GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.

The version of keda installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42836 advisory.

  - GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack. (CVE-2021-42836)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack. (CVE-2021-42836)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack. (CVE-2021-42836)

An update of the telegraf package has been released.

ID	Name	Product	Family	Severity
295701	Azure Linux 3.0 Security Update: keda (CVE-2021-42836)	Nessus	Azure Linux Local Security Checks	high
224163	Linux Distros Unpatched Vulnerability : CVE-2021-42836	Nessus	Misc.	high
417636	SCA: security update for github.com/tidwall/gjson (GHSA-ppj4-34rq-v8j9)	Tenable Cloud Security	SCA Checks	high
417636	SCA: security update for github.com/tidwall/gjson (GHSA-ppj4-34rq-v8j9)	Tenable Self-Hosted Container Security	SCA Checks	high
204388	Photon OS 5.0: Telegraf PHSA-2023-5.0-0041	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2021-42836

high

Tenable Plugins

high

high

high

high

high