Rocky Linux 9.6 [CIQ] 安全更新：ldb-tools / libldb / libldb-devel / libnetapi / libnetapi-devel / etc 多种漏洞 （ciqsa-2026_1637）
critical Nessus 插件 ID 364609
语言：
简介
Rocky Linux 主机缺少一个或多个安全更新。描述
Rocky Linux 9.6 主机上安装的多个程序包受到 CIQ ciqsa-2026_1637 公告中提及的多个漏洞影响。此公告汇总了 CIQ LTS 9.6中 samba SRPM 的安全修复。它解决了 97 个 CVE：
CVE-2018-1050、、CVE-2020-10760CVE-2013-4475、CVE-2020-10730CVE-2018-16857和 92 个。
Tenable 已直接从 CIQ 安全公告中提取上述描述块。
请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。
解决方案
根据 CIQ 公告 ciqsa-2026_1637 中的指导更新受影响的软件包。另见
https://github.com/ctrliq/advisories
http://www.nessus.org/u?00542085
http://www.nessus.org/u?0334c019
http://www.nessus.org/u?033d7d09
http://www.nessus.org/u?03c9d6d7
http://www.nessus.org/u?03dceb43
http://www.nessus.org/u?05ff4039
http://www.nessus.org/u?06043c5e
http://www.nessus.org/u?0f6f469b
http://www.nessus.org/u?16cc8eef
http://www.nessus.org/u?170312a8
http://www.nessus.org/u?189789a1
http://www.nessus.org/u?18cf157c
http://www.nessus.org/u?19d6e44d
http://www.nessus.org/u?1a32857c
http://www.nessus.org/u?1c5a9e99
http://www.nessus.org/u?22b5ac5e
http://www.nessus.org/u?24b1228c
http://www.nessus.org/u?25096fb7
http://www.nessus.org/u?2a8f7965
http://www.nessus.org/u?2f65912a
http://www.nessus.org/u?2ff18111
http://www.nessus.org/u?311f0dee
http://www.nessus.org/u?317dac35
http://www.nessus.org/u?31ff8cc8
http://www.nessus.org/u?323eb46a
http://www.nessus.org/u?3369d729
http://www.nessus.org/u?34fd4a13
http://www.nessus.org/u?390e274a
http://www.nessus.org/u?39f91121
http://www.nessus.org/u?4432c868
http://www.nessus.org/u?451c032d
http://www.nessus.org/u?47cb9777
http://www.nessus.org/u?494a89d5
http://www.nessus.org/u?49791571
http://www.nessus.org/u?504bce51
http://www.nessus.org/u?522a341b
http://www.nessus.org/u?53855860
http://www.nessus.org/u?540c417e
http://www.nessus.org/u?59a1d8f2
http://www.nessus.org/u?59bfd7f2
http://www.nessus.org/u?5c8b1f09
http://www.nessus.org/u?5d197e4e
http://www.nessus.org/u?69468956
http://www.nessus.org/u?6ffbb9b5
http://www.nessus.org/u?713b1a37
http://www.nessus.org/u?76364505
http://www.nessus.org/u?77e57a4b
http://www.nessus.org/u?78369033
http://www.nessus.org/u?7a160afd
http://www.nessus.org/u?7a70bc92
http://www.nessus.org/u?7d7d7f09
http://www.nessus.org/u?7da7a0db
http://www.nessus.org/u?7e2f3c2c
http://www.nessus.org/u?81298633
http://www.nessus.org/u?8e0bff47
http://www.nessus.org/u?8e21f693
http://www.nessus.org/u?90df9392
http://www.nessus.org/u?90e56a60
http://www.nessus.org/u?934d7572
http://www.nessus.org/u?97c9c75f
http://www.nessus.org/u?97d55167
http://www.nessus.org/u?988873a3
http://www.nessus.org/u?9ad9e85f
http://www.nessus.org/u?9f1d5845
http://www.nessus.org/u?9f6a6dd1
http://www.nessus.org/u?9f730882
http://www.nessus.org/u?a138802d
http://www.nessus.org/u?a30ba33a
http://www.nessus.org/u?a408d3a6
http://www.nessus.org/u?a5498ad8
http://www.nessus.org/u?aa27ae85
http://www.nessus.org/u?add85447
http://www.nessus.org/u?aea3934e
http://www.nessus.org/u?b3fc5689
http://www.nessus.org/u?b8054587
http://www.nessus.org/u?c20c8cfe
