GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

suse_linux SUSE-SU-2026:4081-1: SUSE SLES12 : Security update for libidn (Moderate) (SUSE-SU-2026:4081-1)

suse_linux SUSE-SU-2026:4000-1: SUSE SLED15 / SLES15 : Security update for libidn (Moderate) (SUSE-SU-2026:4000-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21758-1 advisory.

    This update for libidn fixes the following issue:

    - CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libidn packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs     because of mishandling in idna_to_unicode_internal. The affected code is not present in     libidn2.(CVE-2026-57053)

Tenable has extracted the preceding description block directly from the EulerOS libidn security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099538 advisory.

    GNU libidn before 1.44 is prone to out-of-bounds reads ofuninitialized memory in the ToUnicode APIs     because of mishandling inidna_to_unicode_internal. The affected code is not present in libidn2.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-acf66846ee advisory.

    Security fix for CVE-2026-57053.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2291be7d88 advisory.

    Security fix for CVE-2026-57053.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7ddafb24a3 advisory.

    Update to 1.44.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8521-1 advisory.

    It was discovered that Libidn incorrectly handled certain internationalized domain name strings. An     attacker could possibly use this issue to obtain sensitive information or cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs     because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.
    (CVE-2026-57053)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
343945	openSUSE 16 Security Update : libidn (openSUSE-SU-2026:21758-1)	Nessus	SuSE Local Security Checks	Local	low
343642	EulerOS 2.0 SP12 : libidn (EulerOS-SA-2026-3275)	Nessus	Huawei Local Security Checks	Local	low
343607	EulerOS 2.0 SP12 : libidn (EulerOS-SA-2026-3350)	Nessus	Huawei Local Security Checks	Local	low
336513	Unity Linux 20.1070e Security Update: libidn (UTSA-2026-099538)	Nessus	Unity Linux Local Security Checks	Local	low
334687	Fedora 43 : libidn (2026-acf66846ee)	Nessus	Fedora Local Security Checks	Local	low
334685	Fedora 44 : libidn (2026-2291be7d88)	Nessus	Fedora Local Security Checks	Local	low
334457	Fedora 43 : mingw-libidn (2026-7ddafb24a3)	Nessus	Fedora Local Security Checks	Local	low
326249	Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Libidn vulnerability (USN-8521-1)	Nessus	Ubuntu Local Security Checks	Local	low
323653	Linux Distros Unpatched Vulnerability : CVE-2026-57053	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2026-57053

low

Tenable Plugins

Coming Soon

low

low

low

low

low

low

low

low

low