SUSE SLES15 Security Update : erlang26 (SUSE-SU-2026:3579-1)

critical Nessus Plugin ID 335097

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3579-1 advisory.

- CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning (bsc#1261726).
- CVE-2026-42789: `public_key` application accepts non-CA certificates as intermediate issuers and this enables chain forgery (bsc#1266449).
- CVE-2026-42790: Name constraints and `Subject CommonName` fallback in TLS hostname verification allows for certificate forgery by MITM attacker (bsc#1266466).
- CVE-2026-42792: permanent `epmd` DoS via connection slot exhaustion due to improper handling of exceptional conditions (bsc#1272908).
- CVE-2026-47078: relative path traversal in `zip:unzip/zip:extract` via `check_dir_level` depth-counter bypass (bsc#1272909).
- CVE-2026-48855: SFTP `READLINK` response leaks absolute backend filesystem path when root is configured (bsc#1268139).
- CVE-2026-48856: `httpc` leaks `Authorization` headers to cross-origin redirect targets (bsc#1268141).
- CVE-2026-48858: server-side request forgery allows FTP bounce attacks and SSRF via an unvalidated `PASV` response IP address (bsc#1268142).
- CVE-2026-48860: `ssl` (`inet_tls_dist` module) allows unauthenticated bypass of the distribution-over- TLS LAN allowlist (bsc#1268146).
- CVE-2026-49759: unbounded stack buffer overflow in SCTP error cause parsing in `inet_drv` (bsc#1268163).
- CVE-2026-49760: stack buffer overflow in `ei_s_print_term` at very large integer (bsc#1268164).
- CVE-2026-53422: SFTP `REALPATH` path-existence oracle allows filesystem enumeration outside configured root (bsc#1270245).
- CVE-2026-54886: SSH SFTP server denial of service via extended channel data infinite loop (bsc#1270246).
- CVE-2026-54887: use of default cryptographic key allows predictable DTLS cookie computation during the startup window (bsc#1270247).
- CVE-2026-54891: plaintext injection towards (D)TLS client during handshake (bsc#1270250).
- CVE-2026-55737: heap pointer corruption via signed/unsigned mismatch in `LARGE_TUPLE_EXTP` decoding in `erts` external term format decoder (bsc#1272910).
- CVE-2026-55950: time-of-check time-of-use race condition allows an unauthenticated remote attacker to crash all active DTLS sessions on a listener (bsc#1270253).
- CVE-2026-55952: missing validation allows for DoS of the TLS-1.3 server when clients send a malformed `ClientHello` with mismatched PSK identity and binder list lengths (bsc#1270258).
- CVE-2026-55953: TLS 1.2 and DTLS clients accept unoffered anonymous cipher suites and allow for server authentication bypass (bsc#1272911).
- CVE-2026-58227: TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain (bsc#1272913).
- CVE-2026-59250: `megaco` flex scanner buffer overflow via oversized property parm name (bsc#1272914).
- CVE-2026-59251: denial of service via exponential certificate policy tree growth in path validation (bsc#1272915).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected erlang26 and / or erlang26-epmd packages.

Plugin Details

Severity: Critical

ID: 335097

File Name: suse_SU-2026-3579-1.nasl

Version: 1.1

Type: Local

Agent: unix

Family: SuSE Local Security Checks

Published: 8/13/2026

Updated: 8/13/2026

Supported Sensors: Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7

Percentile: 98.23

CVSS v2

Risk Factor: High

Base Score: 9.4

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N

CVSS Score Source: CVE-2026-42790

CVSS v3

Risk Factor: High

Base Score: 8.2

Temporal Score: 7.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2026-49759

CVSS v4

Risk Factor: Critical

Base Score: 9.1

Threat Score: 6.9

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS Score Source: CVE-2026-55953

Vulnerability Information

CPE: cpe:/o:novell:suse_linux:15, p-cpe:/a:novell:suse_linux:erlang26-epmd, p-cpe:/a:novell:suse_linux:erlang26

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 8/11/2026

Vulnerability Publication Date: 4/7/2026

Reference Information

CVE: CVE-2026-28810, CVE-2026-42789, CVE-2026-42790, CVE-2026-42792, CVE-2026-47078, CVE-2026-48855, CVE-2026-48856, CVE-2026-48858, CVE-2026-48860, CVE-2026-49759, CVE-2026-49760, CVE-2026-53422, CVE-2026-54886, CVE-2026-54887, CVE-2026-54891, CVE-2026-55737, CVE-2026-55950, CVE-2026-55952, CVE-2026-55953, CVE-2026-58227, CVE-2026-59250, CVE-2026-59251

IAVA: 2026-A-0309-S, 2026-A-0522-S, 2026-A-0594, 2026-A-0655-S, 2026-A-0785

SuSE: SUSE-SU-2026:3579-1

Detections

Analytics

SUSE SLES15 Security Update : erlang26 (SUSE-SU-2026:3579-1)

critical Nessus Plugin ID 335097

Synopsis

Description

Solution

See Also

Plugin Details

Risk Information

VPR

CVSS v2

CVSS v3

CVSS v4

Vulnerability Information

Reference Information