Detections
Analytics

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : GNU C Library vulnerabilities (USN-9065-1)

high Nessus Plugin ID 381334

Synopsis

The remote Ubuntu host is missing one or more security updates.

Description

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-9065-1 advisory.

 It was discovered that the GNU C Library incorrectly handled the ccs= option in the fopen function. An attacker could possibly use this issue to cause GNU C Library to crash or execute arbitrary code.
 (CVE-2026-18374)

 It was discovered that the GNU C Library incorrectly handled long domain names in DNS search lists. An attacker on the local network could possibly use this issue to cause GNU C Library to crash, resulting in a denial of service. (CVE-2026-8674)

 It was discovered that the GNU C Library dynamic loader had a time-of-check to time-of-use race condition when handling the $ORIGIN path expansion in setuid or setgid programs. A local attacker could possibly use this issue to execute arbitrary code with elevated privileges. (CVE-2026-86805)

 It was discovered that the GNU C Library dynamic loader incorrectly handled $ORIGIN path expansion, leading to a stack-based buffer overflow. A local attacker could possibly use this issue to cause GNU C Library to crash, resulting in a denial of service, or obtain sensitive information. (CVE-2026-95818)

 It was discovered that the GNU C Library nscd service incorrectly handled large DNS responses. An attacker could possibly use this issue to cause nscd to crash, resulting in a denial of service. (CVE-2026-89092)

 It was discovered that the GNU C Library strncasecmp function optimized for the Power8 architecture incorrectly handled certain inputs. An attacker could possibly use this issue to cause GNU C Library to crash, resulting in a denial of service. (CVE-2026-97399)

 It was discovered that the GNU C Library incorrectly restricted path traversal when processing the LANGUAGE environment variable in gettext. A local attacker could possibly use this issue to load message catalogs from arbitrary locations and execute arbitrary code. (CVE-2026-84243)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://ubuntu.com/security/notices/USN-9065-1

Plugin Details

Severity: High

ID: 381334

File Name: ubuntu_USN-9065-1.nasl

Version: 1.1

Type: Local

Agent: unix

Published: 11/14/2026

Updated: 11/14/2026

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.54

CVSS v2

Risk Factor: Medium

Base Score: 6

Temporal Score: 4.4

Vector: CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-95818

CVSS v3

Risk Factor: High

Base Score: 7

Temporal Score: 6.1

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2026-84243

Vulnerability Information

CPE: cpe:/o:canonical:ubuntu_linux:22.04:-:lts, cpe:/o:canonical:ubuntu_linux:24.04:-:lts, cpe:/o:canonical:ubuntu_linux:26.04:-:lts, cpe:/o:canonical:ubuntu_linux:26.10, p-cpe:/a:canonical:ubuntu_linux:glibc-source, p-cpe:/a:canonical:ubuntu_linux:libc-bin, p-cpe:/a:canonical:ubuntu_linux:libc-dev-bin, p-cpe:/a:canonical:ubuntu_linux:libc-devtools, p-cpe:/a:canonical:ubuntu_linux:libc-gconv-modules-extra, p-cpe:/a:canonical:ubuntu_linux:libc6-amd64, p-cpe:/a:canonical:ubuntu_linux:libc6-dev-amd64, p-cpe:/a:canonical:ubuntu_linux:libc6-dev-i386, p-cpe:/a:canonical:ubuntu_linux:libc6-dev-s390, p-cpe:/a:canonical:ubuntu_linux:libc6-dev-x32, p-cpe:/a:canonical:ubuntu_linux:libc6-i386, p-cpe:/a:canonical:ubuntu_linux:libc6-prof, p-cpe:/a:canonical:ubuntu_linux:libc6-s390, p-cpe:/a:canonical:ubuntu_linux:libc6-x32, p-cpe:/a:canonical:ubuntu_linux:libc6, p-cpe:/a:canonical:ubuntu_linux:locales-all, p-cpe:/a:canonical:ubuntu_linux:locales, p-cpe:/a:canonical:ubuntu_linux:nscd

Required KB Items: Host/cpu, Host/Ubuntu, Host/Ubuntu/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 11/12/2026

Vulnerability Publication Date: 8/27/2026

Reference Information

CVE: CVE-2026-18374, CVE-2026-84243, CVE-2026-8674, CVE-2026-86805, CVE-2026-95818, CVE-2026-97399

IAVA: 2026-A-0897

USN: 9065-1