The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS     backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the     configured DNS server, result in a violation of the DNS specification that causes the application to treat     a non-answer section of the DNS response as a valid answer. (CVE-2026-4437)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-4437

high Nessus Plugin ID 303238

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.9 May 20, 2026, 3:58 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605201558
Version 1.8 May 17, 2026, 3:22 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605170322
Version 1.7 Apr 29, 2026, 12:50 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604291250
Version 1.6 Apr 8, 2026, 12:40 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:U/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202604081240
Version 1.5 Apr 5, 2026, 11:24 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202604052324
Version 1.4 Mar 28, 2026, 12:01 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202603281201
Version 1.3 Mar 24, 2026, 11:39 AM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Plugin Feed: 202603241139
Version 1.2 Mar 23, 2026, 8:09 PM CVSS metrics ("CVSSv2 score" set to 5.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:P") CVSS metrics ("CVSSv3 score" set to none) CVSS metrics ("CVSSv3 vector" set to none) CVSS temporal metrics ("CVSSv3 temporal vector" set to none) CVSSv2 severity (based on CVE-2026-4437, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202603232009
Version 1.1 Mar 21, 2026, 9:15 AM New Plugin Feed: 202603210915