsForMatchers race with creating new         series.
    - Update to 2.45.1:
      * [ENHANCEMENT] Hetzner SD: Support larger ID's that will be used         by Hetzner in September.
      * [BUGFIX] Linode SD: Cast InstanceSpec values to int64 to avoid         overflows on 386 architecture.
      * [BUGFIX] TSDB: Handle TOC parsing failures.

    - update to 2.45.0 (jsc#PED-5406):
      * [FEATURE] API: New limit parameter to limit the number of items         returned by `/api/v1/status/tsdb` endpoint.
      * [FEATURE] Config: Add limits to global config.
      * [FEATURE] Consul SD: Added support for `path_prefix`.
      * [FEATURE] Native histograms: Add option to scrape both classic         and native histograms.
      * [FEATURE] Native histograms: Added support for two more         arithmetic operators `avg_over_time` and `sum_over_time`.
      * [FEATURE] Promtool: When providing the block id, only one block         will be loaded and analyzed.
      * [FEATURE] Remote-write: New Azure ad configuration to support         remote writing directly to Azure Monitor workspace.
      * [FEATURE] TSDB: Samples per chunk are now configurable with         flag `storage.tsdb.samples-per-chunk`. By default set to its         former value 120.
      * [ENHANCEMENT] Native histograms: bucket size can now be limited         to avoid scrape fails.
      * [ENHANCEMENT] TSDB: Dropped series are now deleted from the WAL         sooner.
      * [BUGFIX] Native histograms: ChunkSeries iterator now checks if         a new sample can be appended to the open chunk.
      * [BUGFIX] Native histograms: Fix Histogram Appender         `Appendable()` segfault.
      * [BUGFIX] Native histograms: Fix setting reset header to gauge         histograms in seriesToChunkEncoder.
      * [BUGFIX] TSDB: Tombstone intervals are not modified after Get()         call.
      * [BUGFIX] TSDB: Use path/filepath to set the WAL directory.
    - update to 2.44.0:
      * [FEATURE] Remote-read: Handle native histograms.
      * [FEATURE] Promtool: Health and readiness check of prometheus         server in CLI.
      * [FEATURE] PromQL: Add `query_samples_total` metric, the total         number of samples loaded by all queries.
      * [ENHANCEMENT] Storage: Optimise buffer used to iterate through         samples.
      * [ENHANCEMENT] Scrape: Reduce memory allocations on target         labels.
      * [ENHANCEMENT] PromQL: Use faster heap method for `topk()` /         `bottomk()`.
      * [ENHANCEMENT] Rules API: Allow filtering by rule name.
      * [ENHANCEMENT] Native Histograms: Various fixes and         improvements.
      * [ENHANCEMENT] UI: Search of scraping pools is now         case-insensitive.
      * [ENHANCEMENT] TSDB: Add an affirmative log message for         successful WAL repair.
      * [BUGFIX] TSDB: Block compaction failed when shutting down.
      * [BUGFIX] TSDB: Out-of-order chunks could be ignored if the         write-behind log was deleted.
    - rebase patch 0001-Do-not-force-the-pure-Go-name-resolver.patch       onto v2.44.0
    - update to 2.43.1
      * [BUGFIX] Labels: Set() after Del() would be ignored, which         broke some relabeling rules.
    - update to 2.43.0:
      * [FEATURE] Promtool: Add HTTP client configuration to query         commands.
      * [FEATURE] Scrape: Add `include_scrape_configs` to include         scrape configs from different files.
      * [FEATURE] HTTP client: Add `no_proxy` to exclude URLs from         proxied requests.
      * [FEATURE] HTTP client: Add `proxy_from_enviroment` to read         proxies from env variables.
      * [ENHANCEMENT] API: Add support for setting lookback delta per         query via the API.
      * [ENHANCEMENT] API: Change HTTP status code from 503/422 to 499         if a request is canceled.
      * [ENHANCEMENT] Scrape: Allow exemplars for all metric types.
      * [ENHANCEMENT] TSDB: Add metrics for head chunks and WAL folders         size.
      * [ENHANCEMENT] TSDB: Automatically remove incorrect snapshot         with index that is ahead of WAL.
      * [ENHANCEMENT] TSDB: Improve Prometheus parser error outputs to         be more comprehensible.
      * [ENHANCEMENT] UI: Scope `group by` labels to metric in         autocompletion.
      * [BUGFIX] Scrape: Fix         `prometheus_target_scrape_pool_target_limit` metric not set         before reloading.
      * [BUGFIX] TSDB: Correctly update         `prometheus_tsdb_head_chunks_removed_total` and         `prometheus_tsdb_head_chunks` metrics when reading WAL.
      * [BUGFIX] TSDB: Use the correct unit (seconds) when recording         out-of-order append deltas in the         `prometheus_tsdb_sample_ooo_delta` metric.
    - update to 2.42.0:
      This release comes with a bunch of feature coverage for native       histograms and breaking changes.
      If you are trying native histograms already, we recommend you       remove the `wal` directory when upgrading.
      Because the old WAL record for native histograms is not       backward compatible in v2.42.0, this will lead to some data       loss for the latest data.
      Additionally, if you scrape 'float histograms' or use recording       rules on native histograms in v2.42.0 (which writes float       histograms), it is a one-way street since older versions do not       support float histograms.
      * [CHANGE] **breaking** TSDB: Changed WAL record format for the         experimental native histograms.
      * [FEATURE] Add 'keep_firing_for' field to alerting rules.
      * [FEATURE] Promtool: Add support of selecting timeseries for         TSDB dump.
      * [ENHANCEMENT] Agent: Native histogram support.
      * [ENHANCEMENT] Rules: Support native histograms in recording         rules.
      * [ENHANCEMENT] SD: Add container ID as a meta label for pod         targets for Kubernetes.
      * [ENHANCEMENT] SD: Add VM size label to azure service         discovery.
      * [ENHANCEMENT] Support native histograms in federation.
      * [ENHANCEMENT] TSDB: Add gauge histogram support.
      * [ENHANCEMENT] TSDB/Scrape: Support FloatHistogram that         represents buckets as float64 values.
      * [ENHANCEMENT] UI: Show individual scrape pools on /targets         page.
    - update to 2.41.0:
      * [FEATURE] Relabeling: Add keepequal and dropequal relabel         actions.
      * [FEATURE] Add support for HTTP proxy headers.
      * [ENHANCEMENT] Reload private certificates when changed on disk.
      * [ENHANCEMENT] Add max_version to specify maximum TLS version in         tls_config.
      * [ENHANCEMENT] Add goos and goarch labels to         prometheus_build_info.
      * [ENHANCEMENT] SD: Add proxy support for EC2 and LightSail SDs.
      * [ENHANCEMENT] SD: Add new metric         prometheus_sd_file_watcher_errors_total.
      * [ENHANCEMENT] Remote Read: Use a pool to speed up marshalling.
      * [ENHANCEMENT] TSDB: Improve handling of tombstoned chunks in         iterators.
      * [ENHANCEMENT] TSDB: Optimize postings offset table reading.
      * [BUGFIX] Scrape: Validate the metric name, label names, and         label values after relabeling.
      * [BUGFIX] Remote Write receiver and rule manager: Fix error         handling.
    - update to 2.40.7:
      * [BUGFIX] TSDB: Fix queries involving negative buckets of native         histograms.
    - update to 2.40.5:
      * [BUGFIX] TSDB: Fix queries involving native histograms due to         improper reset of iterators.
    - update to 2.40.3:
      * [BUGFIX] TSDB: Fix compaction after a deletion is called.
    - update to 2.40.2:
      * [BUGFIX] UI: Fix black-on-black metric name color in dark mode.
