Linux Distros Unpatched Vulnerability : CVE-2026-89422
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
| Erlang/OTP -- multiple vulnerabilities in ssl, ssh and asn1 | 22 Sep 202600:00 | – | freebsd | |
| CVE-2026-89422 | 22 Sep 202610:00 | – | circl | |
| CVE-2026-89422 | 22 Sep 202608:49 | – | cve | |
| CVE-2026-89422 TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension | 22 Sep 202608:49 | – | cvelist | |
| CVE-2026-89422 | 22 Sep 202608:49 | – | debiancve | |
| EUVD-2026-84338 | 22 Sep 202608:49 | – | euvd | |
| Anthropic-Credited-CVEs — Updated! | 3 Sep 202601:25 | – | kitploit | |
| TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension | 24 Sep 202608:45 | – | mscve | |
| CVE-2026-89422 | 22 Sep 202609:17 | – | nvd | |
| AZL-103428 CVE-2026-89422 affecting package erlang 26.2.5.21-6 | 22 Sep 202609:17 | – | osv |
10
| Source | Link |
|---|---|
| security-tracker | www.security-tracker.debian.org/tracker/CVE-2026-89422 |
| ubuntu | www.ubuntu.com/security/CVE-2026-89422 |
| cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(349173);
script_version("1.2");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/23");
script_cve_id("CVE-2026-89422");
script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-89422");
script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.
- Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allows a peer that answers a
TLS 1.3 client connection to impersonate the intended server. A pre_shared_key extension in the
ServerHello that the client never offered causes the client to complete the handshake without validating
the server's certificate, so ssl:connect returns {ok, Socket} against a peer holding no certificate, no
private key and no prior session. tls_client_connection_1_3:handle_server_hello/2 passes the received
extension to tls_gen_connection_1_3:handle_resumption/2, which sets resumption = true on its mere presence
without checking that the client offered a PSK. tls_handshake_1_3:get_pre_shared_key/4 meanwhile falls
back to the all-zero no PSK value and keys the handshake with the ordinary non-PSK schedule, so the
attacker's own ephemeral key suffices. The resumption flag then routes maybe_resumption/1 straight to
wait_finished, skipping the certificate-handling states, so certificate path validation, verify_fun,
hostname verification, partial_chain, CRL checking and OCSP stapling are all bypassed. The default client
configuration is affected; clients restricted to TLS 1.2 are not. This issue affects OTP from OTP 22.2
before OTP 27.3.4.18, OTP 28.5.0.7, and OTP 29.1.1, corresponding to ssl from 9.5 before 11.2.12.13,
11.6.0.6, and 11.7.7. (CVE-2026-89422)
Note that Nessus relies on the presence of the package as reported by the vendor.");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2026-89422");
script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-89422");
script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
script_set_attribute(attribute:"agent", value:"unix");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N");
script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-89422");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vendor_unpatched", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/22");
script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/23");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:13.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:14.0");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:erlang");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
script_require_ports("Host/OS/Debian Linux-12", "Host/OS/Debian Linux-13", "Host/OS/Debian Linux-14", "Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-26.04");
exit(0);
}
if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/Debian/dpkg-l"))) audit(AUDIT_PACKAGE_LIST_MISSING);
include('linux_unpatched.inc');
var distro_constraints_array = {
"Debian Linux-12": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "12",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-22.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "22.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-24.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "24.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Debian Linux-13": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "13",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Debian Linux-14": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "14",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-26.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "26.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-14.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "14.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-appmon"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-dbg"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-gs"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-percept"},
{"reference": "erlang-pman"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-test-server"},
{"reference": "erlang-toolbar"},
{"reference": "erlang-tools"},
{"reference": "erlang-tv"},
{"reference": "erlang-typer"},
{"reference": "erlang-webtool"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-16.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "16.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-dbg"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-gs"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-percept"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-test-server"},
{"reference": "erlang-tools"},
{"reference": "erlang-typer"},
{"reference": "erlang-webtool"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-18.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "18.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-20.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "20.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
}
};
var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
var third_party_vendors = distro_constraints_values['third_party'];
if (!empty_or_null(third_party_vendors)) {
var vendor;
foreach vendor (third_party_vendors) {
if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
}
}
}
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);
if (!empty_or_null(report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : report
);
exit(0);
}
else
{
audit(AUDIT_HOST_NOT, 'affected');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Sep 2026 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 49.3
EPSS0.00644
SSVC