The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21464-1 advisory.

    - CVE-2025-24898: openssl: use-after-free in `ssl::select_next_proto` due to improper lifetime handling     (bsc#1270429).
    - CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:derive` when using     OpenSSL 1.1.1       (bsc#1270198).
    - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length       (bsc#1270582).
    - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap_key()`     (bsc#1270683).
    - CVE-2026-41681: openssl: stack corruption due to `MdCtxRef::digest_final()` writing past caller buffer     with no length       check (bsc#1270721).
    - CVE-2026-41898: openssl: information leak to network peers due to unchecked callback-returned length in     PSK and       cookie generate trampolines (bsc#1270831).
    - CVE-2026-42327: openssl: undefined behavior in `X509Ref::ocsp_responders` when processing certificates     with non-UTF-8       OCSP URLs (bsc#1270470).
    - CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding     (bsc#1270877).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
364123	SUSE SLES16 Security Update : rustup (SUSE-SU-2026:24014-1)	Nessus	SuSE Local Security Checks	2026/10/8	2026/10/22	critical
331446	openSUSE 16 Security Update : libkrun (openSUSE-SU-2026:21464-1)	Nessus	SuSE Local Security Checks	2026/7/31	2026/10/28	critical

检测

插件搜索

critical

critical