The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6094 advisory.

  - golang: cmd/go: misinterpretation of branch names can lead to incorrect access control (CVE-2022-23773)

  - golang: crypto/elliptic: IsOnCurve returns true for invalid field elements (CVE-2022-23806)

  - golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)

  - golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

RHEL 7 / 8 : OpenShift Container Platform 4.10.28 packages and (RHSA-2022:6094)

critical Nessus Plugin ID 164864

Version 1.5