    - update to 2.40.1:
      * [BUGFIX] TSDB: Fix alignment for atomic int64 for 32 bit         architecture.
      * [BUGFIX] Scrape: Fix accept headers.
    - update to 2.40.0:
      * [FEATURE] Add experimental support for native histograms.
        Enable with the flag --enable-feature=native-histograms.
      * [FEATURE] SD: Add service discovery for OVHcloud.
      * [ENHANCEMENT] Kubernetes SD: Use protobuf encoding.
      * [ENHANCEMENT] TSDB: Use golang.org/x/exp/slices for improved         sorting speed.
      * [ENHANCEMENT] Consul SD: Add enterprise admin partitions. Adds
        __meta_consul_partition label. Adds partition config in         consul_sd_config.
      * [BUGFIX] API: Fix API error codes for /api/v1/labels and         /api/v1/series.
    - update to 2.39.1:
      * [BUGFIX] Rules: Fix notifier relabel changing the labels on         active alerts.
    - update to 2.39.0:
      * [FEATURE] experimental TSDB: Add support for ingesting         out-of-order samples. This is configured via         out_of_order_time_window field in the config file; check config         file docs for more info.
      * [ENHANCEMENT] API: /-/healthy and /-/ready API calls now also         respond to a HEAD request on top of existing GET support.
      * [ENHANCEMENT] PuppetDB SD: Add __meta_puppetdb_query label.
      * [ENHANCEMENT] AWS EC2 SD: Add __meta_ec2_region label.
      * [ENHANCEMENT] AWS Lightsail SD: Add __meta_lightsail_region         label.
      * [ENHANCEMENT] Scrape: Optimise relabeling by re-using memory.
      * [ENHANCEMENT] TSDB: Improve WAL replay timings.
      * [ENHANCEMENT] TSDB: Optimise memory by not storing unnecessary         data in the memory.
      * [ENHANCEMENT] TSDB: Allow overlapping blocks by default.
        --storage.tsdb.allow-overlapping-blocks now has no effect.
      * [ENHANCEMENT] UI: Click to copy label-value pair from query         result to clipboard.
      * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a         memory leak.
      * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus         startup.
      * [BUGFIX] PromQL: Properly close file descriptor when logging         unfinished queries.
      * [BUGFIX] Agent: Fix validation of flag options and prevent WAL         from growing more than desired.
    - update to 2.38.0:
      * [FEATURE]: Web: Add a /api/v1/format_query HTTP API endpoint         that allows pretty-formatting PromQL expressions.
      * [FEATURE]: UI: Add support for formatting PromQL expressions in         the UI.
      * [FEATURE]: DNS SD: Support MX records for discovering targets.
      * [FEATURE]: Templates: Add toTime() template function that         allows converting sample timestamps to Go time.Time values.
      * [ENHANCEMENT]: Kubernetes SD: Add
        __meta_kubernetes_service_port_number meta label indicating the         service port number.
      * [ENHANCEMENT]: Kubernetes SD: Add
        __meta_kubernetes_pod_container_image meta label indicating the         container image.
      * [ENHANCEMENT]: PromQL: When a query panics, also log the query         itself alongside the panic message.
      * [ENHANCEMENT]: UI: Tweak colors in the dark theme to improve         the contrast ratio.
      * [ENHANCEMENT]: Web: Speed up calls to /api/v1/rules by avoiding         locks and using atomic types instead.
      * [ENHANCEMENT]: Scrape: Add a no-default-scrape-port feature         flag, which omits or removes any default HTTP (:80) or HTTPS         (:443) ports in the target's scrape address.
      * [BUGFIX]: TSDB: In the WAL watcher metrics, expose the         type='exemplar' label instead of type='unknown' for exemplar         records.
      * [BUGFIX]: TSDB: Fix race condition around allocating series IDs         during chunk snapshot loading.