http://www.nessus.org/u?c2404f18
http://www.nessus.org/u?c2f771a2
http://www.nessus.org/u?c6c77a53
http://www.nessus.org/u?c95fbeb7
http://www.nessus.org/u?cbfe9fc1
http://www.nessus.org/u?ce4d6daf
http://www.nessus.org/u?cec234f5
http://www.nessus.org/u?cf9ba277
http://www.nessus.org/u?cfe7fbe9
http://www.nessus.org/u?d592e9fc
http://www.nessus.org/u?d6ee6812
http://www.nessus.org/u?db453875
http://www.nessus.org/u?e3deb2b3
http://www.nessus.org/u?eba25faf
http://www.nessus.org/u?ed0fc22f
http://www.nessus.org/u?eed78b1d
http://www.nessus.org/u?f25da293
http://www.nessus.org/u?f545ac0b
http://www.nessus.org/u?f56b4a8c
http://www.nessus.org/u?f7b7af46
插件详情
严重性: Critical
ID: 364609
文件名: ciq_rocky_linux_9_6_ciqsa-2026_1637.nasl
版本: 1.3
类型: Local
发布时间: 2026/10/12
最近更新时间: 2026/10/13
支持的传感器: Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
风险信息
VPR
风险因素: Critical
分数: 9.8
百分位: 100
Vendor
Vendor Severity: Critical
CVSS v2
风险因素: Critical
基本分数: 10
时间分数: 8.7
矢量: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 分数来源: CVE-2017-7494
CVSS v3
风险因素: Critical
基本分数: 10
时间分数: 9.5
矢量: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
时间矢量: CVSS:3.0/E:H/RL:O/RC:C
CVSS 分数来源: CVE-2020-1472
漏洞信息
必需的 KB 项: Host/local_checks_enabled, Host/cpu, Host/RockyLinux/release, Host/RockyLinux/rpm-list, Host/OS/extended-third-party
可利用: true
易利用性: Exploits are available
补丁发布日期: 2026/10/11
漏洞发布日期: 2008/5/28
CISA 已知可遭利用的漏洞到期日期: 2022/5/3, 2023/4/20
可利用的方式
CANVAS (CANVAS)
Core Impact
Metasploit (Samba is_known_pipename() Arbitrary Module Load)
参考资料信息
CVE: CVE-2008-1105, CVE-2008-3789, CVE-2008-4314, CVE-2009-2813, CVE-2009-2906, CVE-2009-2948, CVE-2010-0728, CVE-2012-6150, CVE-2013-4408, CVE-2013-4475, CVE-2013-4496, CVE-2013-6442, CVE-2014-0178, CVE-2014-0244, CVE-2014-3493, CVE-2014-3560, CVE-2015-3223, CVE-2015-5252, CVE-2015-5296, CVE-2015-5299, CVE-2015-5370, CVE-2015-7540, CVE-2015-7560, CVE-2016-2110, CVE-2016-2111, CVE-2016-2112, CVE-2016-2113, CVE-2016-2114, CVE-2016-2115, CVE-2016-2118, CVE-2016-2119, CVE-2016-2123, CVE-2016-2124, CVE-2016-2125, CVE-2016-2126, CVE-2017-12150, CVE-2017-12151, CVE-2017-12163, CVE-2017-14746, CVE-2017-15275, CVE-2017-2619, CVE-2017-7494, CVE-2018-1050, CVE-2018-1057, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919, CVE-2018-1139, CVE-2018-1140, CVE-2018-14629, CVE-2018-16841, CVE-2018-16851, CVE-2018-16852, CVE-2018-16853, CVE-2018-16857, CVE-2018-16860, CVE-2019-10197, CVE-2019-10218, CVE-2019-12435, CVE-2019-12436, CVE-2019-14833, CVE-2019-14861, CVE-2019-14870, CVE-2019-14902, CVE-2019-14907, CVE-2019-19344, CVE-2019-3870, CVE-2019-3880, CVE-2020-10700, CVE-2020-10704, CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14303, CVE-2020-14318, CVE-2020-14323, CVE-2020-14383, CVE-2020-1472, CVE-2020-25717, CVE-2020-27840, CVE-2021-20254, CVE-2021-20277, CVE-2021-20316, CVE-2021-23192, CVE-2021-43566, CVE-2021-44141, CVE-2021-44142, CVE-2022-1615, CVE-2022-2127, CVE-2022-32742, CVE-2022-38023, CVE-2023-3347, CVE-2023-34966, CVE-2023-34967, CVE-2023-34968, CVE-2023-4091, CVE-2023-42669