Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Botan 是一個 C++ 加密程式庫。在之前 3.12.0，BER 資料中的某些無限長度編碼模式可能會導致剖析器中的二次行為，進而導致拒絕服務。即使在需要編碼為 DER 的結構中，這種 BER 編碼也被接受，這禁止無限長度的編碼。此弱點已在 3.12.0 中修正。(CVE-2026-44378)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Botan 是一个 C++ 密码库。在之前 3.12.0，BER 数据中的某些无限长度编码模式可在解析器中造成二次行为，从而导致拒绝服务。即使在需要编码为 DER 的结构中，此类 BER 编码也被接受，DER 禁止无限长度编码。此漏洞已在 3.12.0 中修复。(CVE-2026-44378)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Botan は C++ 暗号ライブラリです。3.12.0 以前では、BER データの長さ不定エンコーディングの特定のパターンが、パーサーで二次の動作を引き起こし、サービス拒否を引き起こす可能性があります。このような BER エンコーディングは、長さ不定のエンコーディングを禁止している DER としてエンコードする必要がある構造でも受け入れられました。この脆弱性は 3.12.0 で修正されました。(CVE-2026-44378)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in     BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER     encodings were accepted even in structures which are required to be encoded as DER, which prohibits     indefinite length encodings. This vulnerability is fixed in 3.12.0. (CVE-2026-44378)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6412 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6412-1                   security@debian.org     https://www.debian.org/security/                                  Aron Xu     August 05, 2026                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : botan3     CVE ID         : CVE-2026-44378     Debian Bug     :

    Multiple security issues were discovered in Botan, a C++ cryptography     library, which could result in denial of service, certificate validation     bypass or authentication bypass.

    These issues have been addressed by updating botan3 to the new upstream     release 3.12.0. As a consequence this update changes the SONAME of the     shared library, and the runtime library package is renamed from     libbotan-3-7 to libbotan-3-12. No package in the stable distribution links     against the library, so no other packages in trixie are affected by this     change.

    The libbotan-3-7 package is no longer built and will not be removed     automatically on upgrade if it had been installed manually. Locally built     or third-party software linking against libbotan-3-7 needs to be rebuilt     against libbotan-3-12, after which the old library package can be removed.

    For the stable distribution (trixie), this problem has been fixed in     version 3.12.0+dfsg-2~deb13u1.

    We recommend that you upgrade your botan3 packages.

    For the detailed security status of botan3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/botan3

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
315713	Linux Distros 未修補弱點：CVE-2026-44378	Nessus	Misc.	2026/5/20	2026/8/5	medium
315713	Linux Distros 未修补的漏洞：CVE-2026-44378	Nessus	Misc.	2026/5/20	2026/8/5	medium
315713	Linux Distros のパッチ未適用の脆弱性: CVE-2026-44378	Nessus	Misc.	2026/5/20	2026/8/5	medium
315713	Linux Distros Unpatched Vulnerability : CVE-2026-44378	Nessus	Misc.	2026/5/20	2026/8/5	medium
332087	Debian dsa-6412 : botan - security update	Nessus	Debian Local Security Checks	2026/8/5	2026/8/5	medium

检测

插件搜索

medium

medium

medium

medium

medium