Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates the search list when copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the full configuration. The consistency check compared against the wrong size and did not handle a first entry that does not fit, so a correctly truncated list failed the assertion. Any process that resolves names through the library is affected, including long-running processes that reload /etc/resolv.conf on the next query after it changes. Search domains are commonly written to /etc/resolv.conf from data received over DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without privileges on the target system, subject to validation by the network configuration software.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84753 advisory.

    - CVE-2026-8674: Denial of Service via long DNS search domain (RHEL-264714)
    - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding       (RHEL-248057)
    - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249634)
    - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode       string (RHEL-251518)
    - CVE-2026-19499: Buffer overflow in strfmon right-justification padding       (RHEL-248034)
    - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247957)
    - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238485)
    - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238479)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_84753 advisory.

    * glibc: Non-progress DoS in SHIFT_JISX0213 -> (CVE-2026-77117)

    * glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state (CVE-2026-80489)

    * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374)

    * glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration     (CVE-2026-8674)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4591-1 advisory.

    - CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree       (bsc#1274726).
    - CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723).
    - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local     network to       trigger a process crash (bsc#1281297).
    - CVE-2026-18374: overflow in the fopen ccs extension (bsc#1277262).
    - CVE-2026-19542: Fix out-of-bounds array write in tdelete (bsc#1276946).
    - CVE-2026-77117: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277921).
    - CVE-2026-80489: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277922).
    - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate     privileges       (bsc#1282509).
    - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
    - CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program     crash       (bsc#1283147).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84753 advisory.

    * glibc: Non-progress DoS in SHIFT_JISX0213 -> (CVE-2026-77117)
      * glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state (CVE-2026-80489)
      * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374)
      * glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration     (CVE-2026-8674)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:84753 advisory.

    * glibc: Non-progress DoS in SHIFT_JISX0213 -> (CVE-2026-77117)

    * glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state (CVE-2026-80489)

    * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374)

    * glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration     (CVE-2026-8674)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84753 advisory.

    The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard     math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system.
    Without these libraries, the Linux system cannot function correctly.

    Security Fix(es):

    * glibc: Non-progress DoS in SHIFT_JISX0213 -> (CVE-2026-77117)

    * glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state (CVE-2026-80489)

    * glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string (CVE-2026-18374)

    * glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration     (CVE-2026-8674)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4656-1 advisory.

    - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local     network to       trigger a process crash (bsc#1281297).
    - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate     privileges       (bsc#1282509).
    - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
    - CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program     crash       (bsc#1283147).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable,
    whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to
    2.44 results in an assertion failure which aborts the process. The resolver truncates the search list when
    copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the
    full configuration. The consistency check compared against the wrong size and did not handle a first entry
    that does not fit, so a correctly truncated list failed the assertion. Any process that resolves names
    through the library is affected, including long-running processes that reload /etc/resolv.conf on the next
    query after it changes. Search domains are commonly written to /etc/resolv.conf from data received over
    DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without
    privileges on the target system, subject to validation by the network configuration software.
    (CVE-2026-8674)

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23934-1 advisory.

    - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726).
    - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723).
    - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local     network to       trigger a process crash (bsc#1281297).
    - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262).
    - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892).
    - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946).
    - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921).
    - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922).
    - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate     privileges       (bsc#1282509).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21968-1 advisory.

    - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726).
    - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723).
    - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local     network to       trigger a process crash (bsc#1281297).
    - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262).
    - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892).
    - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946).
    - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921).
    - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922).
    - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate     privileges       (bsc#1282509).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable,     whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to     2.44 results in an assertion failure which aborts the process. The resolver truncates the search list when     copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the     full configuration. The consistency check compared against the wrong size and did not handle a first entry     that does not fit, so a correctly truncated list failed the assertion. Any process that resolves names     through the library is affected, including long-running processes that reload /etc/resolv.conf on the next     query after it changes. Search domains are commonly written to /etc/resolv.conf from data received over     DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without     privileges on the target system, subject to validation by the network configuration software.
    (CVE-2026-8674)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
376150	Oracle Linux 10 : glibc (ELSA-2026-84753)	Nessus	Oracle Linux Local Security Checks	Local	medium
369931	Rocky Linux 10.2 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_84753)	Nessus	Rocky Linux Local Security Checks	Local	medium
369268	SUSE SLES15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4591-1)	Nessus	SuSE Local Security Checks	Local	critical
369083	AlmaLinux 10 : glibc (ALSA-2026:84753)	Nessus	Alma Linux Local Security Checks	Local	medium
367810	RockyLinux 10 : glibc (RLSA-2026:84753)	Nessus	Rocky Linux Local Security Checks	Local	medium
367380	RHEL 10 : glibc (RHSA-2026:84753)	Nessus	Red Hat Local Security Checks	Local	medium
366065	SUSE SLED15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4656-1)	Nessus	SuSE Local Security Checks	Local	medium
473598	Chainguard: multiple glibc-2.44 packages, multiple ld-linux-2.44 packages, multiple nscd-2.44 packages, multiple pcprofiledump-2.44 packages, multiple sln-2.44 packages, tzutils-2.44: security update to 2.44-r8	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
473598	Chainguard: multiple glibc-2.44 packages, multiple ld-linux-2.44 packages, multiple nscd-2.44 packages, multiple pcprofiledump-2.44 packages, multiple sln-2.44 packages, tzutils-2.44: security update to 2.44-r8	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
362572	SUSE SLES16: glibc / glibc-devel / glibc-devel-static / glibc-extra / etc (SUSE-SU-2026:23934-1)	Nessus	SuSE Local Security Checks	Local	critical
362508	openSUSE 16: cross-aarch64-glibc-devel / cross-ppc64le-glibc-devel / etc (openSUSE-SU-2026:21968-1)	Nessus	SuSE Local Security Checks	Local	critical
455182	Echo: glibc: security update to 2.41-12+deb13u4+e2	Tenable Cloud Security	Echo Local Security Checks	Local	medium
455182	Echo: glibc: security update to 2.41-12+deb13u4+e2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
347045	Linux Distros Unpatched Vulnerability : CVE-2026-8674	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-8674

medium

Tenable Plugins

medium

medium

critical

medium

medium

medium

medium

medium

medium

critical

critical

medium

medium

medium