The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's     implementation of transcoding strings into the Component Model's utf16 or latin1+utf16 encodings     improperly verified the alignment of reallocated strings. This meant that unaligned pointers could be     passed to the host for transcoding which would trigger a host panic. This panic is possible to trigger     from malicious guests which transfer very specific strings across components with specific addresses. Host     panics are considered a DoS vector in Wasmtime as the panic conditions are controlled by the guest in this     situation. This vulnerability is fixed in 24.0.7, 36.0.7, 42.0.2, and 43.0.1. (CVE-2026-34942)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-34942

medium Nessus Plugin ID 305818

Version 1.4