The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may     read one byte beyond the input size limit, which may crash a program when that byte is not readable. This     condition may happen when the input strings to the strncasecmp function are attacker controlled in an     application and they match all the way up to the edge of their page and the neighbouring page is either     not mapped or is not readable. (CVE-2026-97399)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-97399

low Nessus Plugin ID 351096

Version 1.5

Version 1.4

Version 1.2

Version 1.1

Version 1.5 Oct 12, 2026, 12:19 PM CVSS metrics ("CVSSv2 score" set to 2.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:P") CVSSv2 severity (based on CVE-2026-97399, severity decreased from "Medium" to "Low") Plugin Feed: 202610121219
Version 1.4 Oct 11, 2026, 12:37 PM CVSS metrics ("CVSSv2 score" set to 5.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P") CVSSv2 severity (based on CVE-2026-97399, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202610111237
Version 1.2 Sep 30, 2026, 6:31 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202609300631
Version 1.1 Sep 29, 2026, 4:08 PM New Plugin Feed: 202609291608