The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.21.0, in ClearCodec,     when `glyphData` is present, `clear_decompress` calls `freerdp_image_copy_no_overlap` without validating     the destination rectangle, allowing an out-of-bounds read/write via crafted RDPGFX surface updates. A     malicious server can trigger a clientside heap buffer overflow, causing a crash (DoS) and potential heap     corruption with codeexecution risk depending on allocator behavior and surrounding heap layout. Version     3.21.0 contains a patch for the issue. (CVE-2026-23531)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-23531

high Nessus Plugin ID 291612

Version 1.8