    - Remove npm_licenses.tar.bz2 during 'make clean'

    - Remove web-ui archives during 'make clean'.

      * [SECURITY] CVE-2022-41715: Limit memory used by parsing regexps         (bsc#1204023).
    - Fix uncontrolled resource consumption by updating Go to version       1.20.1 (CVE-2022-41723, bsc#1208298)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 20.10.17-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-057 advisory.

    Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could     cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics.
    After fix, Reader.Read limits the maximum size of header blocks to 1 MiB. (CVE-2022-2879)

    Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion     or denial of service. The parsed regexp representation is linear in the size of the input, but in some     cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger     amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular     expressions whose representation would use more space than that are rejected. Normal use of regular     expressions is unaffected. (CVE-2022-41715)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0071 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-2880:
    Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including     unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy     forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the query parameters in     the forwarded query when the outbound request's Form field is set after the ReverseProxy. Director     function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse     query parameters continue to forward the original query parameters unchanged.

    CVE-2022-41715:
    Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion     or denial of service. The parsed regexp representation is linear in the size of the input, but in some     cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger     amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular     expressions whose representation would use more space than that are rejected. Normal use of regular     expressions is unaffected.

    CVE-2022-41717:
    An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server     connections contain a cache of HTTP header keys sent by the client. While the total number of entries in     this cache is capped, an attacker sending very large keys can cause the server to allocate approximately     64 MiB per open connection.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0092 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-2879:
      A flaw was found in the golang package, where Reader.Read does not set a limit on the maximum size of     file headers. After fixing, Reader.Read limits the maximum size of header blocks to 1 MiB. This flaw     allows a maliciously crafted archive to cause Read to allocate unbounded amounts of memory, potentially     causing resource exhaustion or panic.
      CVE-2022-2880:
      A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query     parameters from the inbound request, including unparseable parameters rejected by net/http. This issue     could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value.
    After the fix, the reverse proxy sanitizes the query parameters in the forwarded query when the outbound     request's form field is set after the reverse proxy. The director function returns, indicating that the     proxy has parsed the query parameters. Proxies that do not parse query parameters continue to forward the     original query parameters unchanged.
      CVE-2022-27664:
      A flaw was found in the golang package. In net/http in Go, attackers can cause a denial of service     because an HTTP/2 connection can hang during closing if a fatal error preempts the shutdown.
      CVE-2022-41715:
      A flaw was found in the golang package, where programs that compile regular expressions from untrusted     sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is     linear in the input size. Still, in some cases, the constant factor can be as high as 40,000, making a     relatively small regexp consume larger amounts of memory. After the fix, each regexp being parsed is     limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than     that are rejected. Routine use of regular expressions is unaffected.
      CVE-2022-41717:
      A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause     excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a     cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped,     an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open     connection.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0105 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-2879:
      A flaw was found in the golang package, where Reader.Read does not set a limit on the maximum size of     file headers. After fixing, Reader.Read limits the maximum size of header blocks to 1 MiB. This flaw     allows a maliciously crafted archive to cause Read to allocate unbounded amounts of memory, potentially     causing resource exhaustion or panic.
      CVE-2022-2880:
      A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query     parameters from the inbound request, including unparseable parameters rejected by net/http. This issue     could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value.
    After the fix, the reverse proxy sanitizes the query parameters in the forwarded query when the outbound     request's form field is set after the reverse proxy. The director function returns, indicating that the     proxy has parsed the query parameters. Proxies that do not parse query parameters continue to forward the     original query parameters unchanged.
      CVE-2022-27664:
      A flaw was found in the golang package. In net/http in Go, attackers can cause a denial of service     because an HTTP/2 connection can hang during closing if a fatal error preempts the shutdown.
      CVE-2022-41715:
      A flaw was found in the golang package, where programs that compile regular expressions from untrusted     sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is     linear in the input size. Still, in some cases, the constant factor can be as high as 40,000, making a     relatively small regexp consume larger amounts of memory. After the fix, each regexp being parsed is     limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than     that are rejected. Routine use of regular expressions is unaffected.
      CVE-2022-41717:
      A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause     excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a     cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped,     an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open     connection.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0135 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-2879:
      A flaw was found in the golang package, where Reader.Read does not set a limit on the maximum size of     file headers. After fixing, Reader.Read limits the maximum size of header blocks to 1 MiB. This flaw     allows a maliciously crafted archive to cause Read to allocate unbounded amounts of memory, potentially     causing resource exhaustion or panic.

