The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41892 advisory.

    - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374)
    - make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cfbf964c2e advisory.

    updated to 4.7.2, fixes security issues

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3823 advisory.

    A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially     crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the     PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer     overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).
    (CVE-2026-12912)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2026:0242 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-12912:
    A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially     crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the     PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer     overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_47183 advisory.

    * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:47183 advisory.

    * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0896 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-12912:
    A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially     crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the     PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer     overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
328019	Oracle Linux 10 : libtiff (ELSA-2026-41892)	Nessus	Oracle Linux Local Security Checks	2026/7/20	2026/7/20	high
327719	Fedora 44 : libtiff (2026-cfbf964c2e)	Nessus	Fedora Local Security Checks	2026/7/18	2026/7/18	high
328827	Amazon Linux 2 : libtiff, --advisory ALAS2-2026-3823 (ALAS-2026-3823)	Nessus	Amazon Linux Local Security Checks	2026/7/21	2026/7/21	high
333567	Alibaba Cloud Linux 3 : 0242: compat-libtiff3 (ALINUX3-SA-2026:0242)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/8/10	2026/8/10	high
357520	Rocky Linux 8 [CIQ] Security Update: compat-libtiff3 / compat-libtiff3-debuginfo / etc (crlsa-2026_47183)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
331680	RockyLinux 8 : compat-libtiff3 (RLSA-2026:47183)	Nessus	Rocky Linux Local Security Checks	2026/8/3	2026/8/3	high
341116	TencentOS Server 3: libtiff (TSSA-2026:0896)	Nessus	Tencent Local Security Checks	2026/8/27	2026/8/27	high

检测

插件搜索

high

high

high

high

high

high

high