There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever
    read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated
    user to connect, even if credentials were set. Anyone running the Chisel server that is using the `AUTH`
    environment variable to specify credentials to authenticate against is affected by this vulnerability.
    Chisel is often used to provide an entrypoint to a private network, which means services that are gated by
    Chisel may be affected. Additionally, Chisel is often used for exposing services to the internet. An
    attacker could MITM requests by connecting to a Chisel server and requesting to forward traffic from a
    remote port. This issue has been addressed in release version 1.10.0. All users are advised to upgrade.
    There are no known workarounds for this vulnerability. (CVE-2024-43798)

リモートの Fedora 40 ホストには、FEDORA-2024-5aad2fda6a のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    新しい Upstream バージョンに更新してください (rhbz#2303131 をクローズ)

Tenable は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの Fedora 39 ホストには、FEDORA-2024-9b005962f9 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    新しい Upstream バージョンに更新してください (rhbz#2303131 をクローズ)

Tenable は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6b9aeecbe8 advisory.

    Update to new upstream version (closes rhbz#2303131)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9b005962f9 advisory.

    Update to new upstream version (closes rhbz#2303131)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5aad2fda6a advisory.

    Update to new upstream version (closes rhbz#2303131)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
409405	SCA: security update for github.com/jpillora/chisel (GHSA-38jh-8h67-m7mj)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high
409405	SCA: security update for github.com/jpillora/chisel (GHSA-38jh-8h67-m7mj)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high
207779	Fedora 40 : chisel (2024-5aad2fda6a)	Nessus	Fedora Local Security Checks	2024/9/26	2024/9/26	high
207778	Fedora 39 : chisel (2024-9b005962f9)	Nessus	Fedora Local Security Checks	2024/9/26	2024/9/26	high
211123	Fedora 41 : chisel (2024-6b9aeecbe8)	Nessus	Fedora Local Security Checks	2024/11/14	2024/11/14	high
207778	Fedora 39 : chisel (2024-9b005962f9)	Nessus	Fedora Local Security Checks	2024/9/26	2024/9/26	high
207779	Fedora 40 : chisel (2024-5aad2fda6a)	Nessus	Fedora Local Security Checks	2024/9/26	2024/9/26	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high