The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The ParseAddressList function incorrectly handles comments (text within parentheses) within display names.
    Since this is a misalignment with conforming address parsers, it can result in different trust decisions     being made by programs using different parsers. (CVE-2024-24784)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive     number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and     CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no memory is     allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an     HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to     be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the     receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header     frames we will process before closing a connection.(CVE-2023-45288)

    The ParseAddressList function incorrectly handles comments (text within parentheses) within display names.
    Since this is a misalignment with conforming address parsers, it can result in different trust decisions     being made by programs using different parsers.(CVE-2024-24784)

Tenable has extracted the preceding description block directly from the EulerOS golang security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7759:01 advisory.

    golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)         golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)         golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect     (CVE-2023-45289)         golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm     (CVE-2024-24783)         golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)         golang: html/template: errors returned from MarshalJSON methods may break template escaping     (CVE-2024-24785)         golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS (CVE-2023-45288)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
228239	Linux Distros Unpatched Vulnerability : CVE-2024-24784	Nessus	Misc.	3/5/2025	9/10/2025	high
202431	EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-1909)	Nessus	Huawei Local Security Checks	7/15/2024	8/6/2024	high
202441	EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-1885)	Nessus	Huawei Local Security Checks	7/15/2024	8/6/2024	high
293152	MiracleLinux 9 : delve-1.21.2-2.el9, golang-1.21.9-2.el9 (AXSA:2024-7759:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
210583	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.22-openssl (SUSE-SU-2024:3938-1)	Nessus	SuSE Local Security Checks	11/8/2024	11/8/2024	critical

Detections

Analytics

Plugins Search

high

high

high

high

critical