There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can
    trigger iconv conversion of untrusted EUC-KR text to UTF-8. (CVE-2025-26519)

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file
    src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in
    inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,
    it is recommended to deploy a patch. (CVE-2026-6042)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file
    src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in
    inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,
    it is recommended to deploy a patch. (CVE-2026-6042)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file
    src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in
    inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,
    it is recommended to deploy a patch. (CVE-2026-6042)

  - An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during
    qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements
    must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo
    number on 64-bit platforms, which is not practical). (CVE-2026-40200)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 musl libc 及之前版本中发现一个安全缺陷 1.2.6。受影响的是组件 GB18030 4 字节解码器的 src/locale/iconv.c 文件的函数 iconv。执行操纵导致算法复杂性低下。必须从本地位置发起攻击。为修复次问题，建议部署补丁。(CVE-2026-6042)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 1.2.6之前的 musl libc 中發現一個安全性瑕疵。受影響的是元件 GB18030 4 位元組解碼器的 src/locale/iconv.c 檔案中的函式 iconv。執行操控會導致演算法複雜度低效。攻擊必須從本機位置起始。為修復此問題，建議部署修補程式。(CVE-2026-6042)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 1.2.6までの musl libc でセキュリティ欠陥が見つかりました。影響を受けるのは、コンポーネント GB18030 4-byte Decoder の ファイル src/locale/iconv.c の関数 iconv です。操作を実行すると、アルゴリズムの複雑さが非効率的になります。攻撃はローカル位置から開始する必要があります。この問題を修正するには、パッチを適用することを推奨します。(CVE-2026-6042)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file     src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in     inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,     it is recommended to deploy a patch. (CVE-2026-6042)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
427813	Alpine: multiple musl packages: security update to 1.2.5-r10	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/5/30	2026/7/20	medium
427813	Alpine: multiple musl packages: security update to 1.2.5-r10	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/5/30	2026/7/20	medium
440283	Alpine: multiple musl packages: security update to 1.2.5-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/4/11	2026/7/2	medium
440285	Alpine: multiple musl packages: security update to 1.2.5-r22	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/4/11	2026/7/2	medium
440283	Alpine: multiple musl packages: security update to 1.2.5-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/4/11	2026/7/2	medium
440282	Alpine: multiple musl packages: security update to 1.2.4_git20230717-r6	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/4/11	2026/7/2	medium
440284	Alpine: multiple musl packages: security update to 1.2.5-r11	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/4/11	2026/7/2	medium
440282	Alpine: multiple musl packages: security update to 1.2.4_git20230717-r6	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/4/11	2026/7/2	medium
440284	Alpine: multiple musl packages: security update to 1.2.5-r11	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/4/11	2026/7/2	medium
440285	Alpine: multiple musl packages: security update to 1.2.5-r22	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/4/11	2026/7/2	medium
307034	Linux Distros 未修补的漏洞：CVE-2026-6042	Nessus	Misc.	2026/4/17	2026/7/5	medium
307034	Linux Distros 未修補的弱點：CVE-2026-6042	Nessus	Misc.	2026/4/17	2026/7/5	medium
307034	Linux Distros のパッチ未適用の脆弱性: CVE-2026-6042	Nessus	Misc.	2026/4/17	2026/7/5	medium
307034	Linux Distros Unpatched Vulnerability : CVE-2026-6042	Nessus	Misc.	2026/4/17	2026/7/5	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium