A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names. This could lead to unauthorized access.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1406-1 advisory.

    Security issue:

    - CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859).

    Non security issues:

    - recognize fuse 'portal' as a virtual file system (bsc#1234736).
    - fdisk: fix possible partition overlay and data corruption if EBR gap is missing (bsc#1222465).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:1370-1 advisory.

    - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h'     (bsc#1258859).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0856-1 advisory.

    - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h'     (bsc#1258859).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0803-1 advisory.

    - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h'     (bsc#1258859).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked     with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote     attacker could exploit this by providing a specially crafted hostname, potentially bypassing host-based     Pluggable Authentication Modules (PAM) access control rules that rely on fully qualified domain names.
    This could lead to unauthorized access. (CVE-2026-3184)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
306886	SUSE SLED15 / SLES15 Security Update : util-linux (SUSE-SU-2026:1406-1)	Nessus	SuSE Local Security Checks	medium
306695	SUSE SLES12 Security Update : util-linux (SUSE-SU-2026:1370-1)	Nessus	SuSE Local Security Checks	low
301803	openSUSE 15 Security Update : util-linux (SUSE-SU-2026:0856-1)	Nessus	SuSE Local Security Checks	low
301295	openSUSE 15 Security Update : util-linux (SUSE-SU-2026:0803-1)	Nessus	SuSE Local Security Checks	low
300049	Linux Distros Unpatched Vulnerability : CVE-2026-3184	Nessus	Misc.	low

Detections

Analytics

CVE-2026-3184

low

Tenable Plugins

medium

low

low

low

low