There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a
    Denial of Service (DoS) via supplying a crafted input. (CVE-2026-38754)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Busybox v1.38.0 的 ifsbreakup（） 函数 （shell/ash.c） 中的堆溢出允许攻击者通过提供构建的输入造成拒绝服务 （DoS）。（CVE-2026-38754）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - Busybox v1.38.0 的 ifsbreakup（） 函式 （shell/ash.c） 中的堆積溢位允許攻擊者透過提供特製的輸入來造成拒絕服務 （DoS）。（CVE-2026-38754）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Busybox v1.38.0のifsbreakup()関数(shell/ash.c)にヒープオーバーフローがあるため、攻撃者が細工された入力を提供することを介して、サービス拒否(DoS)を引き起こす可能性があります。(CVE-2026-38754)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

リモートの openSUSE 16 ホストに、複数の脆弱性の影響を受けているパッケージがインストールされています。これらの脆弱性は openSUSE-SU-2026:22040-1 アドバイザリで言及されています。

    - CVE-2023-42366:next_token 関数のヒープバッファオーバーフロー(bsc#1217586)。
    - CVE-2026-38752:細工された AWK スクリプトによるサービス拒否(bsc#1271544)。
    - CVE-2026-38753:awk_sub() での use-after-free(bsc#1271545)。
    - CVE-2026-38754:ifsbreakup() のヒープオーバーフロー(bsc#1271547)。
    - CVE-2026-38755:evalcommand() のヒープオーバーフロー(bsc#1271548)。

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the     file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T     leads to null pointer dereference. Local access is required to approach this attack. The exploit has been     disclosed to the public and may be used. The name of the patch is     83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this     issue.(CVE-2026-76014)

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to     cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to     cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130374 advisory.

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22040-1 advisory.

    - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586).
    - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544).
    - CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545).
    - CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547).
    - CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input. (CVE-2026-38754)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to     cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to     cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to     cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the     file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T     leads to null pointer dereference. Local access is required to approach this attack. The exploit has been     disclosed to the public and may be used. The name of the patch is     83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this     issue.(CVE-2026-76014)

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to     cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
462699	Echo: busybox: security update to 1:1.38.0-3busybox-1.38: security update to 1.38.0+e2	Tenable Self-Hosted Container Security	Echo Local Security Checks	2026/10/2	2026/10/2	high
462699	Echo: busybox: security update to 1:1.38.0-3busybox-1.38: security update to 1.38.0+e2	Tenable Cloud Security	Echo Local Security Checks	2026/10/2	2026/10/2	high
327355	Linux Distros 未修补的漏洞：CVE-2026-38754	Nessus	Misc.	2026/7/16	2026/11/5	high
327355	Linux Distros 未修補弱點：CVE-2026-38754	Nessus	Misc.	2026/7/16	2026/11/5	high
327355	Linux Distros のパッチ未適用の脆弱性: CVE-2026-38754	Nessus	Misc.	2026/7/16	2026/11/5	high
364346	openSUSE 16 セキュリティ更新:busybox(openSUSE-SU-2026:22040-1)	Nessus	SuSE Local Security Checks	2026/10/9	2026/10/9	medium
376772	EulerOS 2.0 SP12 : busybox (EulerOS-SA-2026-4470)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	medium
364782	EulerOS 2.0 SP11 : busybox (EulerOS-SA-2026-4215)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/13	high
366287	Unity Linux 20.1070e Security Update: busybox (UTSA-2026-130374)	Nessus	Unity Linux Local Security Checks	2026/10/15	2026/10/15	high
364346	openSUSE 16 Security Update : busybox (openSUSE-SU-2026:22040-1)	Nessus	SuSE Local Security Checks	2026/10/9	2026/10/9	medium
327355	Linux Distros Unpatched Vulnerability : CVE-2026-38754	Nessus	Misc.	2026/7/16	2026/11/5	high
364904	EulerOS 2.0 SP13 : busybox (EulerOS-SA-2026-4124)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/13	high
364759	EulerOS 2.0 SP13 : busybox (EulerOS-SA-2026-4033)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/13	high
364963	EulerOS 2.0 SP11 : busybox (EulerOS-SA-2026-4306)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/13	high
376754	EulerOS 2.0 SP12 : busybox (EulerOS-SA-2026-4393)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	medium

检测

插件搜索

high

high

high

high

high

medium

medium

high

high

medium

high

high

high

high

medium