Lucene search
+L

Linux Distros Unpatched Vulnerability : CVE-2026-75806

🗓️ 29 Sep 2026 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 6 Views

Unauthenticated DoS in DTLS 1.2 as short encrypted fragments terminate associations.

Related
Refs
Code
ReporterTitlePublishedViews
Family
freebsd
FreeBSD
OpenSSL -- Multiple vulnerabilities
29 Sep 202600:00
–freebsd
alpinelinux
AlpineLinux
CVE-2026-75806
29 Sep 202615:32
–alpinelinux
circl
Circl
CVE-2026-75806
30 Sep 202612:50
–circl
cve
CVE
CVE-2026-75806
29 Sep 202615:32
–cve
cvelist
Cvelist
CVE-2026-75806 Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
29 Sep 202615:32
–cvelist
debian
Debian
[SECURITY] [DSA 6531-1] openssl security update
30 Sep 202606:09
–debian
debiancve
Debian CVE
CVE-2026-75806
29 Sep 202615:32
–debiancve
nessus
Tenable Nessus
Debian dsa-6531 : libcrypto3-udeb - security update
30 Sep 202600:00
–nessus
nessus
Tenable Nessus
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenSSL vulnerabilities (USN-8847-1)
30 Sep 202600:00
–nessus
euvd
EUVD
EUVD-2026-89011
29 Sep 202615:32
–euvd
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(351163);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/30");

  script_cve_id("CVE-2026-75806");

  script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-75806");

  script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
  script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.

  - Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a
    single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and
    authentication tag overhead. Impact summary: An attacker who can send a datagram that is routed to an
    existing DTLS 1.2 association can tear that association down without knowing any key material. This is a
    Denial of Service limited to the targeted association. There is no memory safety or confidentiality
    impact. CWE: CWE-1284: Improper Validation of Specified Quantity in Input Description: In TLS 1.2 and DTLS
    1.2 every record protected by an AEAD cipher suite carries an explicit IV followed by the ciphertext and
    an authentication tag. When decrypting such a record the record layer passed the record length to the
    cipher implementation before checking that the record was long enough to contain the explicit IV and the
    tag. For a record shorter than that overhead the cipher implementation rejected the impossible length, and
    the record layer treated this as an internal failure and raised a fatal internal_error alert instead of
    treating the record as one that failed authentication. In TLS 1.2 the same record causes a fatal
    internal_error alert instead of the expected bad_record_mac alert. Since any undecryptable record already
    terminates a TLS connection, this is a protocol conformance issue rather than a security issue in TLS. The
    fix validates the record length against the explicit IV and tag length before any AEAD processing, so that
    TLS reports bad_record_mac and DTLS silently discards the record. FIPS impact: no The affected code is
    outside the FIPS module boundary. (CVE-2026-75806)

Note that Nessus relies on the presence of the package as reported by the vendor.");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2026-75806");
  script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2026-75806");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-75806");
  script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
  script_set_attribute(attribute:"agent", value:"unix");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-75806");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_set_attribute(attribute:"vendor_unpatched", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/29");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/29");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:14.0");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:10");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:8");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:9");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:edk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:edk2-hwe");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:nodejs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:openssl1.0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:AAVMF");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:OVMF");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:compat-openssl10");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:compat-openssl11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2-ovmf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:edk2-tools-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw32-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mingw64-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:mokutil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl-perl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:openssl-static");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:ovmf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-aa64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-ia32");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-signed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-unsigned-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-unsigned-x64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:shim-x64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:AAVMF");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:OVMF");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:compat-openssl10");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:compat-openssl11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2-ovmf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2-tools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:edk2-tools-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw32-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mingw64-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:mokutil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl-perl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openssl-static");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:ovmf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-aa64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-ia32");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-signed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-unsigned-aarch64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-unsigned-x64");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:shim-x64");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
  script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
  script_require_ports("Host/OS/CentOS Linux-7", "Host/OS/CentOS Linux-8", "Host/OS/Debian Linux-12", "Host/OS/Debian Linux-14", "Host/OS/Red Hat Enterprise Linux-10", "Host/OS/Red Hat Enterprise Linux-7", "Host/OS/Red Hat Enterprise Linux-8", "Host/OS/Red Hat Enterprise Linux-9", "Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-26.04");

