Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.

The remote NewStart CGSL host, running version MAIN 6.02, has docker-ce packages installed that are affected by multiple vulnerabilities:

  - net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an     authorization bypass in some applications. This is related to a Host field with a suffix appearing in     neither Hostname() nor Port(), and is related to a non-numeric port number. For example, an attacker can     compose a crafted javascript:// URL that results in a hostname of google.com. (CVE-2019-14809)

  - Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. (CVE-2019-16276)

  - runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor     restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a     malicious Docker image can mount over a /proc directory. (CVE-2019-16884)

  - Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. (CVE-2020-28362)

  - runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the     vulnerability, an attacker must be able to create multiple containers with a fairly specific mount     configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
    (CVE-2021-30465)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has docker-ce packages installed that are affected by multiple vulnerabilities:

  - net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an     authorization bypass in some applications. This is related to a Host field with a suffix appearing in     neither Hostname() nor Port(), and is related to a non-numeric port number. For example, an attacker can     compose a crafted javascript:// URL that results in a hostname of google.com. (CVE-2019-14809)

  - Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. (CVE-2019-16276)

  - Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. (CVE-2020-28362)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has docker-ce packages installed that are affected by multiple vulnerabilities:

  - net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an     authorization bypass in some applications. This is related to a Host field with a suffix appearing in     neither Hostname() nor Port(), and is related to a non-numeric port number. For example, an attacker can     compose a crafted javascript:// URL that results in a hostname of google.com. (CVE-2019-14809)

  - Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. (CVE-2019-16276)

  - Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. (CVE-2020-28362)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1551 advisory.

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

  - jenkins: lack of type validation in agent related REST API (CVE-2021-21639)

  - jenkins: view name validation bypass (CVE-2021-21640)

  - jetty: Symlink directory exposes webapp directory contents (CVE-2021-28163)

  - jetty: Resource exhaustion when receiving an invalid large TLS frame (CVE-2021-28165)

  - golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1366 advisory.

  - golang: data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586)

  - golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs     (CVE-2020-16845)

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

  - golang: crypto/elliptic: incorrect operations on the P-224 curve (CVE-2021-3114)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0956 advisory.

  - golang: data race in certain net/http servers including ReverseProxy can lead to DoS (CVE-2020-15586)

  - golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs     (CVE-2020-16845)

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5634 advisory.

  - atomic-openshift: cross-namespace owner references can trigger deletions of valid children (CVE-2019-3884)

  - kubernetes: Ceph RBD adminSecrets exposed in logs when loglevel >= 4 (CVE-2020-8566)

  - containerd: credentials leak during image pull (CVE-2020-15157)

  - python-rsa: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25658)

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

  - gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation (CVE-2021-3121)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:5493 advisory.

  - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS (CVE-2020-24553)

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

  - golang: malicious symbol names can lead to code execution at build time (CVE-2020-28366)

  - golang: improper validation of cgo flags can lead to code execution at build time (CVE-2020-28367)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0038 advisory.

  - jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks     (CVE-2020-2304)

  - jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks     (CVE-2020-2305)

  - jenkins-2-plugins/mercurial: Missing permission check in an HTTP endpoint could result in information     disclosure (CVE-2020-2306)

  - jenkins-2-plugins/kubernetes: Jenkins controller environment variables are accessible in Kubernetes Plugin     (CVE-2020-2307)

  - jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates     (CVE-2020-2308)

  - jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows enumerating credentials     IDs (CVE-2020-2309)

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of golang installed on the remote host is prior to 1.15.5-1.65. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1471 advisory.

  - Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. (CVE-2020-28362)

  - Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection. (CVE-2020-28366)

  - Go before 1.14.12 and 1.15.x before 1.15.5 allows Argument Injection. (CVE-2020-28367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1578 advisory.

  - Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. (CVE-2020-28362)

  - Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection. (CVE-2020-28366)

  - Go before 1.14.12 and 1.15.x before 1.15.5 allows Argument Injection. (CVE-2020-28367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5493 advisory.

  - Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. (CVE-2020-28362)

  - Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI     handlers that lack a Content-Type header. (CVE-2020-24553)

  - Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection. (CVE-2020-28366)

  - Go before 1.14.12 and 1.15.x before 1.15.5 allows Argument Injection. (CVE-2020-28367)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5493 advisory.

  - golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS (CVE-2020-24553)

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

  - golang: malicious symbol names can lead to code execution at build time (CVE-2020-28366)

  - golang: improper validation of cgo flags can lead to code execution at build time (CVE-2020-28367)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

- Rebase to go1.14.13

  - Security fix for CVE-2020-28362, CVE-2020-28367 and     CVE-2020-28366

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for go1.15 fixes the following issues :

go1.15.5 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.

