Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS server, result in a violation of the DNS specification that causes the application to treat a non-answer section of the DNS response as a valid answer.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1369-1 advisory.

    - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078).
    - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the glibc package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS     backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the     configured DNS server, result in a violation of the DNS specification that causes the application to treat     a non-answer section of the DNS response as a valid answer. (CVE-2026-4437)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
306682	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : glibc (SUSE-SU-2026:1369-1)	Nessus	SuSE Local Security Checks	medium
305122	Photon OS 5.0: Glibc PHSA-2026-5.0-0802	Nessus	PhotonOS Local Security Checks	medium
303238	Linux Distros Unpatched Vulnerability : CVE-2026-4437	Nessus	Misc.	high

Detections

Analytics

CVE-2026-4437

high

Tenable Plugins

medium

medium

high