There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version
    1.16.9, through a flaw in the ECIES cryptography implementation, an attacker may be able to extract bits
    of the p2p node key. The issue is resolved in the v1.16.9 and v1.17.0 releases of Geth. Geth maintainers
    recommend rotating the node key after applying the upgrade, which can be done by removing the file
    `<datadir>/geth/nodekey` before starting Geth. (CVE-2026-26315)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version
    1.17.0, an attacker can cause high memory usage by sending a specially-crafted p2p message. The issue is
    resolved in the v1.17.0 release. (CVE-2026-26313)

  - go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version
    1.16.9, a vulnerable node can be forced to shutdown/crash using a specially crafted message. The problem
    is resolved in the v1.16.9 and v1.17.0 releases of Geth. (CVE-2026-26314)

  - go-ethereum (Geth) is a golang execution layer implementation of the Ethereum protocol. Prior to version
    1.16.9, through a flaw in the ECIES cryptography implementation, an attacker may be able to extract bits
    of the p2p node key. The issue is resolved in the v1.16.9 and v1.17.0 releases of Geth. Geth maintainers
    recommend rotating the node key after applying the upgrade, which can be done by removing the file
    `<datadir>/geth/nodekey` before starting Geth. (CVE-2026-26315)

リモートホストにインストールされている FreeBSD のバージョンは、テスト済みバージョンより前です。したがって、9c8c00ce-3642-11f1-bd03-3c7c3fba4204 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

    https://github.com/ethereum/go-ethereum/security/advisories による報告:

Tenable は、前述の記述ブロックを FreeBSD セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9c8c00ce-3642-11f1-bd03-3c7c3fba4204 advisory.

    https://github.com/ethereum/go-ethereum/security/advisories reports:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
437846	SCA: security update for github.com/ethereum/go-ethereum (GHSA-m6j8-rg6r-7mv8)	Tenable Cloud Security	SCA Checks	2026/2/19	2026/7/2	medium
437846	SCA: security update for github.com/ethereum/go-ethereum (GHSA-m6j8-rg6r-7mv8)	Tenable Self-Hosted Container Security	SCA Checks	2026/2/19	2026/7/2	medium
438138	Alpine: multiple geth packages: security update to 1.17.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/3/4	2026/7/2	high
438138	Alpine: multiple geth packages: security update to 1.17.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/3/4	2026/7/2	high
307386	FreeBSDgo-ethereum -- 脆弱性9c8c00ce-3642-11f1-bd03-3c7c3fba4204	Nessus	FreeBSD Local Security Checks	2026/4/17	2026/4/17	high
307386	FreeBSD : go-ethereum -- vulnerabilities (9c8c00ce-3642-11f1-bd03-3c7c3fba4204)	Nessus	FreeBSD Local Security Checks	2026/4/17	2026/4/17	high

检测

插件搜索

medium

medium

high

high

high

high