An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-053 advisory.

    An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during     parsing. (CVE-2025-22868)

    SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from     clients which complete the key exchange slowly, or not at all, causing pending content to be read into     memory, but never transmitted. (CVE-2025-22869)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of docker installed on the remote host is prior to 25.0.8-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2025-056 advisory.

    An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during     parsing. (CVE-2025-22868)

    SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from     clients which complete the key exchange slowly, or not at all, causing pending content to be read into     memory, but never transmitted. (CVE-2025-22869)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-934 advisory.

    An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during     parsing. (CVE-2025-22868)

    SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from     clients which complete the key exchange slowly, or not at all, causing pending content to be read into     memory, but never transmitted. (CVE-2025-22869)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:3593 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect     (CVE-2024-45336)

    * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)

    * golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws     (CVE-2025-22868)

    * github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input (CVE-2025-29786)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1102-1 advisory.

    - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2     (bsc#1239185).
    - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).
    - CVE-2024-29018: Fixed external DNS requests from 'internal' networks leading to data exfiltration     (bsc#1234089).
    - CVE-2024-23650: Fixed BuildKit daemon crash via malicious BuildKit client or frontend request     (bsc#1219437).

    Other fixes:
    - Make container-selinux requirement conditional on selinux-policy (bsc#1237367).
    - Updated docker-buildx to 0.19.3.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1062-1 advisory.

    - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2     (bsc#1239185).
    - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239322).

    Other fixes:
    - Make container-selinux requirement conditional on selinux-policy (bsc#1237367)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:3335 advisory.

    Collector with the supported components for a Red Hat build of OpenTelemetry

    Security Fix(es):

    * golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect     (CVE-2024-45336)

    * go-jose: Go JOSE's Parsing Vulnerable to Denial of Service (CVE-2025-27144)

    * golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2/jws     (CVE-2025-22868)

    * github.com/expr-lang/expr: Memory Exhaustion in Expr Parser with Unrestricted Input (CVE-2025-29786)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1006-1 advisory.

    - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing     (bsc#1239197)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1005-1 advisory.

    - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing     (bsc#1239197)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0103-1 advisory.

    - update to 0.52.1:

      * Make resctrl optional/pluggable

    - update to 0.52.0:

      * bump containerd related deps: api v1.8.0; errdefs v1.0.0; ttrpc v1.2.6
      * chore: Update Prometheus libraries
      * bump runc to v1.2.4
      * Add Pressure Stall Information Metrics
      * Switch to opencontainers/cgroups repository (includes update         from golang 1.22 to 1.24)
      * Bump to newer opencontainers/image-spec @ v1.1.1

    - update to 0.49.2:

      * Cp fix test
      * Revert 'reduce_logs_for_kubelet_use_crio'

     - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in     golang.org/x/oauth2  (boo#1239291)

    - Update to version 0.49.1:

