gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory exhaustion vulnerability. Version 1.4.1 contains a patch for the issue.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8686:01 advisory.

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
      * golang: net/[http:](http:) memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
      * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm     (CVE-2024-24783)
      * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
      * containers/image: digest type does not guarantee valid type (CVE-2024-3727)
      * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
      * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104)
      * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization     (CVE-2024-37298)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8754:08 advisory.

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
      * go-retryable[http:](http:) url might write sensitive information to log file (CVE-2024-6104)
      * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization     (CVE-2024-37298)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running     `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious     attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of     `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory     exhaustion vulnerability. Version 1.4.1 contains a patch for the issue. (CVE-2024-37298)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0781 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2023-45290:
    When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with     Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed     form were not applied to the memory consumed while reading a single form line. This permits a maliciously     crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory,     potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits     the maximum size of form lines.

    CVE-2024-1394:
    A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a     resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in     github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey and ctx. That     function uses named return parameters to free pkey and ctx if there is an error initializing the     context or setting the different properties. All return statements related to error cases follow the     return nil, nil, fail(...) pattern, meaning that pkey and ctx will be nil inside the deferred     function that should free them.

    CVE-2024-3727:
    A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger     unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local     path traversal, and other attacks.

    CVE-2024-6104:
    go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead     to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability,     CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

    CVE-2024-24783:
    Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause     Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth     to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not     verify client certificates.

    CVE-2024-24784:
    The ParseAddressList function incorrectly handles comments (text within parentheses) within display names.
    Since this is a misalignment with conforming address parsers, it can result in different trust decisions     being made by programs using different parsers.

    CVE-2024-24789:
    The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most     zip implementations. This misalignment could be exploited to create an zip file with contents that vary     depending on the implementation reading the file. The archive/zip package now rejects files containing     these errors.

    CVE-2024-37298:
    gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running     schema.Decoder.Decode() on a struct that has a field of type []struct{...} opens it up to malicious     attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of     schema.Decoder.Decode() on a struct with arrays of other structs could be vulnerable to this memory     exhaustion vulnerability. Version 1.4.1 contains a patch for the issue.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0660 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-37298:
    gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running     `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious     attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of     `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory     exhaustion vulnerability. Version 1.4.1 contains a patch for the issue.

    CVE-2024-3056:
    A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that,     when configured to share the same IPC with at least one other container, can create a large number of IPC     resources in /dev/shm. The malicious container will continue to exhaust resources until it is out-of-     memory (OOM) killed. While the malicious container's cgroup will be removed, the IPC resources it created     are not. Those resources are tied to the IPC namespace that will not be removed until all containers using     it are stopped, and one non-malicious container is holding the namespace open. The malicious container is     restarted, either automatically or by attacker control, repeating the process and increasing the amount of     memory consumed. With a container configured to restart always, such as `podman run --restart=always`,     this can result in a memory-based denial of service of the system.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0164 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-45290:
    When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with     Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed     form were not applied to the memory consumed while reading a single form line. This permits a maliciously     crafted input containing very long lines to cause allocation of arbitrarily large amounts of memory,     potentially leading to memory exhaustion. With fix, the ParseMultipartForm function now correctly limits     the maximum size of form lines.

    CVE-2024-1394:
    A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a     resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in     github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey and ctx. That     function uses named return parameters to free pkey and ctx if there is an error initializing the     context or setting the different properties. All return statements related to error cases follow the     return nil, nil, fail(...) pattern, meaning that pkey and ctx will be nil inside the deferred     function that should free them.

    CVE-2024-24783:
    Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause     Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth     to VerifyClientCertIfGiven or RequireAndVerifyClientCert. The default behavior is for TLS servers to not     verify client certificates.

    CVE-2024-24784:
    The ParseAddressList function incorrectly handles comments (text within parentheses) within display names.
    Since this is a misalignment with conforming address parsers, it can result in different trust decisions     being made by programs using different parsers.

    CVE-2024-24789:
    The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most     zip implementations. This misalignment could be exploited to create an zip file with contents that vary     depending on the implementation reading the file. The archive/zip package now rejects files containing     these errors.

    CVE-2024-3727:
    A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger     unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local     path traversal, and other attacks.

    CVE-2024-37298:
    gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running     `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious     attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of     `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory     exhaustion vulnerability. Version 1.4.1 contains a patch for the issue.

    CVE-2024-6104:
    go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead     to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability,     CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libcontainers-common / telegraf installed on the remote Azure Linux 3.0 host is prior to tested version.
It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37298 advisory.

  - gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running     `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious     attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of     `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory     exhaustion vulnerability. Version 1.4.1 contains a patch for the issue. (CVE-2024-37298)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5258 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

    * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

    * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)

    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5194 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6194 advisory.

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6194 advisory.

    [4.9.4-10.0.1]
    - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625]
    - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655]
    - Add devices on container startup, not on creation
    - Backport fast gzip for compression [Orabug: 36420418]
    - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
    - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

    [4:4.9.4-10]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/6b45bb1)
    - Resolves: RHEL-53250

    [4:4.9.4-9]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/1a2d8e3)
    - Resolves: RHEL-50507

    [4:4.9.4-8]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/affa589)
    - Resolves: RHEL-45916

    [4:4.9.4-7]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/8fa0c76)
    - Resolves: RHEL-40804

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6194 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5258 advisory.

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

    * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

    * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)

    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5634 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5202 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.12.63. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:5200

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)
    * golang: net/http: memory exhaustion in Request.ParseMultipartForm     (CVE-2023-45290)
    * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped     IPv6 addresses (CVE-2024-24790)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:5258 advisory.

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
    * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
    * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)
    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5258 advisory.

    aardvark-dns     buildah     [2:1.33.8-4]
    - rebuild for  golang fixes
    - Related: RHEL-28452

    cockpit-podman     [84.1-1]
    - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
    - Related: Jira:RHEL-25557

    conmon     [3:2.1.10-1]
    - update to https://github.com/containers/conmon/releases/tag/v2.1.10
    - Related: Jira:RHEL-2110

    containernetworking-plugins     [1:1.4.0-5]
    - rebuild for  golang fixes
    - Related: RHEL-28452

    containers-common     [1-82.0.1]
    - Updated removed references [Orabug: 33473101] (Alex Burmashev)
    - Adjust registries.conf (Nikita Gerasimov)
    - remove references to RedHat registry (Nikita Gerasimov)

    container-selinux     [2:2.229.0-2]
    - remove watch statements properly for RHEL8 and lower
    - Related: Jira:RHEL-2110

    criu     crun     [1.14.3-2]
    - remove BR libgcrypt-devel, no longer needed
    - Related: Jira:RHEL-2110

    fuse-overlayfs     [1.13-1]
    - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
    - Related: Jira:RHEL-2110

    libslirp     netavark     oci-seccomp-bpf-hook     [1.2.10-1]
    - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
    - Related: Jira:RHEL-2110

    podman     [4.9.4-12.0.2]
    - Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]

    python-podman     [4.9.0-2]
    - depend directly on urllib3
    - Resolves: RHEL-43567

    runc     [1:1.1.12-4]
    - rebuild for  golang fixes
    - Related: RHEL-28452

    skopeo     [2:1.14.5-3]
    - rebuild for  golang fixes
    - Related: RHEL-28452

    slirp4netns     [1.2.3-1]
    - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
    - Related: Jira:RHEL-2110

    udica

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4963 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.14.34. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:4960

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)
    * go-retryablehttp: url might write sensitive information to log file     (CVE-2024-6104)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.14/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4858 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.16.5. See the following     advisory for the container images for this release:

    https://access.redhat.com/errata/RHBA-2024:4855

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)
    * go-retryablehttp: url might write sensitive information to log file     (CVE-2024-6104)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4848 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.
    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4702 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.15.23. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:4699

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4825 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libcontainers-common / telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version.
It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37298 advisory.

  - gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running     `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious     attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of     `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory     exhaustion vulnerability. Version 1.4.1 contains a patch for the issue. (CVE-2024-37298)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
293698	MiracleLinux 8 : container-tools:rhel8 (AXSA:2024-8686:01)	Nessus	Miracle Linux Local Security Checks	medium
292009	MiracleLinux 9 : podman-4.9.4-10.el9_4 (AXSA:2024-8754:08)	Nessus	Miracle Linux Local Security Checks	medium
248695	Linux Distros Unpatched Vulnerability : CVE-2024-37298	Nessus	Misc.	high
239203	TencentOS Server 3: container-tools:rhel8 (TSSA-2024:0781)	Nessus	Tencent Local Security Checks	medium
239049	TencentOS Server 4: podman (TSSA-2024:0660)	Nessus	Tencent Local Security Checks	high
236270	Alibaba Cloud Linux 3 : 0164: container-tools:rhel8 (ALINUX3-SA-2024:0164)	Nessus	Alibaba Cloud Linux Local Security Checks	medium
215501	Azure Linux 3.0 Security Update: libcontainers-common / telegraf (CVE-2024-37298)	Nessus	Azure Linux Local Security Checks	high
210509	RHEL 8 : container-tools:rhel8 (RHSA-2024:5258)	Nessus	Red Hat Local Security Checks	medium
210478	RHEL 8 : container-tools:rhel8 (RHSA-2024:5194)	Nessus	Red Hat Local Security Checks	medium
206609	AlmaLinux 9 : podman (ALSA-2024:6194)	Nessus	Alma Linux Local Security Checks	medium
206506	Oracle Linux 9 : podman (ELSA-2024-6194)	Nessus	Oracle Linux Local Security Checks	medium
206496	RHEL 9 : podman (RHSA-2024:6194)	Nessus	Red Hat Local Security Checks	medium
206049	Rocky Linux 8 : container-tools:rhel8 (RLSA-2024:5258)	Nessus	Rocky Linux Local Security Checks	medium
205884	RHEL 9 : podman (RHSA-2024:5634)	Nessus	Red Hat Local Security Checks	medium
205761	RHEL 8 / 9 : OpenShift Container Platform 4.12.63 (RHSA-2024:5202)	Nessus	Red Hat Local Security Checks	critical
205545	AlmaLinux 8 : container-tools:rhel8 (ALSA-2024:5258)	Nessus	Alma Linux Local Security Checks	medium
205538	Oracle Linux 8 : container-tools:ol8 (ELSA-2024-5258)	Nessus	Oracle Linux Local Security Checks	medium
205153	RHEL 8 / 9 : OpenShift Container Platform 4.14.34 (RHSA-2024:4963)	Nessus	Red Hat Local Security Checks	medium
204927	RHEL 8 / 9 : OpenShift Container Platform 4.16.5 (RHSA-2024:4858)	Nessus	Red Hat Local Security Checks	medium
204926	RHEL 8 / 9 : OpenShift Container Platform 4.13.46 (RHSA-2024:4848)	Nessus	Red Hat Local Security Checks	high
204743	RHEL 8 / 9 : OpenShift Container Platform 4.15.23 (RHSA-2024:4702)	Nessus	Red Hat Local Security Checks	high
204597	RHEL 9 : podman (RHSA-2024:4825)	Nessus	Red Hat Local Security Checks	high
202740	CBL Mariner 2.0 Security Update: libcontainers-common / telegraf (CVE-2024-37298)	Nessus	MarinerOS Local Security Checks	high

Detections

Analytics

CVE-2024-37298

high

Tenable Plugins

medium

medium

high

medium

high

medium

high

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

high

high

high

high