The version of runc installed on the remote host is prior to 1.1.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-055 advisory.

    Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12     and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly     fails to reject the header as invalid. (CVE-2022-1705)

    Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an     attacker to cause a panic due to stack exhaustion via deeply nested types or declarations. (CVE-2022-1962)

    A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a     large PEM input (more than 5 MB) ), causing a stack overflow in Decode, which leads to a loss of     availability. (CVE-2022-24675)

    A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to     fail authentification with RSA keys to servers that reject signature algorithms based on SHA-2, enabling     an attacker to crash the server, resulting in a loss of availability. (CVE-2022-27191)

    A flaw was found in golang encoding/xml. When calling Decoder.Skip while parsing a deeply nested XML     document, a panic can occur due to stack exhaustion and allows an attacker to impact system availability.
    (CVE-2022-28131)

    An integer overflow flaw was found in Golang's crypto/elliptic library. This flaw allows an attacker to     use a crafted scaler input longer than 32 bytes, causing P256().ScalarMult or P256().ScalarBaseMult to     panic, leading to a loss of availability. (CVE-2022-28327)

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug     was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty     inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with     inheritable file capabilities to elevate those capabilities to the permitted set during execve(2). This     bug did not affect the container security sandbox as the inheritable set never contained more capabilities     than were included in the container's bounding set. This bug has been fixed in runc 1.1.2. This fix     changes `runc exec --cap` behavior such that the additional capabilities granted to the process being     executed (as specified via `--cap` arguments) do not include inheritable capabilities. In addition, `runc     spec` is changed to not set any inheritable capabilities in the created example OCI spec (`config.json`)     file. (CVE-2022-29162)

    Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero     flags parameter, the Faccessat function could incorrectly report that a file is accessible.
    (CVE-2022-29526)

    Non-random values for ticket_age_add in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3     allow an attacker that can observe TLS handshakes to correlate successive connections by comparing ticket     ages during session resumption. (CVE-2022-30629)

    A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large     number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to     impact availability. (CVE-2022-30630)

    A flaw was found in golang. Calling the Reader.Read method on an archive that contains a large number of     concatenated 0-length compressed files can cause a panic issue due to stack exhaustion. (CVE-2022-30631)

    A flaw was found in golang. Calling Glob on a path that contains a large number of path separators can     cause a panic issue due to stack exhaustion. This can cause an attacker to impact availability.
    (CVE-2022-30632)

    Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to     cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a     nested field that uses the any field tag. (CVE-2022-30633)

    A flaw was found in golang. When calling Decoder.Decode on a message that contains deeply nested     structures, a panic can occur due to stack exhaustion and allows an attacker to impact system     availability. (CVE-2022-30635)

    Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by     calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the     X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For     header. (CVE-2022-32148)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5337 advisory.

    Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.

    Security Fix(es):

    * golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)

    * golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)

    * golang: syscall: faccessat checks wrong group (CVE-2022-29526)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * Update to Go 1.17.10 (BZ#2091077)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:5337 advisory.

  - golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)

  - golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)

  - golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)

  - golang: syscall: faccessat checks wrong group (CVE-2022-29526)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5799 advisory.

  - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero     flags parameter, the Faccessat function could incorrectly report that a file is accessible.
    (CVE-2022-29526)

  - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12     and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly     fails to reject the header as invalid. (CVE-2022-1705)

  - Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an     attacker to cause a panic due to stack exhaustion via deeply nested types or declarations. (CVE-2022-1962)

  - encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount     of PEM data. (CVE-2022-24675)

  - regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested     expression. (CVE-2022-24921)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2023-0613 advisory.

  - A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as     @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states we are in     the process of marking this report as invalid; however, some third parties takes the position that A     prototype injection/Prototype pollution is not just when global objects are polluted with recursive merge     or deep cloning but also when a target object is polluted. (CVE-2022-37616)

  - When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by     finalizing the operation with a rename from a temporary name to the final target file name.In that rename     operation, it might accidentally *widen* the permissions for the target file, leaving the updated file     accessible to more users than intended. (CVE-2022-32207)

  - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the     XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to     access an array at a negative 2GB offset, typically leading to a segmentation fault. (CVE-2022-40303)

  - An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a     hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be     provoked. (CVE-2022-40304)

  - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.
    X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME     incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently     interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL     checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may     allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or     enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate     chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these     inputs, the other input must already contain an X.400 address as a CRL distribution point, which is     uncommon. As such, this vulnerability is most likely to only affect applications which have implemented     their own functionality for retrieving CRLs over a network. (CVE-2023-0286)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the kubernetes package has been released.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-74c4c65ff6 advisory.

    Automatic update for google-guest-agent-20240314.00-4.fc41.

    ##### **Changelog**

    ```
    * Wed Apr 10 2024 Major Hayden <major@redhat.com> - 20240314.00-4
    - Skip events test
    * Wed Apr 10 2024 Major Hayden <major@redhat.com> - 20240314.00-3
    - Fix typo in License filename
    * Wed Apr 10 2024 Major Hayden <major@redhat.com> - 20240314.00-2
    - Sync packit config with other GCP pkgs
    * Wed Apr 10 2024 Major Hayden <major@redhat.com> - 20240314.00-1
    - Update to 20240314.00 rhbz#2274184
    * Wed Apr 10 2024 Fedora Release Engineering <releng@fedoraproject.org> - 20230726.00-8
    - Unretirement Releng Request: https://pagure.io/releng/issue/12057
    * Sun Feb 11 2024 Maxwell G <maxwell@gtmx.me> - 20230726.00-7
    - Rebuild for golang 1.22.0
    * Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 20230726.00-6
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
    * Sat Jan 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 20230726.00-5
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
    * Wed Sep  6 2023 Major Hayden <major@redhat.com> - 20230726.00-4
    - PRs to rawhide only
    * Fri Jul 28 2023 Major Hayden <major@redhat.com> - 20230726.00-3
    - Fix typo on ppc64le
    * Fri Jul 28 2023 Major Hayden <major@redhat.com> - 20230726.00-2
    - Disable ppc64/s390x arches
    * Fri Jul 28 2023 Packit <hello@packit.dev> - 20230726.00-1
    - [packit] 20230726.00 upstream release
    * Tue Jul 25 2023 Major Hayden <major@redhat.com> - 20230725.00-2
    - Disable koji auto build with packit
    * Tue Jul 25 2023 Packit <hello@packit.dev> - 20230725.00-1
    - [packit] 20230725.00 upstream release
    * Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 20230711.00-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
    * Wed Jul 12 2023 Major Hayden <major@redhat.com> - 20230711.00-1
    - Update to 20230711.00 rhbz#2222161
    * Wed Jul 12 2023 Major Hayden <major@redhat.com> - 20230707.00-2
    - Add packit config 
    * Tue Jul 11 2023 Major Hayden <major@redhat.com> - 20230707.00-1
    - Update to 20230707.00 rhbz#2221432
    * Mon Jul  3 2023 Major Hayden <major@redhat.com> - 20230628.00-1
    - Update to 20230628.00 rhbz#2218708
    * Wed Jun 28 2023 Major Hayden <major@redhat.com> - 20230626.00-1
    - Update to 20230626.00 rhbz#2218220
    * Mon Jun 12 2023 Major Hayden <major@redhat.com> - 20230601.00-1
    - Update to 20230601.00 rhbz#2211674
    * Thu May 18 2023 Major Hayden <major@redhat.com> - 20230517.00-1
    - Update to 20230517.00 rhbz#2208103
    * Mon May 15 2023 Major Hayden <major@redhat.com> - 20230510.00-1
    - Update to 20230510.00 rhbz#2198979
    * Mon May  1 2023 Major Hayden <major@redhat.com> - 20230426.00-1
    - Update to 20230426.00 rhbz#2190065
    * Thu Apr  6 2023 Major Hayden <major@redhat.com> - 20230403.00-1
    - Update to 20230403.00 rhbz#2183053
    * Tue Mar 28 2023 Major Hayden <major@redhat.com> - 20230221.00-2
    - Bump revision for rebuild rhbz#2178465
    * Tue Feb 28 2023 Major Hayden <major@redhat.com> - 20230221.00-1
    - Update to 20230221.00 rhbz#2172749
    * Wed Feb 22 2023 Major Hayden <major@redhat.com> - 20230207.00-2
    - Set SPDX license
    * Mon Feb 13 2023 Major Hayden <major@redhat.com> - 20230207.00-1
    - Update to 20230207.00 rhbz#2160637
    * Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 20221109.00-2
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
    * Mon Nov 14 2022 Major Hayden <major@redhat.com> - 20221109.00-1
    - Update to 20221109.00 rhbz#2140412
    * Wed Oct 26 2022 Major Hayden <major@redhat.com> - 20221025.00-1
    - Update to 20221025.00 rhbz#2136314
    * Wed Oct 12 2022 Major Hayden <major@redhat.com> - 20220927.00-1
    - Update to 20220927.00 rhbz#2130931
    * Thu Aug 25 2022 Major Hayden <major@redhat.com> - 20220824.00-1
    - Update to 20220824.00 rhbz#2120895
    * Thu Aug 18 2022 Major Hayden <major@redhat.com> - 20220816.01-1
    - Update to 20220816.01 rhbz#2119456
    * Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 20201217.02-6
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
    * Tue Jul 19 2022 Maxwell G <gotmax@e.email> - 20201217.02-5
    - Rebuild for       CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang
    * Sat Jun 18 2022 Robert-Andr Mauchin <zebob.m@gmail.com> - 20201217.02-4
    - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,       CVE-2022-27191, CVE-2022-29526, CVE-2022-30629

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
234976	Amazon Linux 2 : runc (ALASNITRO-ENCLAVES-2025-055)	Nessus	Amazon Linux Local Security Checks	4/29/2025	5/5/2025	high
162634	RHEL 8 : go-toolset:rhel8 (RHSA-2022:5337)	Nessus	Red Hat Local Security Checks	7/1/2022	3/6/2025	medium
162991	CentOS 8 : go-toolset:rhel8 (CESA-2022:5337)	Nessus	CentOS Local Security Checks	7/11/2022	10/18/2023	medium
171016	Rocky Linux 9 : go-toolset and golang (RLSA-2022:5799)	Nessus	Rocky Linux Local Security Checks	2/6/2023	11/7/2023	medium
194919	Splunk Enterprise < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0613)	Nessus	CGI abuses	5/2/2024	7/26/2024	critical
204385	Photon OS 4.0: Kubernetes PHSA-2023-4.0-0419	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	critical
211005	Fedora 41 : google-guest-agent (2024-74c4c65ff6)	Nessus	Fedora Local Security Checks	11/14/2024	11/14/2024	critical

Detections

Analytics

Plugins Search

high

medium

medium

medium

critical

critical

critical