Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated user to connect, even if credentials were set. Anyone running the Chisel server that is using the `AUTH` environment variable to specify credentials to authenticate against is affected by this vulnerability. Chisel is often used to provide an entrypoint to a private network, which means services that are gated by Chisel may be affected. Additionally, Chisel is often used for exposing services to the internet. An attacker could MITM requests by connecting to a Chisel server and requesting to forward traffic from a remote port. This issue has been addressed in release version 1.10.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever
    read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated
    user to connect, even if credentials were set. Anyone running the Chisel server that is using the `AUTH`
    environment variable to specify credentials to authenticate against is affected by this vulnerability.
    Chisel is often used to provide an entrypoint to a private network, which means services that are gated by
    Chisel may be affected. Additionally, Chisel is often used for exposing services to the internet. An
    attacker could MITM requests by connecting to a Chisel server and requesting to forward traffic from a
    remote port. This issue has been addressed in release version 1.10.0. All users are advised to upgrade.
    There are no known workarounds for this vulnerability. (CVE-2024-43798)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6b9aeecbe8 advisory.

    Update to new upstream version (closes rhbz#2303131)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5aad2fda6a advisory.

    Update to new upstream version (closes rhbz#2303131)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9b005962f9 advisory.

    Update to new upstream version (closes rhbz#2303131)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
409405	SCA: security update for github.com/jpillora/chisel (GHSA-38jh-8h67-m7mj)	Tenable Cloud Security	SCA Checks	Local	high
409405	SCA: security update for github.com/jpillora/chisel (GHSA-38jh-8h67-m7mj)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
211123	Fedora 41 : chisel (2024-6b9aeecbe8)	Nessus	Fedora Local Security Checks	Local	high
207779	Fedora 40 : chisel (2024-5aad2fda6a)	Nessus	Fedora Local Security Checks	Local	high
207778	Fedora 39 : chisel (2024-9b005962f9)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2024-43798

high

Tenable Plugins

high

high

high

high

high