Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - Avahi 是一種可透過 mDNS/DNS-SD 通訊協定套件在區域網路上協助探索服務的系統。在 0.9-rc4 版之前任何無權限的本機使用者皆可透過傳送具有衝突發布旗標的單一 D-Bus 方法呼叫來損毀 avahi-daemon。此問題已在 0.9-rc4 版中修補。
    (CVE-2026-34933)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Avahi 是一个有助于通过 mDNS/DNS-SD 协议套件在本地网络上发现服务的系统。在低于 0.9-rc4 的版本中任何非特权本地用户可通过发送含有冲突发布标记的单一 D-Bus 方法调用使 avahi-daemon 崩溃。此问题已在版本 0.9-rc4 中修复。
    (CVE-2026-34933)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

リモートのSUSE Linux SLES12 ホストには、SUSE- SU-2026:2296-1アドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    avahi 用のこの更新では、次の問題を修正しています:

    - CVE-2026-34933:「transport_flags_from_domain」での到達可能なアサーションにより、「avahi-daemon」がクラッシュする可能性があります(bsc#1261546)。

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートの SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 ホストには、SUSE-SU-2026:2297-1 のアドバイザリに記載されている脆弱性の影響を受けるパッケージがインストールされています。

    avahi 用のこの更新では、次の問題を修正しています:

    - CVE-2026-34933:バージョン 0.9-rc4 より前では、パブリッシュフラグ(bsc#1261546)が競合する単一の D-Bus メソッド呼び出しを送信することで、権限のないローカルユーザーが avahi-daemon をクラッシュさせる可能性があります。

Tenable は、前述の記述ブロックを SUSE セキュリティアドバイザリから直接抽出しています。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Avahi は、mDNS/DNS-SD プロトコルスイートを介したローカルネットワークでのサービス発見を容易にするシステムです。バージョン 0.9-rc4 より前のバージョンでは、権限のないローカルユーザーが、競合するパブリッシュフラグを持つ単一の D-Bus メソッド呼び出しを送信することで、avahi-daemon をクラッシュさせる可能性があります。この問題は、バージョン 0.9-rc4 でパッチされています。
    (CVE-2026-34933)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

According to the versions of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol     suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single     D-Bus method call with conflicting publish flags. This issue has been patched in version     0.9-rc4.(CVE-2026-34933)

Tenable has extracted the preceding description block directly from the EulerOS avahi security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol     suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single     D-Bus method call with conflicting publish flags. This issue has been patched in version     0.9-rc4.(CVE-2026-34933)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization avahi security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the  package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol     suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single     D-Bus method call with conflicting publish flags. This issue has been patched in version     0.9-rc4.(CVE-2026-34933)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol     suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single     D-Bus method call with conflicting publish flags. This issue has been patched in version     0.9-rc4.(CVE-2026-34933)

    Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol     suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an     unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to     the same domain (e.g., 'h.local' as a CNAME for 'h.local'). This causes unbounded recursion in the     lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where     AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by     nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524.(CVE-2026-24401)

Tenable has extracted the preceding description block directly from the EulerOS avahi security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the avahi packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol     suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single     D-Bus method call with conflicting publish flags. This issue has been patched in version     0.9-rc4.(CVE-2026-34933)

    Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol     suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an     unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to     the same domain (e.g., 'h.local' as a CNAME for 'h.local'). This causes unbounded recursion in the     lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where     AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by     nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524.(CVE-2026-24401)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization avahi security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol     suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single     D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.
    (CVE-2026-34933)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:2296-1 advisory.

    This update for avahi fixes the following issue:

    - CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon`     (bsc#1261546).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2297-1 advisory.

    This update for avahi fixes the following issue:

    - CVE-2026-34933: Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending     a single D-Bus       method call with conflicting publish flags (bsc#1261546).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
305007	Linux Distros 未修補的弱點：CVE-2026-34933	Nessus	Misc.	2026/4/5	2026/7/5	medium
305007	Linux Distros 未修补的漏洞：CVE-2026-34933	Nessus	Misc.	2026/4/5	2026/7/5	medium
321024	SUSE SLES12 セキュリティ更新 : avahi (SUSE-SU-2026:2296-1)	Nessus	SuSE Local Security Checks	2026/6/14	2026/6/14	medium
321059	SUSE SLED15 / SLES15 セキュリティ更新 : avahi (SUSE-SU-2026:2297-1)	Nessus	SuSE Local Security Checks	2026/6/14	2026/6/14	medium
305007	Linux Distros のパッチ未適用の脆弱性: CVE-2026-34933	Nessus	Misc.	2026/4/5	2026/7/5	medium
323173	EulerOS 2.0 SP15 : avahi (EulerOS-SA-2026-2474)	Nessus	Huawei Local Security Checks	2026/6/27	2026/6/27	medium
326111	EulerOS 2.0 SP12 : avahi (EulerOS-SA-2026-2579)	Nessus	Huawei Local Security Checks	2026/7/10	2026/7/10	medium
328565	EulerOS Virtualization 2.12.0 : avahi (EulerOS-SA-2026-2767)	Nessus	Huawei Local Security Checks	2026/7/21	2026/7/21	medium
328620	EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2721)	Nessus	Huawei Local Security Checks	2026/7/21	2026/7/21	medium
320283	EulerOS 2.0 SP13 : avahi (EulerOS-SA-2026-2278)	Nessus	Huawei Local Security Checks	2026/6/10	2026/6/10	medium
320696	EulerOS Virtualization 2.13.1 : avahi (EulerOS-SA-2026-2365)	Nessus	Huawei Local Security Checks	2026/6/12	2026/6/12	medium
323146	EulerOS 2.0 SP15 : avahi (EulerOS-SA-2026-2433)	Nessus	Huawei Local Security Checks	2026/6/27	2026/6/27	medium
305007	Linux Distros Unpatched Vulnerability : CVE-2026-34933	Nessus	Misc.	2026/4/5	2026/7/5	medium
320713	EulerOS Virtualization 2.13.0 : avahi (EulerOS-SA-2026-2394)	Nessus	Huawei Local Security Checks	2026/6/12	2026/6/12	medium
321024	SUSE SLES12 Security Update : avahi (SUSE-SU-2026:2296-1)	Nessus	SuSE Local Security Checks	2026/6/14	2026/6/14	medium
321059	SUSE SLED15 / SLES15 Security Update : avahi (SUSE-SU-2026:2297-1)	Nessus	SuSE Local Security Checks	2026/6/14	2026/6/14	medium
326224	EulerOS 2.0 SP12 : avahi (EulerOS-SA-2026-2519)	Nessus	Huawei Local Security Checks	2026/7/10	2026/7/10	medium
320233	EulerOS 2.0 SP13 : avahi (EulerOS-SA-2026-2321)	Nessus	Huawei Local Security Checks	2026/6/10	2026/6/10	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium