The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:7479 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)

    * golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws     (CVE-2025-22868)

    * github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input (CVE-2025-29786)

    * golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e4d441a4dd advisory.

    Rebase to Incus 6.12 to fix a variety of issues

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7467 advisory.

    - Rebuild on new golang to fix CVE-2025-22871
    - fixes 'CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]'

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1014-1 advisory.

    - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239339).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7391 advisory.

    - fixes 'CVE-2025-22869 podman: Potential denial of service in golang.org/x/crypto [rhel-9.6]'

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-RU-2025:02093-1 advisory.

    - Added patch to remove using rw as a default mount option (bsc#1239776)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:3335 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect     (CVE-2024-45336)

    * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)

    * golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws     (CVE-2025-22868)

    * github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input (CVE-2025-29786)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0980-1 advisory.

    - CVE-2025-27144: Fixed Denial of Service in Go JOSE's Parsing (bsc#1237679).
    - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content     (bsc#1234794).
    - CVE-2024-45337: Fixed Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in     golang.org/x/crypto (bsc#1234595).
    - CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs (bsc#1238611).
    - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239341).
    - CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0775-1 advisory.

    - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237641)
    - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the     containers/storage library can cause Denial of Service (DoS) (bsc#1231698)
    - CVE-2024-9675: Fixed cache arbitrary directory mount in buildah (bsc#1231499)
    - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount     Instruction in buildah (bsc#1231208)
    - CVE-2024-9341: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library     (bsc#1231230)
    - CVE-2024-1753: Fixed full container escape at build time in buildah (bsc#1221677)
    - CVE-2024-11218: Fixed a container breakout by using --jobs=2 and a race condition when building a     malicious Containerfile. (bsc#1236270)
    - CVE-2024-6104: Fixed hashicorp/go-retryablehttp writing sensitive information to log files (bsc#1227052)
    - CVE-2023-45288: Fixed golang.org/x/net/http2 excessive resource consumption when receiving too many     headers (bsc#1236507)


    - Load ip_tables and ip6_tables kernel module (bsc#1214612)
      * Required for rootless mode as a regular user has no permission         to load kernel modules


    - Refactor network backend dependencies:
      * podman requires either netavark or cni-plugins. On ALP, require         netavark, otherwise prefer netavark but don't force it.
      * This fixes missing cni-plugins in some scenarios
      * Default to netavark everywhere where it's available

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
237843	RHEL 10 : opentelemetry-collector (RHSA-2025:7479)	Nessus	Red Hat Local Security Checks	6/5/2025	6/5/2025	high
240910	Fedora 42 : incus (2025-e4d441a4dd)	Nessus	Fedora Local Security Checks	6/28/2025	6/28/2025	high
241085	Oracle Linux 10 : skopeo (ELSA-2025-7467)	Nessus	Oracle Linux Local Security Checks	7/1/2025	7/1/2025	high
233346	SUSE SLES15 Security Update : buildah (SUSE-SU-2025:1014-1)	Nessus	SuSE Local Security Checks	3/26/2025	3/26/2025	high
237126	Oracle Linux 9 : podman (ELSA-2025-7391)	Nessus	Oracle Linux Local Security Checks	5/22/2025	7/1/2025	high
240550	SUSE SLES15 / openSUSE 15 : Recommended update for podman (SUSE-SU-SUSE-RU-2025:02093-1)	Nessus	SuSE Local Security Checks	6/25/2025	6/26/2025	high
233522	RHEL 9 : opentelemetry-collector (RHSA-2025:3335)	Nessus	Red Hat Local Security Checks	3/29/2025	6/5/2025	high
233207	SUSE SLES15 / openSUSE 15 Security Update : apptainer (SUSE-SU-2025:0980-1)	Nessus	SuSE Local Security Checks	3/22/2025	3/22/2025	high
225811	SUSE SLES15 Security Update : podman (SUSE-SU-2025:0775-1)	Nessus	SuSE Local Security Checks	3/5/2025	3/5/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high