      * build docker - add --provenance=false flag
      * Remove s390x support
      * Disable libipmctl in build
      * Ugrade base image to 1.22 and alpine 3.18
      * fix type of C.malloc in cgo
      * Bump runc to v1.1.12
      * Bump to bullseye
      * Remove section about canary image
      * Add note about WebUI auth
      * Remove mentions of accelerator from the docs
      * reduce_logs_for_kubelet_use_crio
      * upgrade actions/checkout and actions/setup-go and actions/upload-artifact
      * build(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /cmd
      * add cadvisor and crio upstream changes
      * Avoid using container/podman in manager.go
      * container: skip checking for files in non-existent directories.
      * Adjust the log level of Initialize Plugins
      * add ignored device
      * fix: variable naming
      * build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /cmd
      * manager: require higher verbosity level for container info misses
      * Information should be logged on increased verbosity only
      * Running do mod tidy
      * Running go mod tidy
      * Running go mod tidy
      * container/libcontainer: Improve limits file parsing perf
      * container/libcontainer: Add limit parsing benchmark
      * build(deps): bump github.com/cyphar/filepath-securejoin in /cmd
      * build(deps): bump github.com/cyphar/filepath-securejoin
      * Set verbosity after flag definition
      * fix: error message typo
      * vendor: bump runc to 1.1.9
      * Switch to use busybox from registry.k8s.io
      * Bump golang ci lint to v1.54.1
      * Bump github.com/docker/docker in /cmd
      * Bump github.com/docker/docker
      * Bump github.com/docker/distribution in /cmd
      * Bump github.com/docker/distribution
      * Update genproto dependency to isolated submodule
      * remove the check for the existence of NFS files, which will cause unnecessary requests.
      * reduce inotify watch
      * fix performance degradation of NFS
      * fix: fix type issue
      * fix: fix cgo memory leak
      * ft: export memory kernel usage
      * sysinfo: Ignore 'hidden' sysfs device entries
      * Increasing required verbosity level
      * Patch to fix issue 2341
      * podman support: Enable Podman support.
      * podman support: Create Podman handler.
      * podman support: Changes in Docker handler.
      * unit test: machine_swap_bytes
      * Add documentation for machine_swap_bytes metric
      * Add a machine_swap_bytes metric
      * fix: add space trimming for label allowlist
      * Upgrade to blang/semver/v4 v4.0.0
      * docs(deploy/k8s): remote build for kustomize
      * Update dependencies
      * Change filepaths to detect online CPUs
      * Update actions/checkout to v3
      * Fix flags typo
      * Updating location of kubernetes/pause image
      * Using t.TempDir() in tests
      * Unit test: MachineInfo Clone() method
      * Bugfix: MachineInfo Clone() - clone SwapCapacity
      * Optimize network metrics collection
      * Removing calls to deprecates io/ioutil package
      * Updating minimum Go version to 1.19
      * Request the pid of another container if current pid is not longer valid
      * Restructure
      * Add CRI-O client timeout setting
      * Set containerd grpc.MaxCallRecvMsgSize to 16MB
      * Fix asset build
      * feat(logging): add verbosity to non-NUMA node warning
      * add nerdctl to ignoredDevices
      * nvm: Change the 'no NVM devices' log.
      * nvm: Fix typo.
      * Fix CVE-2022-27664 (#3248)
      * resctrl: Reduce size and mode files check (#3264)
      * readme: Update Creatone contributor info. (#3265)
      * Fix comment to refer to correct client
      * build: bump golang to 1.20
      * ci: Update golang ci-lint to v1.51.2
      * build: Update shebang to python3
      * Revert 'dockerfile: Fix typo in go build tags.'
      * Decreasing verbosity level for 'Cannot read vendor id correctly, set empty'
      * dockerfile: Fix typo in go build tags.
      * deps: Move from cloud.google.com/go/compute -> cloud.google.com/go
      * use memory.min for reservation memory instead of high
      * Mark GOPATH as git safe.directory to fix CI build
      * switch to gomodule/redigo from garyburd/redigo
      * update go.mod/sum both in root and cmd/
      * Drop accelerator metrics and nvidia integration
      * Add s390x support for docker image
      * typo in MachineInfo spec for SwapCapacity
      * add support for swap in machine/info

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory.

  - An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during     parsing. (CVE-2025-22868)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0882-1 advisory.

    - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing     (bsc#1239197)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0881-1 advisory.

    - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing     (bsc#1239197)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0091-1 advisory.

    - Fixed CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in     golang.org/x/oauth2  (boo#1239264)

    - Update to version 0.17.3

      - Fix #4971: Fix unusable mount on macOS Sonoma
      - Fix #5003: Fix metadata errors during backup of removable disks         on Windows
      - Fix #5101: Do not retry load/list operation if SFTP connection         is broken
      - Fix #5107: Fix metadata error on Windows for backups using VSS
      - Enh #5096: Allow prune --dry-run without lock

    - Update to version 0.17.2

      - Fix #4004: Support container-level SAS/SAT tokens for Azure         backend
      - Fix #5047: Resolve potential error during concurrent cache         cleanup
      - Fix #5050: Return error if tag fails to lock repository
      - Fix #5057: Exclude irregular files from backups
      - Fix #5063: Correctly backup extended metadata when using VSS on         Windows

