The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to     version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing     A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target     application to crash or read uninitialized memory. These functions are for application debugging only and     hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since     version 2.34 and should not be used by any new applications. Applications should consider porting away     from these interfaces since they may be removed in future versions. (CVE-2026-6238)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-6238

medium Nessus Plugin ID 310917

Version 1.6

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.6 Jun 21, 2026, 11:53 AM Plugin metadata Plugin Feed: 202606211153
Version 1.5 Jun 18, 2026, 5:14 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202606180514
Version 1.4 May 30, 2026, 6:41 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605300641
Version 1.2 May 1, 2026, 7:22 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202605010722
Version 1.1 Apr 29, 2026, 10:33 PM New Plugin Feed: 202604292233