      CVE-2022-2880:
      A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query     parameters from the inbound request, including unparseable parameters rejected by net/http. This issue     could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value.
    After the fix, the reverse proxy sanitizes the query parameters in the forwarded query when the outbound     request's form field is set after the reverse proxy. The director function returns, indicating that the     proxy has parsed the query parameters. Proxies that do not parse query parameters continue to forward the     original query parameters unchanged.

      CVE-2022-27664:
      A flaw was found in the golang package. In net/http in Go, attackers can cause a denial of service     because an HTTP/2 connection can hang during closing if a fatal error preempts the shutdown.

      CVE-2022-41715:
      A flaw was found in the golang package, where programs that compile regular expressions from untrusted     sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is     linear in the input size. Still, in some cases, the constant factor can be as high as 40,000, making a     relatively small regexp consume larger amounts of memory. After the fix, each regexp being parsed is     limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than     that are rejected. Routine use of regular expressions is unaffected.

      CVE-2022-41717:
      A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause     excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a     cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped,     an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open     connection.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0081 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-2879:
      A flaw was found in the golang package, where Reader.Read does not set a limit on the maximum size of     file headers. After fixing, Reader.Read limits the maximum size of header blocks to 1 MiB. This flaw     allows a maliciously crafted archive to cause Read to allocate unbounded amounts of memory, potentially     causing resource exhaustion or panic.
      CVE-2022-2880:
      A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query     parameters from the inbound request, including unparseable parameters rejected by net/http. This issue     could permit query parameter smuggling when a Go proxy forwards a parameter with an unparseable value.
    After the fix, the reverse proxy sanitizes the query parameters in the forwarded query when the outbound     request's form field is set after the reverse proxy. The director function returns, indicating that the     proxy has parsed the query parameters. Proxies that do not parse query parameters continue to forward the     original query parameters unchanged.
      CVE-2022-27664:
      A flaw was found in the golang package. In net/http in Go, attackers can cause a denial of service     because an HTTP/2 connection can hang during closing if a fatal error preempts the shutdown.
      CVE-2022-41715:
      A flaw was found in the golang package, where programs that compile regular expressions from untrusted     sources are vulnerable to memory exhaustion or a denial of service. The parsed regexp representation is     linear in the input size. Still, in some cases, the constant factor can be as high as 40,000, making a     relatively small regexp consume larger amounts of memory. After the fix, each regexp being parsed is     limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than     that are rejected. Routine use of regular expressions is unaffected.
      CVE-2022-41717:
      A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause     excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a     cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped,     an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open     connection.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-6073:05 advisory.

    * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)
      * golang: net/[http:](http:) handle server errors after sending GOAWAY (CVE-2022-27664)
      * grafana: using email as a username can block other users from signing in (CVE-2022-39229)
      * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3254 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * buildah: full container escape at build time (CVE-2024-1753)

    * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)

    * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

    * golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when     unmarshaling certain forms of invalid JSON (CVE-2024-24786)

    * jose-go: improper handling of highly compressed data (CVE-2024-28180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3254 advisory.

