The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer     past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete     implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as needed while     descending the tree. Two rebalancing branches push an additional entry without checking the capacity, and     write past the array when the stack is exactly full. Triggering this requires a node at a depth of exactly     40 (or 40 plus a multiple of 20), which implies a tree with at least a million nodes, so an attacker must     drive a large number of insertions and deletions through an application that uses tsearch and tdelete. The     written value is a pointer into a tree node and is not directly attacker controlled. No affected     application in common distributions has been identified. (CVE-2026-19542)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-19542

medium Nessus Plugin ID 339040

Version 1.12

Version 1.11

Version 1.10

Version 1.9

Version 1.8

Version 1.7

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.12 Oct 12, 2026, 12:19 PM CVSS metrics ("CVSSv2 score" set to 5.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P") Plugin Feed: 202610121219
Version 1.11 Oct 9, 2026, 2:01 PM CVSS metrics ("CVSSv2 score" set to 5.8) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:P") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610091401
Version 1.10 Sep 16, 2026, 6:23 PM CVSS metrics ("CVSSv2 score" set to 5.1) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P") CVSSv2 severity (based on CVE-2026-19542, severity decreased from "High" to "Medium") Plugin Feed: 202609161823
Version 1.9 Sep 15, 2026, 8:11 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:M/Au:N/C:N/I:C/A:P") CVSS metrics ("CVSSv2 score" set to 7.8) CVSS metrics ("CVSSv3 score" set to 5.6) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") CVSSv3 severity (based on None, severity decreased from "High" to "Medium") Plugin metadata Plugin Feed: 202609150811
Version 1.8 Sep 10, 2026, 10:27 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202609102227
Version 1.7 Sep 9, 2026, 5:23 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609090523
Version 1.6 Sep 3, 2026, 1:08 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202609031308
Version 1.5 Sep 2, 2026, 6:07 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609021807
Version 1.4 Aug 31, 2026, 10:57 PM CVSS metrics ("CVSSv2 score" set to none) CVSS metrics ("CVSSv2 vector" set to none) CVSS metrics ("CVSSv3 score" set to none) CVSS metrics ("CVSSv3 vector" set to none) CVSS temporal metrics ("CVSSv2 temporal vector" set to none) CVSS temporal metrics ("CVSSv3 temporal vector" set to none) Detection (updated detection logic) Plugin metadata Plugin Feed: 202608312257
Version 1.3 Aug 27, 2026, 10:23 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608271023
Version 1.2 Aug 25, 2026, 9:17 PM Plugin metadata Detection (updated detection logic) Plugin Feed: 202608252117
Version 1.1 Aug 24, 2026, 12:27 AM New Plugin Feed: 202608240027