Lucene search
+L

Linux Distros Unpatched Vulnerability : CVE-2026-55951

🗓️ 03 Sep 2026 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 4 Views

Erlang/OTP httpc unbounded header memory allocation enabling DoS via malicious HTTP server.

Related
Refs
Code
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(342687);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/04");

  script_cve_id("CVE-2026-55951");

  script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-55951");

  script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
  script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.

  - The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received
    from a server. The max_header_size option defaults to nolimit, and httpc_response:parse_headers/6
    accumulates every header into a list before the length check runs (which only fires after the terminating
    CRLF CRLF is received). A malicious or compromised HTTP server can send an arbitrarily large number of
    headers, or headers with very large values, causing the client process to allocate unbounded memory until
    the system runs out of memory or the BEAM VM crashes. A proof-of-concept server sending 100,000 headers of
    roughly 4000 bytes each caused the client VM to allocate over 13 GB of memory in under 30 seconds. Any
    application using httpc:request/4,5 to connect to untrusted servers is affected. No authentication is
    required: any server the client connects to (including via a redirect or man-in-the-middle) can trigger
    the exhaustion. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP
    28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4
    before 9.6.2.3, and from 9.7 before 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before
    5.10, is affected is unknown. (CVE-2026-55951)

Note that Nessus relies on the presence of the package as reported by the vendor.");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2026-55951");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-55951");
  script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-55951");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_set_attribute(attribute:"vendor_unpatched", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/01");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/03");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:13.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:14.0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:erlang");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
  script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
  script_require_ports("Host/OS/Debian Linux-12", "Host/OS/Debian Linux-13", "Host/OS/Debian Linux-14", "Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-26.04");

  exit(0);
}

if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/Debian/dpkg-l"))) audit(AUDIT_PACKAGE_LIST_MISSING);

include('linux_unpatched.inc');

var distro_constraints_array = {
  "Debian Linux-12": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "12",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-erl-docgen"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-ftp"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-manpages"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-tftp"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-22.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "22.04",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-erl-docgen"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-ftp"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-manpages"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-tftp"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-24.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "24.04",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-erl-docgen"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-ftp"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-manpages"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-tftp"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Debian Linux-13": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "13",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-ftp"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-tftp"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Debian Linux-14": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-ftp"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-tftp"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-26.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "26.04",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-ftp"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-tftp"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-14.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14.04",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-appmon"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-base-hipe"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-corba"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-dbg"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-erl-docgen"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-gs"},
          {"reference": "erlang-ic"},
          {"reference": "erlang-ic-java"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-manpages"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-percept"},
          {"reference": "erlang-pman"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-test-server"},
          {"reference": "erlang-toolbar"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-tv"},
          {"reference": "erlang-typer"},
          {"reference": "erlang-webtool"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-16.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "16.04",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-base-hipe"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-corba"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-dbg"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-erl-docgen"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-gs"},
          {"reference": "erlang-ic"},
          {"reference": "erlang-ic-java"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-manpages"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-percept"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-test-server"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-typer"},
          {"reference": "erlang-webtool"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-18.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "18.04",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-base-hipe"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-corba"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-erl-docgen"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-ic"},
          {"reference": "erlang-ic-java"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-manpages"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-20.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "20.04",
        "pkgs": [
          {"reference": "erlang"},
          {"reference": "erlang-asn1"},
          {"reference": "erlang-base"},
          {"reference": "erlang-base-hipe"},
          {"reference": "erlang-common-test"},
          {"reference": "erlang-crypto"},
          {"reference": "erlang-debugger"},
          {"reference": "erlang-dev"},
          {"reference": "erlang-dialyzer"},
          {"reference": "erlang-diameter"},
          {"reference": "erlang-doc"},
          {"reference": "erlang-edoc"},
          {"reference": "erlang-eldap"},
          {"reference": "erlang-erl-docgen"},
          {"reference": "erlang-et"},
          {"reference": "erlang-eunit"},
          {"reference": "erlang-examples"},
          {"reference": "erlang-ftp"},
          {"reference": "erlang-inets"},
          {"reference": "erlang-jinterface"},
          {"reference": "erlang-manpages"},
          {"reference": "erlang-megaco"},
          {"reference": "erlang-mnesia"},
          {"reference": "erlang-mode"},
          {"reference": "erlang-nox"},
          {"reference": "erlang-observer"},
          {"reference": "erlang-odbc"},
          {"reference": "erlang-os-mon"},
          {"reference": "erlang-parsetools"},
          {"reference": "erlang-public-key"},
          {"reference": "erlang-reltool"},
          {"reference": "erlang-runtime-tools"},
          {"reference": "erlang-snmp"},
          {"reference": "erlang-src"},
          {"reference": "erlang-ssh"},
          {"reference": "erlang-ssl"},
          {"reference": "erlang-syntax-tools"},
          {"reference": "erlang-tftp"},
          {"reference": "erlang-tools"},
          {"reference": "erlang-wx"},
          {"reference": "erlang-x11"},
          {"reference": "erlang-xmerl"}
        ]
      }
    ]
  }
};

var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');

var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
    var third_party_vendors = distro_constraints_values['third_party'];
    if (!empty_or_null(third_party_vendors)) {
        var vendor;
        foreach vendor (third_party_vendors) {
            if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
        }
    }
}

var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);

if (!empty_or_null(report))
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : report
  );
  exit(0);
}
else
{
  audit(AUDIT_HOST_NOT, 'affected');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 Sep 2026 00:00Current
5.5Medium risk
Vulners AI Score5.5
CVSS 48.2
EPSS0.00382
SSVC
4