    - Update to version 0.17.1

      - Fix #2004: Correctly handle volume names in backup command on         Windows
      - Fix #4945: Include missing backup error text with --json
      - Fix #4953: Correctly handle long paths on older Windows         versions
      - Fix #4957: Fix delayed cancellation of certain commands
      - Fix #4958: Don't ignore metadata-setting errors during restore
      - Fix #4969: Correctly restore timestamp for files with resource         forks on macOS
      - Fix #4975: Prevent backup --stdin-from-command from panicking
      - Fix #4980: Skip extended attribute processing on unsupported         Windows volumes
      - Fix #5004: Fix spurious 'A Required Privilege Is Not Held by         the Client' error
      - Fix #5005: Fix rare failures to retry locking a repository
      - Fix #5018: Improve HTTP/2 support for REST backend
      - Chg #4953: Also back up files with incomplete metadata
      - Enh #4795: Display progress bar for restore --verify
      - Enh #4934: Automatically clear removed snapshots from cache
      - Enh #4944: Print JSON-formatted errors during restore --json
      - Enh #4959: Return exit code 12 for 'bad password' errors
      - Enh #4970: Make timeout for stuck requests customizable

    - Update to version 0.17.0

      - Fix #3600: Handle unreadable xattrs in folders above backup         source
      - Fix #4209: Fix slow SFTP upload performance
      - Fix #4503: Correct hardlink handling in stats command
      - Fix #4568: Prevent forget --keep-tags <invalid> from deleting         all snapshots
      - Fix #4615: Make find not sometimes ignore directories
      - Fix #4656: Properly report ID of newly added keys
      - Fix #4703: Shutdown cleanly when receiving SIGTERM
      - Fix #4709: Correct --no-lock handling of ls and tag commands
      - Fix #4760: Fix possible error on concurrent cache cleanup
      - Fix #4850: Handle UTF-16 password files in key command         correctly
      - Fix #4902: Update snapshot summary on rewrite
      - Chg #956: Return exit code 10 and 11 for non-existing and         locked repository
      - Chg #4540: Require at least ARMv6 for ARM binaries
      - Chg #4602: Deprecate legacy index format and s3legacy         repository layout
      - Chg #4627: Redesign backend error handling to improve         reliability
      - Chg #4707: Disable S3 anonymous authentication by default
      - Chg #4744: Include full key ID in JSON output of key list
      - Enh #662: Optionally skip snapshot creation if nothing changed
      - Enh #693: Include snapshot size in snapshots output
      - Enh #805: Add bitrot detection to diff command
      - Enh #828: Improve features of the repair packs command
      - Enh #1786: Support repositories with empty password
      - Enh #2348: Add --delete option to restore command
      - Enh #3067: Add extended options to configure Windows Shadow         Copy Service
      - Enh #3406: Improve dump performance for large files
      - Enh #3806: Optimize and make prune command resumable
      - Enh #4006: (alpha) Store deviceID only for hardlinks
      - Enh #4048: Add support for FUSE-T with mount on macOS
      - Enh #4251: Support reading backup from a command's standard         output
      - Enh #4287: Support connection to rest-server using unix socket
      - Enh #4354: Significantly reduce prune memory usage
      - Enh #4437: Make check command create non-existent cache         directory
      - Enh #4472: Support AWS Assume Role for S3 backend
      - Enh #4547: Add --json option to version command
      - Enh #4549: Add --ncdu option to ls command
      - Enh #4573: Support rewriting host and time metadata in         snapshots
      - Enh #4583: Ignore s3.storage-class archive tiers for metadata
      - Enh #4590: Speed up mount command's error detection
      - Enh #4601: Add support for feature flags
      - Enh #4611: Back up more file metadata on Windows
      - Enh #4664: Make ls use message_type field in JSON output
      - Enh #4676: Make key command's actions separate sub-commands
      - Enh #4678: Add --target option to the dump command
      - Enh #4708: Back up and restore SecurityDescriptors on Windows
      - Enh #4733: Allow specifying --host via environment variable
      - Enh #4737: Include snapshot ID in reason field of forget JSON         output
      - Enh #4764: Support forgetting all snapshots
      - Enh #4768: Allow specifying custom User-Agent for outgoing         requests
      - Enh #4781: Add restore options to read include/exclude patterns         from files
      - Enh #4807: Support Extended Attributes on Windows NTFS
      - Enh #4817: Make overwrite behavior of restore customizable
      - Enh #4839: Add dry-run support to restore command       for all the details see https://github.com/restic/restic/releases/tag/v0.17.0       or /usr/share/doc/packages/restic/CHANGELOG.md

    - Update to version 0.16.5
      - Enh #4799: Add option to force use of Azure CLI credential
      - Enh #4873: Update dependencies

    - Update to version 0.16.4       This release works around and improves detection of a bug in the       compression library used by restic. The resulting issue only       happens when using restic 0.16.3 and the max compression level       (the default auto and off compression levels are not affected),       and when the source files being backed up have specific data in       them to trigger the bug. If you use max compression, you can use       restic check --read-data to make sure you're not affected.