  - go#42553 math/big: panic during recursive division of     very large numbers (bsc#1178750 CVE-2020-28362)

  - go#42560 cmd/go: arbitrary code can be injected into cgo     generated files (bsc#1178752 CVE-2020-28367)

  - go#42557 cmd/go: improper validation of cgo flags can     lead to remote code execution at build time (bsc#1178753     CVE-2020-28366)

  - go#42169 cmd/compile, runtime, reflect: pointers to     go:notinheap types must be stored indirectly in     interfaces

  - go#42151 cmd/cgo: opaque struct pointers are broken     since Go 1.15.3

  - go#42138 time: Location interprets wrong timezone (DST)     with slim zoneinfo

  - go#42113 x/net/http2: the first write error on a     connection will cause all subsequent write requests to     fail blindly

  - go#41914 net/http: request.Clone doesn't deep copy     TransferEncoding

  - go#41704 runtime: macOS syscall.Exec can get SIGILL due     to preemption signal

  - go#41463 compress/flate: deflatefast produces corrupted     output

  - go#41387 x/net/http2: connection-level flow control not     returned if stream errors, causes server hang

  - go#40974 cmd/link: sectionForAddress(0xA9D67F) address     not in any section file

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for go1.14 fixes the following issues :

go1.14.12 (released 2020-11-12) includes security fixes to the cmd/go and math/big packages.

  - go#42553 math/big: panic during recursive division of     very large numbers (bsc#1178750 CVE-2020-28362)

  - go#42560 cmd/go: arbitrary code can be injected into cgo     generated files (bsc#1178752 CVE-2020-28367)

  - go#42557 cmd/go: improper validation of cgo flags can     lead to remote code execution at build time (bsc#1178753     CVE-2020-28366)

  - go#42155 time: Location interprets wrong timezone (DST)     with slim zoneinfo

  - go#42112 x/net/http2: the first write error on a     connection will cause all subsequent write requests to     fail blindly

  - go#41991 runtime: macOS-only segfault on 1.14+ with     'split stack overflow'

  - go#41913 net/http: request.Clone doesn't deep copy     TransferEncoding

  - go#41703 runtime: macOS syscall.Exec can get SIGILL due     to preemption signal

  - go#41386 x/net/http2: connection-level flow control not     returned if stream errors, causes server hang

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5333 advisory.

  - golang: math/big: panic during recursive division of very large numbers (CVE-2020-28362)

  - golang: malicious symbol names can lead to code execution at build time (CVE-2020-28366)

  - golang: improper validation of cgo flags can lead to code execution at build time (CVE-2020-28367)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for go1.15 fixes the following issues :

  - go1.15.5 (released 2020-11-12) includes security fixes     to the cmd/go and math/big packages.

  - go#42553 math/big: panic during recursive division of     very large numbers (bsc#1178750 CVE-2020-28362)

  - go#42560 cmd/go: arbitrary code can be injected into cgo     generated files (bsc#1178752 CVE-2020-28367)

  - go#42557 cmd/go: improper validation of cgo flags can     lead to remote code execution at build time (bsc#1178753     CVE-2020-28366)

  - go#42169 cmd/compile, runtime, reflect: pointers to     go:notinheap types must be stored indirectly in     interfaces

  - go#42151 cmd/cgo: opaque struct pointers are broken     since Go 1.15.3

  - go#42138 time: Location interprets wrong timezone (DST)     with slim zoneinfo

  - go#42113 x/net/http2: the first write error on a     connection will cause all subsequent write requests to     fail blindly

  - go#41914 net/http: request.Clone doesn't deep copy     TransferEncoding

  - go#41704 runtime: macOS syscall.Exec can get SIGILL due     to preemption signal

  - go#41463 compress/flate: deflatefast produces corrupted     output

  - go#41387 x/net/http2: connection-level flow control not     returned if stream errors, causes server hang

  - go#40974 cmd/link: sectionForAddress(0xA9D67F) address     not in any section file

This update for go1.14 fixes the following issues :

  - go1.14.12 (released 2020-11-12) includes security fixes     to the cmd/go and math/big packages.

  - go#42553 math/big: panic during recursive division of     very large numbers (bsc#1178750 CVE-2020-28362)

  - go#42560 cmd/go: arbitrary code can be injected into cgo     generated files (bsc#1178752 CVE-2020-28367)

  - go#42557 cmd/go: improper validation of cgo flags can     lead to remote code execution at build time (bsc#1178753     CVE-2020-28366)

  - go#42155 time: Location interprets wrong timezone (DST)     with slim zoneinfo

  - go#42112 x/net/http2: the first write error on a     connection will cause all subsequent write requests to     fail blindly

  - go#41991 runtime: macOS-only segfault on 1.14+ with     'split stack overflow'

  - go#41913 net/http: request.Clone doesn't deep copy     TransferEncoding

  - go#41703 runtime: macOS syscall.Exec can get SIGILL due     to preemption signal

  - go#41386 x/net/http2: connection-level flow control not     returned if stream errors, causes server hang

This update was imported from the SUSE:SLE-15:Update update project.

