The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:73511 advisory.

    * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)
      * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_73511 advisory.

    * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)

    * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73512 advisory.

    The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-     purpose programming language to do quick and easy text pattern matching and reformatting jobs.

    Security Fix(es):

    * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)

    * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service     (CVE-2026-40553)

    * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73512 advisory.

    * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)

    * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service     (CVE-2026-40553)

    * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784217178 advisory.

  - Use After Free vulnerability has been found in io.c program file of gawk (do_getline_redir() routine).
    This issue may lead to a crash. It affects gawk in versions 5.4.0 and below. (CVE-2026-40467)

  - Integer overflow vulnerability has been found in builtin.c program file of gawk (do_sub() routine). This     issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects     32-bit builds of gawk in versions 5.4.0 and below. (CVE-2026-40469)

  - Buffer overflow vulnerability has been found in extension/readdir.c program file of gawk (ftype()     routine). This issue could be used to crash the program and potentially to achieve code execution,     although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.
    (CVE-2026-40553)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73429 advisory.

    The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-     purpose programming language to do quick and easy text pattern matching and reformatting jobs.

    Security Fix(es):

    * gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)

    * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service     (CVE-2026-40553)

    * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
362410	AlmaLinux 8 : gawk (ALSA-2026:73511)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium
362859	Rocky Linux 8 [CIQ] Security Update: gawk / gawk-debuginfo / gawk-debugsource Multiple Vulnerabilities (crlsa-2026_73511)	Nessus	Rocky Linux Local Security Checks	2026/10/3	2026/10/3	medium
351219	RHEL 9 : gawk (RHSA-2026:73512)	Nessus	Red Hat Local Security Checks	2026/9/29	2026/9/30	medium
351438	RockyLinux 9 : gawk (RLSA-2026:73512)	Nessus	Rocky Linux Local Security Checks	2026/9/30	2026/9/30	medium
359585	Rocky Linux 9.6 [TuxCare] Security Update: gawk / gawk-all-langpacks / gawk-devel / gawk-doc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784217178)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
351220	RHEL 10 : gawk (RHSA-2026:73429)	Nessus	Red Hat Local Security Checks	2026/9/29	2026/10/5	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium