The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21211-1 advisory.

    - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).
    - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).
    - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).
    - CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).
    - CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:11369 advisory.

    * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map     handling (CVE-2026-33999)

    * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory     corruption (CVE-2026-34001)

    * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory     access (CVE-2026-34003)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-530:01 advisory.

    * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map     handling (CVE-2026-33999)
      * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential     memory corruption (CVE-2026-34001)
      * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory     access (CVE-2026-34003)
      * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of     service via incorrect permissions (CVE-2026-34352)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-541:01 advisory.

    * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map     handling (CVE-2026-33999)
      * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential     memory corruption (CVE-2026-34001)
      * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory     access (CVE-2026-34003)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13414 advisory.

    Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop     environment not only on the machine where it is running, but from anywhere on the Internet and from a wide     variety of machine architectures. TigerVNC is a suite of VNC servers and clients.

    Security Fix(es):

    * xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map     handling (CVE-2026-33999)

    * xorg: xwayland: X.Org X server: Use-after-free vulnerability leads to server crash and potential memory     corruption (CVE-2026-34001)

    * xorg: xwayland: X.Org X server: Information exposure and denial of service via out-of-bounds memory     access (CVE-2026-34003)

    * TigerVNC: x0vncserver: TigerVNC x0vncserver: Information disclosure, data manipulation, and denial of     service via incorrect permissions (CVE-2026-34352)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-13414 advisory.

    - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,       CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities       Resolves: RHEL-163203       Resolves: RHEL-163271       Resolves: RHEL-163257

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
309121	SUSE SLES16 Security Update : xwayland (SUSE-SU-2026:21211-1)	Nessus	SuSE Local Security Checks	2026/4/22	2026/5/8	critical
311065	RockyLinux 9 : xorg-x11-server-Xwayland (RLSA-2026:11369)	Nessus	Rocky Linux Local Security Checks	2026/4/30	2026/4/30	high
311834	MiracleLinux 9 : tigervnc-1.15.0-6.el9_7.1 (AXSA:2026-530:01)	Nessus	Miracle Linux Local Security Checks	2026/5/4	2026/5/4	critical
311945	MiracleLinux 8 : xorg-x11-server-Xwayland-21.1.3-20.el8_10 (AXSA:2026-541:01)	Nessus	Miracle Linux Local Security Checks	2026/5/4	2026/5/4	high
312088	RHEL 8 : tigervnc (RHSA-2026:13414)	Nessus	Red Hat Local Security Checks	2026/5/4	2026/5/4	critical
312315	Oracle Linux 8 : tigervnc (ELSA-2026-13414)	Nessus	Oracle Linux Local Security Checks	2026/5/5	2026/5/5	critical

检测

插件搜索

critical

high

critical

high

critical

critical