There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of
    service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through
    1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an attacker can crash
    Cilium agents by sending a crafted DNS response to workloads from outside the cluster. For traffic that is
    allowed but without using DNS-based policy, the dataplane will continue to pass traffic as configured at
    the time of the DoS. For workloads that have DNS-based policy configured, existing connections may
    continue to operate, and new connections made without relying on DNS resolution may continue to be
    established, but new connections which rely on DNS resolution may be disrupted. Any configuration changes
    that affect the impacted agent may not be applied until the agent is able to restart. This issue is fixed
    in Cilium v1.14.18, v1.15.12, and v1.16.5. No known workarounds are available. (CVE-2025-23028)

リモートの SUSE Linux SLES15 / openSUSE 15 ホストには、SUSE-SU-2025:0297-1 のアドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

    - バージョン 0.0.20250128T150132 2025-01-28T15:01:32Z に更新してください。
      参照 jsc#PED-11136 Go CVE 番号付け権限 ID のエイリアスでの追加または更新:
      * GO-2025-3409 CVE-2025-23208 GHSA-c9p4-xwr9-rfhx
      * GO-2025-3410 CVE-2025-24337 GHSA-3qc3-mx6x-267h
      * GO-2025-3413 CVE-2025-0377 GHSA-wpfp-cm49-9m9q
      * GO-2025-3414 CVE-2024-11218 GHSA-5vpc-35f4-r8w6
      * GO-2025-3415 CVE-2025-23028 GHSA-9m5p-c77c-f9j7
      * GO-2025-3416 CVE-2025-23047 GHSA-h78m-j95m-5356
      * GO-2025-3418 CVE-2025-24030 GHSA-j777-63hf-hx76
      * GO-2025-3419 CVE-2025-24355 GHSA-v34r-vj4r-38j6
      * GO-2025-3422 CVE-2025-24354

    - バージョン 0.0.20250128T004730 2025-01-28T00:47:30Z に更新してください。
      参照 jsc#PED-11136 Go CVE 番号付け権限 ID のエイリアスでの追加または更新:
      * GO-2025-3372 CVE-2024-45339
      * GO-2025-3373 CVE-2024-45341
      * GO-2025-3383 CVE-2024-45340
      * GO-2025-3420 CVE-2024-45336
      * GO-2025-3421 CVE-2025-22865

    - バージョン 0.0.20250117T214834 2025-01-17T21:48:34Z に更新してください。
      参照 jsc#PED-11136 Go CVE 番号付け権限 ID のエイリアスでの追加または更新:
      * GO-2025-3392 CVE-2025-20086 GHSA-5m7j-6gc4-ff5g
      * GO-2025-3393 CVE-2025-21088 GHSA-8j3q-gc9x-7972
      * GO-2025-3394 CVE-2025-20088 GHSA-45v9-w9fh-33j6
      * GO-2025-3396 CVE-2024-52594
      * GO-2025-3397 CVE-2024-36402 GHSA-8vmr-h7h5-cqhg
      * GO-2025-3398 CVE-2024-52791 GHSA-gp86-q8hg-fpxj
      * GO-2025-3399 CVE-2024-52602 GHSA-r6jg-jfv6-2fjv
      * GO-2025-3400 CVE-2024-56515 GHSA-rcxc-wjgw-579r
      * GO-2025-3401 CVE-2024-36403 GHSA-vc2m-hw89-qjxf
      * GO-2025-3407 CVE-2025-20621 GHSA-w6xh-c82w-h997

    - バージョン 0.0.20250115T172141 2025-01-15T17:21:41Z に更新してください。
      参照 jsc#PED-11136 Go CVE 番号付け権限 ID のエイリアスでの追加または更新:
      * GO-2025-3381 CVE-2024-56138 GHSA-45v3-38pc-874v
      * GO-2025-3382 CVE-2024-51491 GHSA-qjh3-4j3h-vmwp
      * GO-2025-3384 CVE-2024-56323 GHSA-32q6-rr98-cjqv
      * GO-2025-3390 CVE-2024-53263 GHSA-q6r2-x2cc-vrp7
      * GO-2025-3391 CVE-2024-52281 GHSA-2v2w-8v8c-wcm9

    - バージョン 0.0.20250109T194159 2025-01-09T19:41:59Z に更新してください。
      参照 jsc#PED-11136 Go CVE 番号付け権限 ID のエイリアスでの追加または更新:
      * GO-2025-3376 CVE-2025-22149 GHSA-675f-rq2r-jw82
      * GO-2025-3377 CVE-2025-22449 GHSA-q8fg-cp3q-5jwm
      * GO-2025-3379 CVE-2025-20033 GHSA-2549-xh72-qrpm
      * GO-2025-3380 CVE-2025-22445 GHSA-7rgp-4j56-fm79

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0297-1 advisory.

    - Update to version 0.0.20250128T150132 2025-01-28T15:01:32Z.
      Refs jsc#PED-11136       Go CVE Numbering Authority IDs added or updated with aliases:
      * GO-2025-3409 CVE-2025-23208 GHSA-c9p4-xwr9-rfhx
      * GO-2025-3410 CVE-2025-24337 GHSA-3qc3-mx6x-267h
      * GO-2025-3413 CVE-2025-0377 GHSA-wpfp-cm49-9m9q
      * GO-2025-3414 CVE-2024-11218 GHSA-5vpc-35f4-r8w6
      * GO-2025-3415 CVE-2025-23028 GHSA-9m5p-c77c-f9j7
      * GO-2025-3416 CVE-2025-23047 GHSA-h78m-j95m-5356
      * GO-2025-3418 CVE-2025-24030 GHSA-j777-63hf-hx76
      * GO-2025-3419 CVE-2025-24355 GHSA-v34r-vj4r-38j6
      * GO-2025-3422 CVE-2025-24354

    - Update to version 0.0.20250128T004730 2025-01-28T00:47:30Z.
      Refs jsc#PED-11136       Go CVE Numbering Authority IDs added or updated with aliases:
      * GO-2025-3372 CVE-2024-45339
      * GO-2025-3373 CVE-2024-45341
      * GO-2025-3383 CVE-2024-45340
      * GO-2025-3420 CVE-2024-45336
      * GO-2025-3421 CVE-2025-22865

    - Update to version 0.0.20250117T214834 2025-01-17T21:48:34Z.
      Refs jsc#PED-11136       Go CVE Numbering Authority IDs added or updated with aliases:
      * GO-2025-3392 CVE-2025-20086 GHSA-5m7j-6gc4-ff5g
      * GO-2025-3393 CVE-2025-21088 GHSA-8j3q-gc9x-7972
      * GO-2025-3394 CVE-2025-20088 GHSA-45v9-w9fh-33j6
      * GO-2025-3396 CVE-2024-52594
      * GO-2025-3397 CVE-2024-36402 GHSA-8vmr-h7h5-cqhg
      * GO-2025-3398 CVE-2024-52791 GHSA-gp86-q8hg-fpxj
      * GO-2025-3399 CVE-2024-52602 GHSA-r6jg-jfv6-2fjv
      * GO-2025-3400 CVE-2024-56515 GHSA-rcxc-wjgw-579r
      * GO-2025-3401 CVE-2024-36403 GHSA-vc2m-hw89-qjxf
      * GO-2025-3407 CVE-2025-20621 GHSA-w6xh-c82w-h997

    - Update to version 0.0.20250115T172141 2025-01-15T17:21:41Z.
      Refs jsc#PED-11136       Go CVE Numbering Authority IDs added or updated with aliases:
      * GO-2025-3381 CVE-2024-56138 GHSA-45v3-38pc-874v
      * GO-2025-3382 CVE-2024-51491 GHSA-qjh3-4j3h-vmwp
      * GO-2025-3384 CVE-2024-56323 GHSA-32q6-rr98-cjqv
      * GO-2025-3390 CVE-2024-53263 GHSA-q6r2-x2cc-vrp7
      * GO-2025-3391 CVE-2024-52281 GHSA-2v2w-8v8c-wcm9

    - Update to version 0.0.20250109T194159 2025-01-09T19:41:59Z.
      Refs jsc#PED-11136       Go CVE Numbering Authority IDs added or updated with aliases:
      * GO-2025-3376 CVE-2025-22149 GHSA-675f-rq2r-jw82
      * GO-2025-3377 CVE-2025-22449 GHSA-q8fg-cp3q-5jwm
      * GO-2025-3379 CVE-2025-20033 GHSA-2549-xh72-qrpm
      * GO-2025-3380 CVE-2025-22445 GHSA-7rgp-4j56-fm79

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
414276	SCA: security update for github.com/cilium/cilium (GHSA-9m5p-c77c-f9j7)	Tenable Cloud Security	SCA Checks	1/23/2025	7/2/2026	medium
414276	SCA: security update for github.com/cilium/cilium (GHSA-9m5p-c77c-f9j7)	Tenable Self-Hosted Container Security	SCA Checks	1/23/2025	7/2/2026	medium
214906	SUSE SLES15/openSUSE 15 セキュリティ更新: govulncheck-vulndb (SUSE-SU-2025:0297-1)	Nessus	SuSE Local Security Checks	2/3/2025	1/1/2026	high
214906	SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:0297-1)	Nessus	SuSE Local Security Checks	2/3/2025	1/1/2026	high

Detections

Analytics

Plugins Search

medium

medium

high

high