The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its     sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate     per server name) and nothing else keeps the original ssl.SSLContext alive. Typical cases are servers that     create an SSLContext per connection or replace it while connections are open; servers that wrap their     listening socket with it are not affected. Mitigation: keep a reference to every SSLContext that sets     sni_callback for the lifetime of the server. TLS clients are not affected. (CVE-2026-19445)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-19445

critical Nessus Plugin ID 358379

Version 1.3