    aardvark-dns     buildah     [2:1.33.7-1]
    - update to the latest content of https://github.com/containers/buildah/tree/release-1.33       (https://github.com/containers/buildah/commit/b95e962)
    - Resolves: RHEL-28224

    cockpit-podman     conmon     containernetworking-plugins     containers-common     container-selinux     criu     [3.18-5]
    - rebuild to preserve upgrade path
    - Related: RHEL-32671

    crun     fuse-overlayfs     libslirp     [4.4.0-2]
    - rebuild to preserve upgrade path 8.9 -> 8.10
    - Related: RHEL-32671

    netavark     oci-seccomp-bpf-hook     podman     [4:4.9.4-1]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/7752c56)
    - Resolves: RHEL-28225

    python-podman     skopeo     [2:1.14.3-2]
    - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14       (https://github.com/containers/skopeo/commit/5f2b9af)
    - Resolves: RHEL-28728

     [2:1.14.3-1]
    - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14       (https://github.com/containers/skopeo/commit/4a2bc3a)
    - Resolves: RHEL-28226

     [2:1.14.3-0.2]
    - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14       (https://github.com/containers/skopeo/commit/d0a0f1a)
    - Resolves: RHEL-28226

    slirp4netns     udica     [0.2.6-21]
    - bump release to preserve update path
    - Resolves: RHEL-32671

    [0.2.6-20]
    - bump release to preserve update path
    - Related: #2139052

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:2357 advisory.

    Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics     with text pointers inside Git, while storing the file contents on a remote server.

    Security Fix(es):

    * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

    * golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters (CVE-2022-2880)

    * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

    * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

    * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

    * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

    * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

    * golang: regexp/syntax: limit memory used by parsing regexps (CVE-2022-41715)

    * golang: net/http: An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests     (CVE-2022-41717)

    * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short,     potentially allowing a denial of service (CVE-2022-32189)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-046 advisory.

    2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from     this advisory.

    A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating     chunked encoding. This issue could allow request smuggling, but only if combined with an intermediate     server that also improperly accepts the header as invalid. (CVE-2022-1705)

    A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go     source code, which contains deeply nested types or declarations, a panic can occur due to stack     exhaustion. This issue allows an attacker to impact system availability. (CVE-2022-1962)

    A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a     large PEM input (more than 5 MB) ), causing a stack overflow in Decode, which leads to a loss of     availability. (CVE-2022-24675)

    A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to     fail authentification with RSA keys to servers that reject signature algorithms based on SHA-2, enabling     an attacker to crash the server, resulting in a loss of availability. (CVE-2022-27191)

    A flaw was found in golang encoding/xml. When calling Decoder.Skip while parsing a deeply nested XML     document, a panic can occur due to stack exhaustion and allows an attacker to impact system availability.
    (CVE-2022-28131)

    An integer overflow flaw was found in Golang's crypto/elliptic library. This flaw allows an attacker to     use a crafted scaler input longer than 32 bytes, causing P256().ScalarMult or P256().ScalarBaseMult to     panic, leading to a loss of availability. (CVE-2022-28327)

    Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could     cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics.
    After fix, Reader.Read limits the maximum size of header blocks to 1 MiB. (CVE-2022-2879)

    A flaw was found in the syscall.Faccessat function when calling a process by checking the group. This flaw     allows an attacker to check the process group permissions rather than a member of the file's group,     affecting system availability. (CVE-2022-29526)

    Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3     allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket     ages during session resumption. (CVE-2022-30629)

    A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large     number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to     impact availability. (CVE-2022-30630)

    A flaw was found in golang. Calling the Reader.Read method on an archive that contains a large number of     concatenated 0-length compressed files can cause a panic issue due to stack exhaustion. (CVE-2022-30631)

    A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can     cause a panic issue due to stack exhaustion. This can cause an attacker to impact availability.
    (CVE-2022-30632)

    Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to     cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a     nested field that uses the any field tag. (CVE-2022-30633)

    A flaw was found in golang. When calling Decoder.Decode on a message that contains deeply nested     structures, a panic can occur due to stack exhaustion and allows an attacker to impact system     availability. (CVE-2022-30635)

    Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by     calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the     X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For     header. (CVE-2022-32148)

    Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion     or denial of service. The parsed regexp representation is linear in the size of the input, but in some     cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger     amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular     expressions whose representation would use more space than that are rejected. Normal use of regular     expressions is unaffected. (CVE-2022-41715)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0808 advisory.

