The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3307-1 advisory.

    - Update to v20.10.25-ce
    - CVE-2023-28840: Fixed a bug where an attacker could inject arbitrary Ethernet frames to execute a Denial     of Service attack. (bsc#1214107)
    - CVE-2023-28841: Fixed a bug which allows an attacker to sit in a trusted position on the network and     read all of the application traffic that is moving across the overlay network, resulting in unexpected     secrets or user data disclosure (bsc#1214108)
    - CVE-2023-28842: Fixed a bug which allows an attacker to inject arbitrary Ethernet frames into the     encrypted overlay network by encapsulating them in VXLAN datagrams. (bsc#1214109)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES12 Security Update : docker (SUSE-SU-2023:3307-1)

high Nessus Plugin ID 179830

Version 1.1

Version 1.0

Version 1.1 Jun 26, 2026, 4:08 PM Plugin metadata Plugin Feed: 202606261608
Version 1.0 Aug 15, 2023, 7:57 AM New Plugin Feed: 202308150757