gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory exhaustion vulnerability. Version 1.4.1 contains a patch for the issue.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5258 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

    * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

    * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)

    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5194 advisory.

    The container-tools module contains tools for working with containers, notably podman, buildah, skopeo,     and runc.

    Security Fix(es):

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:6194 advisory.

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-6194 advisory.

    [4.9.4-10.0.1]
    - Fixes issue of podman execvp error while using podmansh [Orabug: 36073625]
    - Improved saving remote build context to tarfile in Podman daemon [Orabug: 36495655]
    - Add devices on container startup, not on creation
    - Backport fast gzip for compression [Orabug: 36420418]
    - overlay: Put should ignore ENINVAL for Unmount [Orabug: 36234694]
    - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404]

    [4:4.9.4-10]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/6b45bb1)
    - Resolves: RHEL-53250

    [4:4.9.4-9]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/1a2d8e3)
    - Resolves: RHEL-50507

    [4:4.9.4-8]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/affa589)
    - Resolves: RHEL-45916

    [4:4.9.4-7]
    - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel       (https://github.com/containers/podman/commit/8fa0c76)
    - Resolves: RHEL-40804

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6194 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5258 advisory.

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

    * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)

    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)

    * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)

    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)

    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5634 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)

    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5202 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.12.63. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:5200

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)
    * golang: net/http: memory exhaustion in Request.ParseMultipartForm     (CVE-2023-45290)
    * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped     IPv6 addresses (CVE-2024-24790)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.12/updating/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:5258 advisory.

    * golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (CVE-2024-1394)
    * golang: net/http: memory exhaustion in Request.ParseMultipartForm (CVE-2023-45290)
    * golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm (CVE-2024-24783)
    * golang: net/mail: comments in display names are incorrectly handled (CVE-2024-24784)
    * containers/image: digest type does not guarantee valid type (CVE-2024-3727)
    * golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
    * go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5258 advisory.

    aardvark-dns     buildah     [2:1.33.8-4]
    - rebuild for  golang fixes
    - Related: RHEL-28452

    cockpit-podman     [84.1-1]
    - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
    - Related: Jira:RHEL-25557

    conmon     [3:2.1.10-1]
    - update to https://github.com/containers/conmon/releases/tag/v2.1.10
    - Related: Jira:RHEL-2110

    containernetworking-plugins     [1:1.4.0-5]
    - rebuild for  golang fixes
    - Related: RHEL-28452

    containers-common     [1-82.0.1]
    - Updated removed references [Orabug: 33473101] (Alex Burmashev)
    - Adjust registries.conf (Nikita Gerasimov)
    - remove references to RedHat registry (Nikita Gerasimov)

    container-selinux     [2:2.229.0-2]
    - remove watch statements properly for RHEL8 and lower
    - Related: Jira:RHEL-2110

    criu     crun     [1.14.3-2]
    - remove BR libgcrypt-devel, no longer needed
    - Related: Jira:RHEL-2110

    fuse-overlayfs     [1.13-1]
    - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.13
    - Related: Jira:RHEL-2110

    libslirp     netavark     oci-seccomp-bpf-hook     [1.2.10-1]
    - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
    - Related: Jira:RHEL-2110

    podman     [4.9.4-12.0.2]
    - Fixes issue of podman execvp error while using podmansh [Orabug: 36756665]

    python-podman     [4.9.0-2]
    - depend directly on urllib3
    - Resolves: RHEL-43567

    runc     [1:1.1.12-4]
    - rebuild for  golang fixes
    - Related: RHEL-28452

    skopeo     [2:1.14.5-3]
    - rebuild for  golang fixes
    - Related: RHEL-28452

    slirp4netns     [1.2.3-1]
    - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
    - Related: Jira:RHEL-2110

    udica

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4963 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.14.34. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:4960

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)
    * go-retryablehttp: url might write sensitive information to log file     (CVE-2024-6104)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.14/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4858 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.16.5. See the following     advisory for the container images for this release:

    https://access.redhat.com/errata/RHBA-2024:4855

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)
    * go-retryablehttp: url might write sensitive information to log file     (CVE-2024-6104)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4848 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.
    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s)     listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4702 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.15.23. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:4699

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice     deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4825 advisory.

    The podman tool manages pods, container images, and containers. It is part of the libpod library, which is     for applications that use container pods. Container pods is a concept in Kubernetes.

    Security Fix(es):

    * gorilla/schema: Potential memory exhaustion attack due to sparse slice deserialization (CVE-2024-37298)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of telegraf / libcontainers-common installed on the remote CBL Mariner 2.0 host is prior to tested version.
It is, therefore, affected by a vulnerability as referenced in the CVE-2024-37298 advisory.

  - gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running     `schema.Decoder.Decode()` on a struct that has a field of type `[]struct{...}` opens it up to malicious     attacks regarding memory allocations, taking advantage of the sparse slice functionality. Any use of     `schema.Decoder.Decode()` on a struct with arrays of other structs could be vulnerable to this memory     exhaustion vulnerability. Version 1.4.1 contains a patch for the issue. (CVE-2024-37298)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
210509	RHEL 8 : container-tools:rhel8 (RHSA-2024:5258)	Nessus	Red Hat Local Security Checks	medium
210478	RHEL 8 : container-tools:rhel8 (RHSA-2024:5194)	Nessus	Red Hat Local Security Checks	medium
206609	AlmaLinux 9 : podman (ALSA-2024:6194)	Nessus	Alma Linux Local Security Checks	medium
206506	Oracle Linux 9 : podman (ELSA-2024-6194)	Nessus	Oracle Linux Local Security Checks	medium
206496	RHEL 9 : podman (RHSA-2024:6194)	Nessus	Red Hat Local Security Checks	medium
206049	Rocky Linux 8 : container-tools:rhel8 (RLSA-2024:5258)	Nessus	Rocky Linux Local Security Checks	medium
205884	RHEL 9 : podman (RHSA-2024:5634)	Nessus	Red Hat Local Security Checks	medium
205761	RHEL 8 / 9 : OpenShift Container Platform 4.12.63 (RHSA-2024:5202)	Nessus	Red Hat Local Security Checks	critical
205545	AlmaLinux 8 : container-tools:rhel8 (ALSA-2024:5258)	Nessus	Alma Linux Local Security Checks	medium
205538	Oracle Linux 8 : container-tools:ol8 (ELSA-2024-5258)	Nessus	Oracle Linux Local Security Checks	medium
205153	RHEL 8 / 9 : OpenShift Container Platform 4.14.34 (RHSA-2024:4963)	Nessus	Red Hat Local Security Checks	medium
204927	RHEL 8 / 9 : OpenShift Container Platform 4.16.5 (RHSA-2024:4858)	Nessus	Red Hat Local Security Checks	medium
204926	RHEL 8 / 9 : OpenShift Container Platform 4.13.46 (RHSA-2024:4848)	Nessus	Red Hat Local Security Checks	high
204743	RHEL 8 / 9 : OpenShift Container Platform 4.15.23 (RHSA-2024:4702)	Nessus	Red Hat Local Security Checks	high
204597	RHEL 9 : podman (RHSA-2024:4825)	Nessus	Red Hat Local Security Checks	high
202740	CBL Mariner 2.0 Security Update: telegraf / libcontainers-common (CVE-2024-37298)	Nessus	MarinerOS Local Security Checks	high

Detections

Analytics

CVE-2024-37298

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

high

high

high

high