Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates the search list when copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the full configuration. The consistency check compared against the wrong size and did not handle a first entry that does not fit, so a correctly truncated list failed the assertion. Any process that resolves names through the library is affected, including long-running processes that reload /etc/resolv.conf on the next query after it changes. Search domains are commonly written to /etc/resolv.conf from data received over DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without privileges on the target system, subject to validation by the network configuration software.

suse_linux SUSE-SU-2026:4591-1: SUSE SLES15 : Security update for glibc (Important) (SUSE-SU-2026:4591-1)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable,
    whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to
    2.44 results in an assertion failure which aborts the process. The resolver truncates the search list when
    copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the
    full configuration. The consistency check compared against the wrong size and did not handle a first entry
    that does not fit, so a correctly truncated list failed the assertion. Any process that resolves names
    through the library is affected, including long-running processes that reload /etc/resolv.conf on the next
    query after it changes. Search domains are commonly written to /etc/resolv.conf from data received over
    DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without
    privileges on the target system, subject to validation by the network configuration software.
    (CVE-2026-8674)

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23934-1 advisory.

    - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726).
    - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723).
    - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local     network to       trigger a process crash (bsc#1281297).
    - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262).
    - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892).
    - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946).
    - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921).
    - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922).
    - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate     privileges       (bsc#1282509).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21968-1 advisory.

    - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726).
    - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723).
    - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local     network to       trigger a process crash (bsc#1281297).
    - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262).
    - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892).
    - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946).
    - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921).
    - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922).
    - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate     privileges       (bsc#1282509).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable,     whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to     2.44 results in an assertion failure which aborts the process. The resolver truncates the search list when     copying it into the fixed-size _res.defdname buffer, then asserts that the copy is consistent with the     full configuration. The consistency check compared against the wrong size and did not handle a first entry     that does not fit, so a correctly truncated list failed the assertion. Any process that resolves names     through the library is affected, including long-running processes that reload /etc/resolv.conf on the next     query after it changes. Search domains are commonly written to /etc/resolv.conf from data received over     DHCP or from a VPN server, so an attacker on the local network may be able to trigger this without     privileges on the target system, subject to validation by the network configuration software.
    (CVE-2026-8674)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
473598	Chainguard: multiple glibc-2.44 packages, multiple ld-linux-2.44 packages, multiple nscd-2.44 packages, multiple pcprofiledump-2.44 packages, multiple sln-2.44 packages, tzutils-2.44: security update to 2.44-r8	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
473598	Chainguard: multiple glibc-2.44 packages, multiple ld-linux-2.44 packages, multiple nscd-2.44 packages, multiple pcprofiledump-2.44 packages, multiple sln-2.44 packages, tzutils-2.44: security update to 2.44-r8	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
362572	SUSE SLES16: glibc / glibc-devel / glibc-devel-static / glibc-extra / etc (SUSE-SU-2026:23934-1)	Nessus	SuSE Local Security Checks	Local	critical
362508	openSUSE 16: cross-aarch64-glibc-devel / cross-ppc64le-glibc-devel / etc (openSUSE-SU-2026:21968-1)	Nessus	SuSE Local Security Checks	Local	critical
455182	Echo: glibc: security update to 2.41-12+deb13u4+e2	Tenable Cloud Security	Echo Local Security Checks	Local	medium
455182	Echo: glibc: security update to 2.41-12+deb13u4+e2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
347045	Linux Distros Unpatched Vulnerability : CVE-2026-8674	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-8674

medium

Tenable Plugins

Coming Soon

medium

medium

critical

critical

medium

medium

medium