    - Update to version 0.16.3

      - Fix #4560: Improve errors for irregular files on Windows
      - Fix #4574: Support backup of deduplicated files on Windows         again
      - Fix #4612: Improve error handling for rclone backend
      - Fix #4624: Correct restore progress information if an error         occurs
      - Fix #4626: Improve reliability of restoring large files

    - Update to version 0.16.2

      - Fix #4540: Restore ARMv5 support for ARM binaries
      - Fix #4545: Repair documentation build on Read the Docs

    - Update to version 0.16.1

      A very long list of improvements for all the details see       https://github.com/restic/restic/releases/tag/v0.16.1       It contains an important bug fix which prevents data corruption       when compression is set to max.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0872-1 advisory.

    - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing     (bsc#1239197)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0852-1 advisory.

    - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing     (bsc#1239197)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22868 advisory.

  - An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during     parsing. (CVE-2025-22868)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during     parsing. (CVE-2025-22868)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0770-1 advisory.

    - Update to version 0.0.20250226T025151 2025-02-26T02:51:51Z.
      (jsc#PED-11136)

      * GO-2025-3487 CVE-2025-22869
      * GO-2025-3488 CVE-2025-22868

    - Update to version 0.0.20250218T203201 2025-02-18T20:32:01Z.
      (jsc#PED-11136)

      * GO-2024-3321 CVE-2024-45337 GHSA-v778-237x-gjrc

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234527	Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2025-053)	Nessus	Amazon Linux Local Security Checks	high
234522	Amazon Linux 2 : docker (ALASDOCKER-2025-056)	Nessus	Amazon Linux Local Security Checks	high
234333	Amazon Linux 2023 : docker (ALAS2023-2025-934)	Nessus	Amazon Linux Local Security Checks	high
233934	RHEL 9 : opentelemetry-collector (RHSA-2025:3593)	Nessus	Red Hat Local Security Checks	high
233792	SUSE SLES12 Security Update : docker, docker-stable (SUSE-SU-2025:1102-1)	Nessus	SuSE Local Security Checks	critical
233639	SUSE SLES15 / openSUSE 15 Security Update : docker, docker-stable (SUSE-SU-2025:1062-1)	Nessus	SuSE Local Security Checks	medium
233522	RHEL 9 : opentelemetry-collector (RHSA-2025:3335)	Nessus	Red Hat Local Security Checks	high
233341	SUSE SLES15 / openSUSE 15 Security Update : google-osconfig-agent (SUSE-SU-2025:1006-1)	Nessus	SuSE Local Security Checks	high
233340	SUSE SLES15 / openSUSE 15 Security Update : google-guest-agent (SUSE-SU-2025:1005-1)	Nessus	SuSE Local Security Checks	high
233307	openSUSE 15 Security Update : cadvisor (openSUSE-SU-2025:0103-1)	Nessus	SuSE Local Security Checks	high
233161	Azure Linux 3.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)	Nessus	Azure Linux Local Security Checks	high
233016	SUSE SLES15 / openSUSE 15 Security Update : google-cloud-sap-agent (SUSE-SU-2025:0882-1)	Nessus	SuSE Local Security Checks	high
232998	SUSE SLES12 Security Update : google-cloud-sap-agent (SUSE-SU-2025:0881-1)	Nessus	SuSE Local Security Checks	high
232825	openSUSE 15 Security Update : restic (openSUSE-SU-2025:0091-1)	Nessus	SuSE Local Security Checks	high
232755	SUSE SLES12 Security Update : google-guest-agent (SUSE-SU-2025:0872-1)	Nessus	SuSE Local Security Checks	high
232717	SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2025:0852-1)	Nessus	SuSE Local Security Checks	high
232491	CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / containerized-data-importer / coredns (CVE-2025-22868)	Nessus	MarinerOS Local Security Checks	high
231390	Linux Distros Unpatched Vulnerability : CVE-2025-22868	Nessus	Misc.	high
218740	SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:0770-1)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2025-22868

high

Tenable Plugins

high

high

high

high

critical

medium

high

high

high

high

high

high

high

high

high

high

high

high

critical