リモート Redhat Enterprise Linux 9 ホストに、RHSA-2024:4825 アドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

    podman ツールは、ポッド、コンテナイメージ、コンテナを管理します。これは、コンテナポッドを使用するアプリケーション向けの libpod ライブラリの一部です。コンテナポッドは Kubernetes の構成概念です。

    セキュリティ修正プログラム:

    * gorilla/schema: スパーススライス逆シリアル化による潜在的なメモリ枯渇攻撃 (CVE-2024-37298)

    影響、CVSS スコア、謝辞、その他の関連情報を含むセキュリティ問題の詳細については、「参照」セクションに記載されている CVE のページを参照してください。

Tenable は、前述の記述ブロックを Red Hat Enterprise Linux セキュリティアドバイザリから直接抽出しています。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

远程 Redhat Enterprise Linux 9 主机上安装的多个程序包受到 RHSA-2024:4825 公告中提及的一个漏洞影响。

    Podman 工具管理 pod、容器图像和容器。它是 libpod 库的一部分，用于使用容器 pod 的应用程序。容器 pod 是 Kubernetes 中的概念。

    安全修复：

    * gorilla/schema：由于稀疏切片反序列化导致的潜在内存耗尽攻击 (CVE-2024-37298)

    有关上述安全问题的更多详细信息，包括其影响、CVSS 得分、致谢，以及其他相关信息，请参阅列于“参考”部分的 CVE 页面。

Tenable 已直接从 Red Hat Enterprise Linux 安全公告中提取上述描述块。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

遠端 Redhat Enterprise Linux 9 主機上安裝的多個套件受到 RHSA-2024:4825 公告中提及的一個弱點影響。

    podman 工具可管理 pod、容器映像和容器。其為 libpod 程式庫的一部分，專門供使用容器 pod 的應用程式使用。容器 pod 是 Kubernetes 中的一個概念。

    安全性修正：

    * gorilla/schema：因疏鬆 slice 還原序列化而可能發動的記憶體耗盡攻擊 (CVE-2024-37298)

    如需安全性問題的詳細資料，包括影響、CVSS 分數、致謝及其他相關資訊，請參閱〈參照〉一節列出的 CVE 頁面。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37298 advisory.

  - gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running     `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious     attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of     `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory     exhaustion vulnerability. Version 1.4.1 contains a patch for the issue. (CVE-2024-37298)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4825 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4702 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.15.23. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:4699

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
204597	RHEL 9 : podman (RHSA-2024:4825)	Nessus	Red Hat Local Security Checks	2024/7/24	2024/7/24	high
204597	RHEL 9：podman (RHSA-2024:4825)	Nessus	Red Hat Local Security Checks	2024/7/24	2024/7/24	high
204597	RHEL 9：podman (RHSA-2024:4825)	Nessus	Red Hat Local Security Checks	2024/7/24	2024/7/24	high
202740	CBL Mariner 2.0 Security Update: telegraf (CVE-2024-37298)	Nessus	MarinerOS Local Security Checks	2024/7/20	2024/7/20	high
204597	RHEL 9 : podman (RHSA-2024:4825)	Nessus	Red Hat Local Security Checks	2024/7/24	2024/7/24	high
204743	RHEL 8 / 9 : OpenShift Container Platform 4.15.23 (RHSA-2024:4702)	Nessus	Red Hat Local Security Checks	2024/7/25	2024/7/25	high

偵測

搜尋 Plugin

high

high

high

high

high

high