Debian Linux - golang-1.15 - None

golang-1.19 - None

golang-1.23 - None

golang-1.24 - None

Ubuntu Linux - [Unknown description]

The version of golang installed on the remote host is prior to 1.24.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2984 advisory.

    os/exec: LookPath may return unexpected paths. If the PATH environment variable contains paths which are     executables (rather than just directories), passing certain strings to LookPath (, ., and ..), can     result in the binaries listed in the PATH being unexpectedly returned. (CVE-2025-47906)

    Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to     the Scan method of the returned Rows can result in unexpected results if other queries are being made in     parallel. This can result in a race condition that may overwrite the expected results with those of     another query, causing the call to Scan to return either unexpected results from the other query or an     error. (CVE-2025-47907)

    A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability     is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer     overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be     used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to     fix this issue. (CVE-2025-7545)

    A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by     this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to     out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed     to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is     recommended to apply a patch to fix this issue. (CVE-2025-7546)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Debian Linux - golang-1.15 - None  golang-1.19 - None  golang-1.23 - None  golang-1.24 - None  Ubuntu     Linux - [Unknown description] (CVE-2025-47906)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02837-1 advisory.

    Updated to go1.24.6 (released 2025-08-06) (bsc#1236217):
      - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go     (bsc#1246118)
      - CVE-2025-47906: Fixed incorrect expansion of '', '.' and '..' in some PATH configurations in LookPath     in osc/exec (bsc#1247719)
      - CVE-2025-47907: Fixed incorrect results returned from Rows.Scan in database/sql (bsc#1247720)

    Updated to version 1.24.6 cut from the go1.24-fips-release     branch at the revision tagged go1.24.6-1-openssl-fips. (jsc#SLE-18320)
    - Fix HKDF-Extract The latest OpenSSL in c9s/c10s requires nil       salt to be passed as a hash length buffer of zeros.

    Other fixes:
      - cmd/compile: regression on ppc64le bit operations
      - cmd/go: crash on unknown GOEXPERIMENT during toolchain selection
      - cmd/link: duplicated definition of symbol github.com/ebitengine/purego.syscall15XABI0 when running     with ASAN
      - internal/trace: stress tests triggering suspected deadlock in tracer
      - os/user:nolibgcc: TestGroupIdsTestUser failures
      - runtime/pprof: crash 'cannot read stack of running goroutine' in goroutine profile
      - runtime: RSS seems to have increased in Go 1.24 while the runtime accounting has not
      - runtime: bad frame pointer during panic during duffcopy
      - runtime: heap mspan limit is set too late, causing data race between span allocation and conservative     scanning
      - runtime: memlock not unlocked in all control flow paths in sysReserveAlignedSbrk
      - runtime: segfaults in runtime.(*unwinder).next
      - runtime: use-after-free of allpSnapshot in findRunnable

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02812-1 advisory.

    Updated to go1.23.12 (released 2025-08-06) (bsc#1229122):
      - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go     (bsc#1246118)
      - CVE-2025-47906: Fixed incorrect expansion of '', '.' and '..' in some PATH configurations in LookPath     in osc/exec (bsc#1247719)
      - CVE-2025-47907: Fixed incorrect results returned from Rows.Scan in database/sql (bsc#1247720)

    Updated to version 1.23.12 cut from the go1.23-fips-release     branch at the revision tagged go1.23.12-1-openssl-fips (jsc#SLE-18320)
      - Fix HKDF-Extract The latest OpenSSL in c9s/c10s requires nil         salt to be passed as a hash length buffer of zeros.

    Other fixes:
      - runtime: use-after-free of allpSnapshot in findRunnable
      - runtime: segfaults in runtime.(*unwinder).next
      - cmd/go: TestScript/build_trimpath_cgo fails to decode dwarf on release-branch.go1.23
      - cmd/cgo/internal/testsanitizers: failures with signal: segmentation fault or exit status 66
      - runtime: bad frame pointer during panic during duffcopy
      - runtime: heap mspan limit is set too late, causing data race between span allocation and conservative     scanning
      - internal/trace: stress tests triggering suspected deadlock in tracer
      - runtime/pprof: crash 'cannot read stack of running goroutine' in goroutine profile
      - cmd/link: duplicated definition of symbol github.com/ebitengine/purego.syscall15XABI0 when running     with ASAN

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Golang running on the remote host is 1.23 prior to 1.23.12 or 1.24 prior to 1.24.6. It is, therefore, is affected by multiple vulnerabilities:

  - os/exec: LookPath may return unexpected paths (CVE-2025-47906)

  - database/sql: incorrect results returned from Rows.Scan (CVE-2025-47907)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02759-1 advisory.

    - Update to go1.23.12:
      * CVE-2025-47906: Fixed LookPath returning unexpected paths (bsc#1247719)
      * CVE-2025-47907: Fixed incorrect results returned from Rows.Scan (bsc#1247720)
      * go#74415 runtime: use-after-free of allpSnapshot in findRunnable
      * go#74693 runtime: segfaults in runtime.(*unwinder).next
      * go#74721 cmd/go: TestScript/build_trimpath_cgo fails to decode dwarf on release-branch.go1.23
      * go#74726 cmd/cgo/internal/testsanitizers: failures with signal: segmentation fault or exit status 66

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02760-1 advisory.

    - Update to go1.24.6:
      * CVE-2025-47906: Fixed LookPath returning unexpected paths (bsc#1247719)
      * CVE-2025-47907: Fixed incorrect results returned from Rows.Scan (bsc#1247720)
      * go#73800 runtime: RSS seems to have increased in Go 1.24 while the runtime accounting has not
      * go#74416 runtime: use-after-free of allpSnapshot in findRunnable
      * go#74694 runtime: segfaults in runtime.(*unwinder).next
      * go#74760 os/user:nolibgcc: TestGroupIdsTestUser failures

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
261346	Amazon Linux 2 : golang, --advisory ALAS2-2025-2984 (ALAS-2025-2984)	Nessus	Amazon Linux Local Security Checks	medium
253526	Linux Distros Unpatched Vulnerability : CVE-2025-47906	Nessus	Misc.	critical
253430	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.25 (SUSE-SU-2025:02924-1)	Nessus	SuSE Local Security Checks	high
252254	SUSE SLES15 Security Update : go1.24-openssl (SUSE-SU-2025:02837-1)	Nessus	SuSE Local Security Checks	high
250299	SUSE SLES15 Security Update : go1.23-openssl (SUSE-SU-2025:02812-1)	Nessus	SuSE Local Security Checks	high
250284	Golang 1.23 < 1.23.12 / 1.24 < 1.24.6 Multiple Vulnerabilities	Nessus	Misc.	high
249215	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.23 (SUSE-SU-2025:02759-1)	Nessus	SuSE Local Security Checks	high
249213	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.24 (SUSE-SU-2025:02760-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2025-47906

medium

Tenable Plugins

medium

critical

high

high

high

high

high

high