  - The go command may execute arbitrary code at build time when using cgo. This may occur when running go     get on a malicious module, or when running any other command which builds untrusted code. This is can by     triggered by linker flags, specified via a #cgo LDFLAGS directive. Flags containing embedded spaces are     mishandled, allowing disallowed flags to be smuggled through the LDFLAGS sanitization by including them in     the argument of another flag. This only affects usage of the gccgo compiler. (CVE-2023-29405)

  - When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by     finalizing the operation with a rename from a temporary name to the final target file name.In that rename     operation, it might accidentally *widen* the permissions for the target file, leaving the updated file     accessible to more users than intended. (CVE-2022-32207)

  - decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. (CVE-2022-38900)

  - The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.
    (CVE-2022-33987)

  - Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the     name variable in parseQuery.js. This affects all versions prior to 1.4.1 and 2.0.3. (CVE-2022-37601)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.101026 advisory.

  - A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in     ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. (CVE-2021-39263)

  - EDK2's Network Package is susceptible to a buffer overflow vulnerability when processing DNS Servers     option from a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain     unauthorized access and potentially lead to a loss of Confidentiality, Integrity and/or Availability.
    (CVE-2023-45234)

  - Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote     attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the     KeyTrap issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the     protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG     records. (CVE-2023-50387)

  - The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped)     allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC     responses in a random subdomain attack, aka the NSEC3 issue. The RFC 5155 specification implies that an     algorithm must perform thousands of iterations of a hash function in certain situations. (CVE-2023-50868)

  - close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. (CVE-2022-48624)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
194837	RHEL 8 : container-tools:3.0 (RHSA-2024:2586)	Nessus	Red Hat Local Security Checks	2024/4/30	2024/11/7	high
207376	SUSE SLES15 / openSUSE 15 Security Update : golang-github-prometheus-prometheus (SUSE-SU-2024:3288-1)	Nessus	SuSE Local Security Checks	2024/9/18	2024/9/18	medium
234985	Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2025-057)	Nessus	Amazon Linux Local Security Checks	2025/4/29	2025/4/29	high
236572	Alibaba Cloud Linux 3 : 0071: git-lfs (ALINUX3-SA-2023:0071)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
239176	TencentOS Server 3: weldr-client (TSSA-2023:0092)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
239358	TencentOS Server 3: osbuild (TSSA-2023:0105)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
239819	TencentOS Server 3: cockpit-composer (TSSA-2023:0135)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
239877	TencentOS Server 3: osbuild-composer (TSSA-2023:0081)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
291843	MiracleLinux 8 : grafana-7.5.15-4.el8.ML.1 (AXSA:2023-6073:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
197764	RHEL 8 : container-tools:rhel8 (RHSA-2024:3254)	Nessus	Red Hat Local Security Checks	2024/5/23	2025/3/6	high
198279	Oracle Linux 8 : container-tools:ol8 (ELSA-2024-3254)	Nessus	Oracle Linux Local Security Checks	2024/6/1	2025/9/9	high
175475	RHEL 9 : git-lfs (RHSA-2023:2357)	Nessus	Red Hat Local Security Checks	2023/5/13	2025/3/10	high
173138	Amazon Linux 2023 : golist (ALAS2023-2023-046)	Nessus	Amazon Linux Local Security Checks	2023/3/21	2024/12/11	high
194928	Splunk Enterprise 8.2.0 < 8.2.12, 9.0.0 < 9.0.6, 9.1.0 < 9.1.1 (SVD-2023-0808)	Nessus	CGI abuses	2024/5/2	2024/7/29	critical
206824	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.101026)	Nessus	Misc.	2024/9/9	2025/10/6	medium

检测

插件搜索

high

medium

high

high

high

high

high

high

medium

high

high

high

high

critical

medium