The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is     provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion     is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC     2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario.
    A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned     rather than exhausting the stack. (CVE-2026-25727)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-25727

medium Nessus Plugin ID 298198

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Feb 11, 2026, 1:22 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602110122
Version 1.4 Feb 9, 2026, 4:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602091607
Version 1.3 Feb 8, 2026, 8:18 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202602080818
Version 1.2 Feb 7, 2026, 9:06 AM CVSS metrics ("CVSSv2 score" set to 5.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P") CVSS metrics ("Cvssv4 score" set to 6.8) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H") CVSSv2 severity (based on CVE-2026-25727, severity decreased from "High" to "Medium") CVSSv4 severity (based on None, severity decreased from "High" to "Medium") Plugin metadata Plugin Feed: 202602070906
Version 1.1 Feb 6, 2026, 5:01 PM New Plugin Feed: 202602061701