The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-46c95e2c57 advisory.

    Automatic update for golang-helm-3-3.11.1-1.fc39.

    ##### **Changelog**

    ```
    * Tue Feb 21 2023 Davide Cavalca <dcavalca@fedoraproject.org> - 3.11.1-1
    - Update to 3.11.1; Fixes: RHBZ#1977738, RHBZ#2045644, RHBZ#2138841,       RHBZ#2142198, RHBZ#2142210, RHBZ#2097975, RHBZ#2155938, RHBZ#2155939,       RHBZ#2163231, RHBZ#1971091, RHBZ#1971029
    * Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.4-8
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
    * Wed Aug 10 2022 Maxwell G <gotmax@e.email> - 3.5.4-7
    - Rebuild to fix FTBFS
    * Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.4-6
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
    * Tue Jul 19 2022 Maxwell G <gotmax@e.email> - 3.5.4-5
    - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in       golang
    * Sat Jul  9 2022 Maxwell G <gotmax@e.email> - 3.5.4-4
    - Rebuild for CVE-2022-{24675,28327,29526 in golang}
    * Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 3.5.4-3
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9177748962 advisory.

    Automatic update for golang-github-rogpeppe-internal-1.11.0-1.fc40.

    ##### **Changelog**

    ```
    * Wed Dec 13 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.11.0-1
    - Update to 1.11.0 - Closes rhbz#2120431 rhbz#2163214 rhbz#2248334

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-65413f7fd0 advisory.

    Automatic update for dnsx-1.1.5-1.fc40.

    ##### **Changelog**

    ```
    * Fri Oct 27 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.1.5-1
    - Update to 1.1.5 - Closes rhbz#2169567 rhbz#2178430 rhbz#2163084

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-791e2dc6cb advisory.

    Automatic update for golang-github-colinmarc-hdfs-2-2.4.0-1.fc40.

    ##### **Changelog**

    ```
    * Thu Oct 12 2023 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.4.0-1
    - Update to 2.4.0 - Closes rhbz#2051033 rhbz#2163111

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-b29031a7aa advisory.

    Automatic update for chisel-1.9.0-1.fc40.

    ##### **Changelog**

    ```
    * Sun Aug 20 2023 Filipe Rosset <rosset.filipe@gmail.com> - 1.9.0-1
    - Update to 1.9.0 fixes rhbz#2113146 rhbz#2163065 rhbz#2165257
    * Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.7-7
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
    * Wed Jan 18 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.7-6
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
    * Wed Jul 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.7-5
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
    * Tue Jul 19 2022 Maxwell G <gotmax@e.email> - 1.7.7-4
    - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in       golang
    * Fri Jun 17 2022 Robert-Andr Mauchin <zebob.m@gmail.com> - 1.7.7-3
    - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,       CVE-2022-29526, CVE-2022-30629

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2758 advisory.

    * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

    * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

    * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

    * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

    * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

    * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

    * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

    * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

    * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

    * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

    * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

    * podman: symlink exchange attack in podman export volume (CVE-2023-0778)

    * golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

    * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short,     potentially allowing a denial of service (CVE-2022-32189)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2802 advisory.

    * golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

    * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

    * golang: net/http: handle server errors after sending GOAWAY (CVE-2022-27664)

    * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

    * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

    * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

    * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

    * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

    * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

    * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

    * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE-2022-41717)

    * podman: symlink exchange attack in podman export volume (CVE-2023-0778)

    * podman: possible information disclosure and modification (CVE-2022-2989)

    * golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short,     potentially allowing a denial of service (CVE-2022-32189)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
194633	Fedora 39 : golang-helm-3 (2023-46c95e2c57)	Nessus	Fedora Local Security Checks	4/29/2024	11/14/2024	critical
194653	Fedora 40 : golang-github-rogpeppe-internal (2023-9177748962)	Nessus	Fedora Local Security Checks	4/29/2024	11/14/2024	high
194656	Fedora 40 : dnsx (2023-65413f7fd0)	Nessus	Fedora Local Security Checks	4/29/2024	11/14/2024	high
194658	Fedora 40 : golang-github-colinmarc-hdfs-2 (2023-791e2dc6cb)	Nessus	Fedora Local Security Checks	4/29/2024	11/14/2024	medium
194641	Fedora 40 : chisel (2023-b29031a7aa)	Nessus	Fedora Local Security Checks	4/29/2024	11/14/2024	critical
277163	RockyLinux 8 : container-tools:rhel8 (RLSA-2023:2758)	Nessus	Rocky Linux Local Security Checks	12/3/2025	12/3/2025	medium
277186	RockyLinux 8 : container-tools:4.0 (RLSA-2023:2802)	Nessus	Rocky Linux Local Security Checks	12/3/2025	12/3/2025	high

Detections

Analytics

Plugins Search

critical

high

high

medium

critical

medium

high