The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sctp: validate embedded INIT chunk and address list lengths in cookie sctp_unpack_cookie() only checked     that the embedded INIT chunk length did not exceed the remaining cookie payload, but did not ensure that     the INIT chunk is large enough to contain a complete INIT header. A malformed COOKIE_ECHO can therefore     carry a truncated INIT chunk whose length field is smaller than sizeof(struct sctp_init_chunk). Later,     sctp_process_init() accesses INIT parameters unconditionally, which may lead to out-of-bounds reads. In     addition, raw_addr_list_len is not fully validated against the remaining cookie payload. When cookie     authentication is disabled, an attacker can supply an oversized raw_addr_list_len and cause     sctp_raw_to_bind_addrs() to read beyond the end of the cookie. The address parser also lacks sufficient     bounds checks for parameter headers and lengths, allowing malformed address parameters to trigger out-of-     bounds reads. Fix this by: - requiring the embedded INIT chunk length to be at least sizeof(struct     sctp_init_chunk); - validating that the INIT chunk and raw address list together fit within the cookie     payload; - verifying sufficient data exists for each address parameter header and payload before parsing     it. Note that sctp_verify_init() must be called after sctp_unpack_cookie() and before sctp_process_init()     when cookie authentication is disabled. This will be addressed in a separate patch. (CVE-2026-53224)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-53224

critical Nessus Plugin ID 323363

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.5 Jul 16, 2026, 9:04 PM CVSSv3 score source (changed from "CVE-2026-53224" to none) Plugin Feed: 202607162104
Version 1.4 Jul 15, 2026, 2:58 AM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSSv3 score source (set to "CVE-2026-53224") Detection (updated detection logic) Plugin Feed: 202607150258
Version 1.3 Jul 7, 2026, 11:10 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202607071110
Version 1.2 Jul 2, 2026, 3:38 PM Detection (updated detection logic) Plugin Feed: 202607021538
Version 1.1 Jun 28, 2026, 2:21 PM New Plugin Feed: 202606281421