Linux Distros Unpatched Vulnerability : CVE-2026-59250
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
| Erlang/OTP -- megaco flex scanner buffer overflow | 27 Jul 202600:00 | – | freebsd | |
| CVE-2026-59250 | 27 Jul 202615:25 | – | attackerkb | |
| CVE-2026-59250 | 28 Jul 202617:22 | – | circl | |
| CVE-2026-59250 | 27 Jul 202615:25 | – | cve | |
| CVE-2026-59250 Megaco flex scanner buffer overflow via oversized property parm name | 27 Jul 202615:25 | – | cvelist | |
| CVE-2026-59250 | 27 Jul 202615:25 | – | debiancve | |
| Erlang/OTP 17.0 < 27.3.4.15 / 28.0 < 28.5.0.4 / 29.0 < 29.0.4 Multiple Vulnerabilities | 31 Jul 202600:00 | – | nessus | |
| FreeBSD : Erlang/OTP -- megaco flex scanner buffer overflow (445da2cc-89e1-11f1-b35c-4c526214c986) | 28 Jul 202600:00 | – | nessus | |
| EUVD-2026-49324 | 27 Jul 202615:25 | – | euvd | |
| CVE-2026-59250 | 27 Jul 202616:18 | – | nvd |
10
| Source | Link |
|---|---|
| security-tracker | www.security-tracker.debian.org/tracker/CVE-2026-59250 |
| ubuntu | www.ubuntu.com/security/CVE-2026-59250 |
| cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(330404);
script_version("1.1");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/28");
script_cve_id("CVE-2026-59250");
script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-59250");
script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.
- Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated
attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denial-of-
service crash) by sending a single text-encoded H.248/Megaco message containing an oversized property parm
name. When tokenizing a Local/Remote descriptor, mfs_load_property_groups extracts the attacker-controlled
property name (bounded only by the message length) and, when no value follows, formats it into a fixed
512-byte error_msg field of the MfsErlDrvData struct using an unchecked sprintf call. Names longer than
roughly 452 bytes overflow into the immediately following struct fields (text_buf, text_ptr, term_spec,
term_spec_size, term_spec_index), overwriting live pointers and counters with attacker-chosen bytes.
Subsequent scanner code writes and frees through the corrupted pointers, producing arbitrary write and
arbitrary free primitives inside the BEAM VM process, which can be leveraged for remote code execution. On
builds compiled with _FORTIFY_SOURCE the overflow is detected at runtime and terminates the process with
SIGABRT, resulting in denial of service. The overflow occurs in the flex scanner before any grammar or
Megaco-level authentication processing, so exploitation requires only network reachability to the megaco
transport port on a node configured with {scanner, flex}. This vulnerability is associated with program
files lib/megaco/src/flex/megaco_flex_scanner_drv.flex.src and program routines mfs_load_property_groups.
This issue affects OTP from OTP 17.0 before OTP 29.0.4, OTP 28.5.0.4 and OTP 27.3.4.15, corresponding to
megaco from 3.17.1 before 4.9.1, 4.8.3.1 and 4.7.2.2. Versions prior to OTP 17.0 are also affected but are
not listed because the OTP version scheme is only defined from OTP 17.0 onwards. (CVE-2026-59250)
Note that Nessus relies on the presence of the package as reported by the vendor.");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2026-59250");
script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-59250");
script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
script_set_attribute(attribute:"agent", value:"unix");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N");
script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-59250");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vendor_unpatched", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2026/07/27");
script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/28");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:11.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:13.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:14.0");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:erlang");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
script_require_ports("Host/OS/Debian Linux-11", "Host/OS/Debian Linux-12", "Host/OS/Debian Linux-13", "Host/OS/Debian Linux-14", "Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-26.04");
exit(0);
}
if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/Debian/dpkg-l"))) audit(AUDIT_PACKAGE_LIST_MISSING);
include('linux_unpatched.inc');
var distro_constraints_array = {
"Debian Linux-12": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "12",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-22.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "22.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-24.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "24.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Debian Linux-11": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "11",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-20.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "20.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Debian Linux-13": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "13",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Debian Linux-14": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "14",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-26.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "26.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-14.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "14.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-appmon"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-dbg"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-gs"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-percept"},
{"reference": "erlang-pman"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-test-server"},
{"reference": "erlang-toolbar"},
{"reference": "erlang-tools"},
{"reference": "erlang-tv"},
{"reference": "erlang-typer"},
{"reference": "erlang-webtool"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-16.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "16.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-dbg"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-gs"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-percept"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-test-server"},
{"reference": "erlang-tools"},
{"reference": "erlang-typer"},
{"reference": "erlang-webtool"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-18.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "18.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
}
};
var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
var third_party_vendors = distro_constraints_values['third_party'];
if (!empty_or_null(third_party_vendors)) {
var vendor;
foreach vendor (third_party_vendors) {
if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
}
}
}
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);
if (!empty_or_null(report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : report
);
exit(0);
}
else
{
audit(AUDIT_HOST_NOT, 'affected');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Jul 2026 00:00Current
6.8Medium risk
Vulners AI Score6.8
CVSS 48.3
EPSS0.0073
SSVC