- Rebase to go1.15.5

  - Security fix for CVE-2020-28362, CVE-2020-28367 and     CVE-2020-28366

----

  - Rebase to go1.15.4

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Go project reports :

A number of math/big.Int methods (Div, Exp, DivMod, Quo, Rem, QuoRem, Mod, ModInverse, ModSqrt, Jacobi, and GCD) can panic when provided crafted large inputs. For the panic to happen, the divisor or modulo argument must be larger than 3168 bits (on 32-bit architectures) or 6336 bits (on 64-bit architectures). Multiple math/big.Rat methods are similarly affected.

The go command may execute arbitrary code at build time when cgo is in use. This may occur when running go get on a malicious package, or any other command that builds untrusted code. This can be caused by a malicious gcc flags specified via a #cgo directive.

The go command may execute arbitrary code at build time when cgo is in use. This may occur when running go get on a malicious package, or any other command that builds untrusted code. This can be caused by malicious unquoted symbol names.

ID	Name	Product	Family	Severity
160873	NewStart CGSL MAIN 6.02 : docker-ce Multiple Vulnerabilities (NS-SA-2022-0056)	Nessus	NewStart CGSL Local Security Checks	critical
160809	NewStart CGSL CORE 5.04 / MAIN 5.04 : docker-ce Multiple Vulnerabilities (NS-SA-2022-0010)	Nessus	NewStart CGSL Local Security Checks	critical
160805	NewStart CGSL CORE 5.05 / MAIN 5.05 : docker-ce Multiple Vulnerabilities (NS-SA-2022-0044)	Nessus	NewStart CGSL Local Security Checks	critical
149793	RHEL 7 / 8 : OpenShift Container Platform 4.7.11 (RHSA-2021:1551)	Nessus	Red Hat Local Security Checks	medium
149258	RHEL 8 : OpenShift Container Platform 4.7.9 packages and (RHSA-2021:1366)	Nessus	Red Hat Local Security Checks	medium
148247	RHEL 8 : OpenShift Container Platform 4.6.23 (RHSA-2021:0956)	Nessus	Red Hat Local Security Checks	high
146810	RHEL 7 / 8 : OpenShift Container Platform 4.7.0 (RHSA-2020:5634)	Nessus	Red Hat Local Security Checks	high
145933	CentOS 8 : go-toolset:rhel8 (CESA-2020:5493)	Nessus	CentOS Local Security Checks	high
145049	RHEL 7 / 8 : OpenShift Container Platform 4.6.12 (RHSA-2021:0038)	Nessus	Red Hat Local Security Checks	medium
144999	Amazon Linux AMI : golang (ALAS-2021-1471)	Nessus	Amazon Linux Local Security Checks	high
144801	Amazon Linux 2 : golang (ALAS-2021-1578)	Nessus	Amazon Linux Local Security Checks	high
144562	Oracle Linux 8 : go-toolset:ol8 (ELSA-2020-5493)	Nessus	Oracle Linux Local Security Checks	high
144407	RHEL 8 : go-toolset:rhel8 (RHSA-2020:5493)	Nessus	Red Hat Local Security Checks	high
144315	Fedora 32 : golang (2020-e971480183)	Nessus	Fedora Local Security Checks	high
143660	SUSE SLED15 / SLES15 Security Update : go1.15 (SUSE-SU-2020:3368-1)	Nessus	SuSE Local Security Checks	high
143648	SUSE SLED15 / SLES15 Security Update : go1.14 (SUSE-SU-2020:3369-1)	Nessus	SuSE Local Security Checks	high
143469	RHEL 7 : go-toolset-1.14-golang (RHSA-2020:5333)	Nessus	Red Hat Local Security Checks	high
143457	openSUSE Security Update : go1.15 (openSUSE-2020-2139)	Nessus	SuSE Local Security Checks	high
143337	openSUSE Security Update : go1.14 (openSUSE-2020-2047)	Nessus	SuSE Local Security Checks	high
143311	openSUSE Security Update : go1.14 (openSUSE-2020-2067)	Nessus	SuSE Local Security Checks	high
143188	Fedora 33 : golang (2020-864922e78a)	Nessus	Fedora Local Security Checks	high
142883	FreeBSD : go -- math/big: panic during recursive division of very large numbers; cmd/go: arbitrary code execution at build time through cgo (db4b2f27-252a-11eb-865c-00155d646400)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2020-28362

high

Tenable Plugins

critical

critical

critical

medium

medium

high

high

high

medium

high

high

high

high

high

high

high

high

high

high

high

high

high