Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 libslirp 的 DHCPv6 和 TFTP 响应生成器中发现基于堆的缓冲区溢出。当主机配置了小型接口 MTU 时，访客提供的 DHCPv6 CLIENTID 选项或 TFTP blksize 选项可通过攻击者控制的内容和长度使回复缓冲区溢出，从而导致拒绝服务并可能在主机进程中执行任意代码。默认接口 MTU 不受影响。
    (CVE-2026-95508)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 libslirp 的 DHCPv6 和 TFTP 回應產生器中發現堆積型緩衝區溢位。當主機設定小型介面 MTU 時，客體提供的 DHCPv6 CLIENTID 選項或 TFTP blksize 選項可能會使用攻擊者控制的內容和長度使回覆緩衝區溢位，進而導致拒絕服務，並在主機處理程序中執行任意程式碼。預設介面 MTU 不受影響。
    (CVE-2026-95508)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - libslirp の DHCPv6 および TFTP 応答ビルダーで、ヒープベースのバッファオーバーフローが見つかりました。ホストが小さいインターフェイス MTU で構成されている場合、ゲスト指定の DHCPv6 CLIENTID オプションまたは TFTP blksize オプションが、攻撃者が制御するコンテンツと長さで応答バッファをオーバーフローする可能性があります。これにより、ホストプロセスでサービス拒否および任意のコードが実行される可能性があります。デフォルトのインターフェイス MTU は影響を受けません。
    (CVE-2026-95508)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host     is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option     can overflow the reply buffer with attacker-controlled content and length, resulting in denial of service     and potentially arbitrary code execution in the host process. The default interface MTU is not affected.
    (CVE-2026-95508)

Note that Nessus relies on the presence of the package as reported by the vendor.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794351548 advisory.

  - A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host     is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option     can overflow the reply buffer with attacker-controlled content and length, resulting in denial of service     and potentially arbitrary code execution in the host process. The default interface MTU is not affected.
    (CVE-2026-95508)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794351730 advisory.

  - A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host     is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option     can overflow the reply buffer with attacker-controlled content and length, resulting in denial of service     and potentially arbitrary code execution in the host process. The default interface MTU is not affected.
    (CVE-2026-95508)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794351730 advisory.

  - A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host     is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option     can overflow the reply buffer with attacker-controlled content and length, resulting in denial of service     and potentially arbitrary code execution in the host process. The default interface MTU is not affected.
    (CVE-2026-95508)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
348752	Linux Distros 未修补的漏洞：CVE-2026-95508	Nessus	Misc.	9/22/2026	11/6/2026	high
348752	Linux Distros 未修補弱點：CVE-2026-95508	Nessus	Misc.	9/22/2026	11/6/2026	high
348752	Linux Distros のパッチ未適用の脆弱性: CVE-2026-95508	Nessus	Misc.	9/22/2026	11/6/2026	high
348752	Linux Distros Unpatched Vulnerability : CVE-2026-95508	Nessus	Misc.	9/22/2026	11/6/2026	high
378702	AlmaLinux 9.2 [TuxCare] Security Update: libslirp / libslirp-devel (ALMALINUX9.2:CLSA-2026:1794351548)	Nessus	Alma Linux Local Security Checks	11/11/2026	11/11/2026	high
378703	Rocky Linux 9.6 [TuxCare] Security Update: libslirp / libslirp-devel (ALMALINUX9.6:CLSA-2026:1794351730)	Nessus	Rocky Linux Local Security Checks	11/11/2026	11/11/2026	high
378704	AlmaLinux 9.6 [TuxCare] Security Update: libslirp / libslirp-devel (ALMALINUX9.6:CLSA-2026:1794351730)	Nessus	Alma Linux Local Security Checks	11/11/2026	11/11/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high