The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4591-1 advisory.

    - CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree       (bsc#1274726).
    - CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723).
    - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local     network to       trigger a process crash (bsc#1281297).
    - CVE-2026-18374: overflow in the fopen ccs extension (bsc#1277262).
    - CVE-2026-19542: Fix out-of-bounds array write in tdelete (bsc#1276946).
    - CVE-2026-77117: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277921).
    - CVE-2026-80489: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277922).
    - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate     privileges       (bsc#1282509).
    - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
    - CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program     crash       (bsc#1283147).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4656-1 advisory.

    - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local     network to       trigger a process crash (bsc#1281297).
    - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate     privileges       (bsc#1282509).
    - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).
    - CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program     crash       (bsc#1283147).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may
    read one byte beyond the input size limit, which may crash a program when that byte is not readable. This
    condition may happen when the input strings to the strncasecmp function are attacker controlled in an
    application and they match all the way up to the edge of their page and the neighbouring page is either
    not mapped or is not readable. (CVE-2026-97399)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may     read one byte beyond the input size limit, which may crash a program when that byte is not readable. This     condition may happen when the input strings to the strncasecmp function are attacker controlled in an     application and they match all the way up to the edge of their page and the neighbouring page is either     not mapped or is not readable. (CVE-2026-97399)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
369268	SUSE SLES15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4591-1)	Nessus	SuSE Local Security Checks	Local	critical
366065	SUSE SLED15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4656-1)	Nessus	SuSE Local Security Checks	Local	medium
459413	Echo: glibc: security update to 2.41-12+deb13u4+e3	Tenable Cloud Security	Echo Local Security Checks	Local	low
459413	Echo: glibc: security update to 2.41-12+deb13u4+e3	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	low
351096	Linux Distros Unpatched Vulnerability : CVE-2026-97399	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2026-97399

low

Tenable Plugins

critical

medium

low

low

low