Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - zchunk 之前 1.5.5 在 src/lib/header.c 的 read_preface（） 中包含堆越界读取漏洞，会将总标头长度而不是剩余字节传递到 compint 解析函数。攻击者可提供特制的 .zck 文件，其标头以压缩整数结尾，造成读取超出堆标头缓冲区，并造成应用程序崩溃。（CVE-2026-117556）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - zchunk before 1.5.5 在 src/lib/header.c 的 read_preface（） 中包含堆積越界讀取弱點，該弱點會傳遞標頭總長度，而不是剩餘位元組以 compint 剖析函式。攻擊者可以提供一個特製的 .zck 文件，其標頭以壓縮整數結尾，導致讀取通過堆積標頭緩衝區並使應用程序崩潰。（CVE-2026-117556）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 1.5.5 より前の zchunk には、src/lib/header.c の read_preface() にヒープ領域外読み取りの脆弱性が含まれており、残りのバイトの代わりにヘッダーの合計長を解析関数に送信します。攻撃者が、ヘッダーが圧縮された整数の内部で終わる細工された .zck ファイルを用意し、ヒープヘッダーバッファを越えた読み取りを引き起こし、アプリケーションをクラッシュさせる可能性があります。(CVE-2026-117556)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5138-1 advisory.

    This update for zchunk fixes the following issue:

    - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application     crash via a       crafted `.zck` file (bsc#1288144).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c     that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can     supply a crafted .zck file whose header ends inside a compressed integer, causing reads past the heap     header buffer and crashing the application. (CVE-2026-117556)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24657-1 advisory.

    This update for zchunk fixes the following issue:

    - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application     crash via a       crafted `.zck` file (bsc#1288144).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22250-1 advisory.

    This update for zchunk fixes the following issue:

    - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application     crash via a       crafted `.zck` file (bsc#1288144).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
373392	Linux Distros 未修补的漏洞：CVE-2026-117556	Nessus	Misc.	10/28/2026	11/2/2026	medium
373392	Linux Distros 未修補弱點：CVE-2026-117556	Nessus	Misc.	10/28/2026	11/2/2026	medium
373392	Linux Distros のパッチ未適用の脆弱性: CVE-2026-117556	Nessus	Misc.	10/28/2026	11/2/2026	medium
378049	SUSE SLED15 / SLES15 Security Update : zchunk (SUSE-SU-2026:5138-1)	Nessus	SuSE Local Security Checks	11/10/2026	11/10/2026	medium
373392	Linux Distros Unpatched Vulnerability : CVE-2026-117556	Nessus	Misc.	10/28/2026	11/2/2026	medium
379502	SUSE SLES16 Security Update : zchunk (SUSE-SU-2026:24657-1)	Nessus	SuSE Local Security Checks	11/12/2026	11/12/2026	medium
379536	openSUSE 16 Security Update : zchunk (openSUSE-SU-2026:22250-1)	Nessus	SuSE Local Security Checks	11/12/2026	11/12/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium