The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3022-1 advisory.

    Update to version 0.15.0~17.

    - CVE-2023-26964: hyper,h2: high resource consumption due to stream stacking when H2 component processes       `HTTP2 RST_STREAM` frames (bsc#1210346).
    - CVE-2024-32650: rust-rustls: infinite loop in `rustls::conn::ConnectionCommon:complete_io()` when     processing client       input network input (bsc#1223238).
    - CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` (bsc#1242611).
    - CVE-2026-25727: time: stack exhaustion in the RFC 2822 date parser when processing certain user provided     input       (bsc#1257923).
    - CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:derive` when using     OpenSSL 1.1.1       (bsc#1270206).
    - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length       (bsc#1270559).
    - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap_key()`     (bsc#1270693).
    - CVE-2026-41681: openssl: stack corruption due to `MdCtxRef::digest_final()` writing past caller buffer     with no length       check (bsc#1270736).
    - CVE-2026-41898: openssl: information leak to network peers due to unchecked callback-returned length in     PSK and       cookie generate trampolines (bsc#1270869).
    - CVE-2026-42327: openssl: undefined behavior in `X509Ref::ocsp_responders` when processing certificates     with non-UTF-8       OCSP URLs (bsc#1270512).
    - CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding     (bsc#1270938).
    - CVE-2026-45784: openssl: out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD     ciphers       (bsc#1270948).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLED15 / SLES15 Security Update : sccache (SUSE-SU-2026:3022-1)

critical Nessus Plugin ID 327293

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Oct 22, 2026, 12:02 AM CVSS metrics ("Cvssv4 supplemental" set to "CVSS:4.0/U:Clear") CVSS metrics ("Cvssv4 threat score" set to 8.1) Plugin Feed: 202610220002
Version 1.3 Aug 25, 2026, 3:54 PM CVSS metrics ("CVSSv3 score" set to 9.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H") CVSS metrics ("Cvssv4 threat score" set to 8.1) CVSSv3 score source (set to "CVE-2026-41677") Plugin Feed: 202608251554
Version 1.1 Jul 16, 2026, 9:04 PM New Plugin Feed: 202607162104