  exit(0);
}

if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/CentOS/rpm-list")) && empty_or_null(get_one_kb_item("Host/Debian/dpkg-l")) && empty_or_null(get_one_kb_item("Host/RedHat/rpm-list"))) audit(AUDIT_PACKAGE_LIST_MISSING);

include('linux_unpatched.inc');

var distro_constraints_array = {
  "Debian Linux-12": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "12",
        "pkgs": [
          {"reference": "libcrypto3-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl3"},
          {"reference": "libssl3-udeb"},
          {"reference": "openssl"}
        ]
      }
    ]
  },
  "Debian Linux-14": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14",
        "pkgs": [
          {"reference": "libcrypto3-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl3-udeb"},
          {"reference": "libssl3t64"},
          {"reference": "openssl"},
          {"reference": "openssl-provider-fips"},
          {"reference": "openssl-provider-legacy"}
        ]
      }
    ]
  },
  "Ubuntu Linux-14.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "14.04",
        "pkgs": [
          {"reference": "libcrypto1.0.0-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl1.0.0"},
          {"reference": "libssl1.0.0-dbg"},
          {"reference": "libssl1.0.0-udeb"},
          {"reference": "openssl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-16.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "16.04",
        "pkgs": [
          {"reference": "edk2"},
          {"reference": "libcrypto1.0.0-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl1.0.0"},
          {"reference": "libssl1.0.0-dbg"},
          {"reference": "libssl1.0.0-udeb"},
          {"reference": "nodejs"},
          {"reference": "openssl"}
        ]
      }
    ]
  },
  "Ubuntu Linux-18.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "18.04",
        "pkgs": [
          {"reference": "edk2"},
          {"reference": "libcrypto1.0.0-udeb"},
          {"reference": "libcrypto1.1-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl1.0-dev"},
          {"reference": "libssl1.0.0"},
          {"reference": "libssl1.0.0-udeb"},
          {"reference": "libssl1.1"},
          {"reference": "libssl1.1-udeb"},
          {"reference": "nodejs"},
          {"reference": "openssl"},
          {"reference": "openssl1.0"}
        ]
      }
    ]
  },
  "Ubuntu Linux-20.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "20.04",
        "pkgs": [
          {"reference": "libcrypto1.1-udeb"},
          {"reference": "libssl-dev"},
          {"reference": "libssl-doc"},
          {"reference": "libssl1.1"},
          {"reference": "libssl1.1-udeb"},
          {"reference": "openssl"},
          {"reference": "ovmf"},
          {"reference": "qemu-efi"},
          {"reference": "qemu-efi-aarch64"},
          {"reference": "qemu-efi-arm"}
        ]
      }
    ]
  },
  "Ubuntu Linux-22.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "22.04",
        "pkgs": [
          {"reference": "nodejs"},
          {"reference": "ovmf"},
          {"reference": "ovmf-ia32"},
          {"reference": "qemu-efi"},
          {"reference": "qemu-efi-aarch64"},
          {"reference": "qemu-efi-arm"}
        ]
      }
    ]
  },
  "Ubuntu Linux-24.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "24.04",
        "pkgs": [
          {"reference": "efi-shell-aa64"},
          {"reference": "efi-shell-arm"},
          {"reference": "efi-shell-ia32"},
          {"reference": "efi-shell-riscv64"},
          {"reference": "efi-shell-x64"},
          {"reference": "ovmf"},
          {"reference": "ovmf-ia32"},
          {"reference": "qemu-efi-aarch64"},
          {"reference": "qemu-efi-arm"},
          {"reference": "qemu-efi-riscv64"}
        ]
      }
    ]
  },
  "Ubuntu Linux-26.04": {
    "package_manager": "dpkg-l",
    "constraints": [
      {
        "release": "26.04",
        "pkgs": [
          {"reference": "efi-shell-aa64"},
          {"reference": "efi-shell-aa64-hwe"},
          {"reference": "efi-shell-loongarch64"},
          {"reference": "efi-shell-loongarch64-hwe"},
          {"reference": "efi-shell-riscv64"},
          {"reference": "efi-shell-riscv64-hwe"},
          {"reference": "efi-shell-x64"},
          {"reference": "efi-shell-x64-hwe"},
          {"reference": "ovmf"},
          {"reference": "ovmf-amdsev"},
          {"reference": "ovmf-amdsev-hwe"},
          {"reference": "ovmf-generic"},
          {"reference": "ovmf-generic-hwe"},
          {"reference": "ovmf-hwe"},
          {"reference": "ovmf-inteltdx"},
          {"reference": "ovmf-inteltdx-hwe"},
