The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a1d7a29fe5 advisory.

    Patch update to Kubernetes 1.25 for Fedora 37. Primarily a security fix for CVE-2023-2431: Bypass of     seccomp profile enforcement.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3341-1 advisory.

    - CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized.
    (bsc#1194400)
    - CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugin. (bsc#1211630)
    - CVE-2023-2728: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin.
    (bsc#1211631)
    - CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets.
    (bsc#1229869)
    - CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vulnerability. (bsc#1229869)
    - CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers.
    (bsc#1229869)
    - CVE-2024-0793: kube-controller-manager pod crash when processing malformed HPA v1 manifests.
    (bsc#1219964)
    - CVE-2024-3177: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin.
    (bsc#1222539)
    - CVE-2024-24786: github.com/golang/protobuf: infinite loop when unmarshaling invalid JSON. (bsc#1229867)

    Bug fixes:

    - Use -trimpath in non-DBG mode for reproducible builds. (bsc#1062303)
    - Fix multiple issues for successful `kubeadm init` run. (bsc#1214406)
    - Update go to version 1.22.5 in build requirements. (bsc#1229858)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2858-1 advisory.

    - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to     terminal (bsc#1194400)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02423-2 advisory.

    - CVE-2021-25743: Escape terminal special characters in kubectl output (bsc#1194400).
    - CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement (bsc#1212493).
    - CVE-2024-0793: Advance autoscaling v2 as the preferred API version (bsc#1219964).
    - CVE-2024-3177: Prevent bypassing mountable secrets policy imposed by the ServiceAccount admission plugin     (bsc#1222539).
    - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content     (bsc#1241865).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2859-1 advisory.

    - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to     terminal (bsc#1194400)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a     terminal. This includes but is not limited to the unstructured string fields in objects such as Events.
    (CVE-2021-25743)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2928-1 advisory.

    - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to     terminal (bsc#1194400)

    Other fixes:
    - Included kubernetes1.25-client package. (jsc#PED-5755)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the kubernetes package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3343-1 advisory.

    - CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized.
    (bsc#1194400)
    - CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugin. (bsc#1211630)
    - CVE-2023-2728: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin.
    (bsc#1211631)
    - CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets.
    (bsc#1229869)
    - CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vulnerability. (bsc#1229869)
    - CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers.
    (bsc#1229869)
    - CVE-2024-0793: kube-controller-manager pod crash when processing malformed HPA v1 manifests.
    (bsc#1219964)
    - CVE-2024-3177: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin.
    (bsc#1222539)
    - CVE-2024-24786: github.com/golang/protobuf: infinite loop when unmarshaling invalid JSON. (bsc#1229867)

    Bug fixes:

    - Use -trimpath in non-DBG mode for reproducible builds. (bsc#1062303)
    - Fix multiple issues for successful `kubeadm init` run. (bsc#1214406)
    - Update go to version 1.22.5 in build requirements. (bsc#1229858)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
177851	Fedora 37 : kubernetes (2023-a1d7a29fe5)	Nessus	Fedora Local Security Checks	7/1/2023	11/14/2024	medium
207488	SUSE SLES15 Security Update : kubernetes1.23 (SUSE-SU-2024:3341-1)	Nessus	SuSE Local Security Checks	9/20/2024	9/20/2024	critical
205277	SUSE SLES15 / openSUSE 15 Security Update : kubernetes1.23 (SUSE-SU-2024:2858-1)	Nessus	SuSE Local Security Checks	8/9/2024	8/9/2024	low
278691	SUSE SLES15 Security Update : kubernetes1.23 (SUSE-SU-2025:02423-2)	Nessus	SuSE Local Security Checks	12/15/2025	12/15/2025	medium
205265	SUSE SLES15 / openSUSE 15 Security Update : kubernetes1.24 (SUSE-SU-2024:2859-1)	Nessus	SuSE Local Security Checks	8/9/2024	8/9/2024	low
259824	Linux Distros Unpatched Vulnerability : CVE-2021-25743	Nessus	Misc.	8/30/2025	4/28/2026	low
205647	SUSE SLES15 / openSUSE 15 Security Update : kubernetes1.25 (SUSE-SU-2024:2928-1)	Nessus	SuSE Local Security Checks	8/16/2024	8/16/2024	low
203746	Photon OS 3.0: Kubernetes PHSA-2023-3.0-0631	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	critical
207490	SUSE SLES15 Security Update : kubernetes1.24 (SUSE-SU-2024:3343-1)	Nessus	SuSE Local Security Checks	9/20/2024	9/20/2024	critical

Detections

Analytics

Plugins Search

medium

critical

low

medium

low

low

low

critical

critical