An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03001-1 advisory.

    - CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input     (bsc#1248548)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to     deserialize invalid input. (CVE-2022-28948)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to
    deserialize invalid input. (CVE-2022-28948)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0319-1 advisory.

    Update to version 1.11.3:

      * optimize the performance for high qps (#6767)
      * bump deps
      * Fix zone parser error handling (#6680)
      * Add alternate option to forward plugin (#6681)
      * fix: plugin/file: return error when parsing the file fails (#6699)
      * [fix:documentation] Clarify autopath README (#6750)
      * Fix outdated test (#6747)
      * Bump go version from 1.21.8 to 1.21.11 (#6755)
      * Generate zplugin.go correctly with third-party plugins (#6692)
      * dnstap: uses pointer receiver for small response writer (#6644)
      * chore: fix function name in comment (#6608)
      * [plugin/forward] Strip local zone from IPV6 nameservers (#6635)
    - fixes CVE-2023-30464
    - fixes CVE-2023-28452

    Update to upstream head (git commit #5a52707):

      * bump deps to address security issue CVE-2024-22189
      * Return RcodeServerFailure when DNS64 has no next plugin (#6590)
      * add plusserver to adopters (#6565)
      * Change the log flags to be a variable that can be set prior to calling Run (#6546)
      * Enable Prometheus native histograms (#6524)
      * forward: respect context (#6483)
      * add client labels to k8s plugin metadata (#6475)
      * fix broken link in webpage (#6488)
      * Repo controlled Go version (#6526)
      * removed the mutex locks with atomic bool (#6525)

    Update to version 1.11.2:

      * rewrite: fix multi request concurrency issue in cname rewrite  (#6407)
      * plugin/tls: respect the path specified by root plugin (#6138)
      * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333)
      * fix: make the codeowners link relative (#6397)
      * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351)
      * plugin/cache: key cache on Checking Disabled (CD) bit (#6354)
      * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395)
      * Add PITS Global Data Recovery Services as an adopter (#6304)
      * Handle UDP responses that overflow with TC bit with test case (#6277)
      * plugin/rewrite: add rcode as a rewrite option (#6204)

    - CVE-2024-0874: coredns: CD bit response is cached and served later

    - Update to version 1.11.1:

      * Revert plugin/forward: Continue waiting after receiving malformed responses
      * plugin/dnstap: add support for extra field in payload
      * plugin/cache: fix keepttl parsing

    - Update to version 1.11.0:

      * Adds support for accepting DNS connections over QUIC (doq).
      * Adds CNAME target rewrites to the rewrite plugin.
      * Plus many bug fixes, and some security improvements.
      * This release introduces the following backward incompatible changes:
       + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta,          since all supported K8s versions now use Endpointslice.
       + The bufsize plugin changed its default size limit value to 1232        + Some changes to forward plugin metrics.

    - Update to version 1.10.1:

      * Corrected architecture labels in multi-arch image manifest
      * A new plugin timeouts that allows configuration of server listener timeout durations
      * acl can drop queries as an action
      * template supports creating responses with extended DNS errors
      * New weighted policy in loadbalance
      * Option to serve original record TTLs from cache

    - Update to version 1.10.0:

            * core: add log listeners for k8s_event plugin (#5451)
            * core: log DoH HTTP server error logs in CoreDNS format (#5457)
            * core: warn when domain names are not in RFC1035 preferred syntax (#5414)
            * plugin/acl: add support for extended DNS errors (#5532)
            * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602)
            * plugin/cache: add cache disable option (#5540)
            * plugin/cache: add metadata for wildcard record responses (#5308)
            * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320)
            * plugin/cache: correct responses to Authenticated Data requests (#5191)
            * plugin/dnstap: add identity and version support for the dnstap plugin (#5555)
            * plugin/file: add metadata for wildcard record responses (#5308)
            * plugin/forward: enable multiple forward declarations (#5127)
            * plugin/forward: health_check needs to normalize a specified domain name (#5543)
            * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431)
            * plugin/header: add support for query modification (#5556)
            * plugin/health: bypass proxy in self health check (#5401)
            * plugin/health: don't go lameduck when reloading (#5472)
            * plugin/k8s_external: add support for PTR requests (#5435)
            * plugin/k8s_external: resolve headless services (#5505)
            * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461)
            * plugin/ready: reset list of readiness plugins on startup (#5492)
            * plugin/rewrite: add PTR records to supported types (#5565)
            * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459)
            * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462)
            * plugin/rewrite: support min and max TTL values (#5508)
            * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460)
            * plugin/trace: read trace context info from headers for DOH (#5439)
            * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957)
            * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948
            * core: update golang.org/x/crypto to fix CVE-2022-27191
            * plugin/acl: adding a check to parse out zone info
            * plugin/dnstap: support FQDN TCP endpoint
            * plugin/errors: add stacktrace option to log a stacktrace during panic recovery
            * plugin/template: return SERVFAIL for zone-match regex-no-match case

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of kured installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28948 advisory.

  - An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to     deserialize invalid input. (CVE-2022-28948)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to
    crash a server in certain circumstances involving AddHostKey. (CVE-2022-27191)

  - An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to
    deserialize invalid input. (CVE-2022-28948)

ID	Name	Product	Family	Severity
258051	SUSE SLES15 / openSUSE 15 Security Update : ignition (SUSE-SU-2025:03001-1)	Nessus	SuSE Local Security Checks	high
224604	Linux Distros Unpatched Vulnerability : CVE-2022-28948	Nessus	Misc.	high
415855	SCA: security update for gopkg.in/yaml.v3 (GHSA-hp87-p4gw-j4gq)	Tenable Cloud Security	SCA Checks	high
415855	SCA: security update for gopkg.in/yaml.v3 (GHSA-hp87-p4gw-j4gq)	Tenable Self-Hosted Container Security	SCA Checks	high
207881	openSUSE 15 Security Update : coredns (openSUSE-SU-2024:0319-1)	Nessus	SuSE Local Security Checks	high
185996	CBL Mariner 2.0 Security Update: kured (CVE-2022-28948)	Nessus	MarinerOS Local Security Checks	high
403904	Alpine: multiple coredns packages: security update to 1.9.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
403904	Alpine: multiple coredns packages: security update to 1.9.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
408588	Alpine: multiple coredns packages: security update to 1.9.2-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
408588	Alpine: multiple coredns packages: security update to 1.9.2-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2022-28948

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high