          {"reference": "ovmf-legacy"},
          {"reference": "ovmf-legacy-hwe"},
          {"reference": "qemu-efi-aarch64"},
          {"reference": "qemu-efi-aarch64-hwe"},
          {"reference": "qemu-efi-loongarch64"},
          {"reference": "qemu-efi-loongarch64-hwe"},
          {"reference": "qemu-efi-riscv64"},
          {"reference": "qemu-efi-riscv64-hwe"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-10": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "10",
        "pkgs": [
          {"reference": "edk2"},
          {"reference": "edk2-aarch64"},
          {"reference": "edk2-ovmf"},
          {"reference": "edk2-tools"},
          {"reference": "edk2-tools-doc"},
          {"reference": "mokutil"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "shim-aa64"},
          {"reference": "shim-unsigned-aarch64"},
          {"reference": "shim-unsigned-x64"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "CentOS Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "AAVMF"},
          {"reference": "OVMF"},
          {"reference": "mokutil"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"},
          {"reference": "ovmf"},
          {"reference": "shim"},
          {"reference": "shim-ia32"},
          {"reference": "shim-signed"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-7": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "7",
        "pkgs": [
          {"reference": "AAVMF"},
          {"reference": "OVMF"},
          {"reference": "mokutil"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"},
          {"reference": "ovmf"},
          {"reference": "shim"},
          {"reference": "shim-ia32"},
          {"reference": "shim-signed"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "CentOS Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "compat-openssl10"},
          {"reference": "edk2"},
          {"reference": "edk2-aarch64"},
          {"reference": "edk2-ovmf"},
          {"reference": "mingw-openssl"},
          {"reference": "mingw32-openssl"},
          {"reference": "mingw64-openssl"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"},
          {"reference": "shim"},
          {"reference": "shim-aa64"},
          {"reference": "shim-ia32"},
          {"reference": "shim-unsigned-aarch64"},
          {"reference": "shim-unsigned-x64"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-8": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "8",
        "pkgs": [
          {"reference": "compat-openssl10"},
          {"reference": "edk2"},
          {"reference": "edk2-aarch64"},
          {"reference": "edk2-ovmf"},
          {"reference": "mingw-openssl"},
          {"reference": "mingw32-openssl"},
          {"reference": "mingw64-openssl"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "openssl-static"},
          {"reference": "shim"},
          {"reference": "shim-aa64"},
          {"reference": "shim-ia32"},
          {"reference": "shim-unsigned-aarch64"},
          {"reference": "shim-unsigned-x64"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  },
  "Red Hat Enterprise Linux-9": {
    "package_manager": "rpm-list",
    "constraints": [
      {
        "release": "9",
        "pkgs": [
          {"reference": "compat-openssl11"},
          {"reference": "edk2"},
          {"reference": "edk2-aarch64"},
          {"reference": "edk2-ovmf"},
          {"reference": "edk2-tools"},
          {"reference": "edk2-tools-doc"},
          {"reference": "openssl"},
          {"reference": "openssl-devel"},
          {"reference": "openssl-libs"},
          {"reference": "openssl-perl"},
          {"reference": "shim"},
          {"reference": "shim-aa64"},
          {"reference": "shim-unsigned-aarch64"},
          {"reference": "shim-unsigned-x64"},
          {"reference": "shim-x64"}
        ]
      }
    ]
  }
};

var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');

var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
    var third_party_vendors = distro_constraints_values['third_party'];
    if (!empty_or_null(third_party_vendors)) {
        var vendor;
        foreach vendor (third_party_vendors) {
            if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
        }
    }
}

var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);

if (!empty_or_null(report))
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : report
  );
  exit(0);
}
else
{
  audit(AUDIT_HOST_NOT, 'affected');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Sep 2026 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.15.3
EPSS0.00387
SSVC
6