There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose
    =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which
    wrap() subtracts from the output width to get the space available for text. When that space reaches zero,
    the line-splitting substitution matches the empty string, and the loop consumes no input while appending
    the margin padding on every pass. Formatting an attacker-supplied POD document never returns, and the
    output grows until memory is exhausted. (CVE-2026-82560)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3399 advisory.

    Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose     =over nesting drives the margin to the output width.

    Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space     available for text. When that space reaches zero, the line-splitting substitution matches the empty     string, and the loop consumes no input while appending the margin padding on every pass.

    Formatting an attacker-supplied POD document never returns, and the output grows until memory is     exhausted. (CVE-2026-82560)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-9006-1 advisory.

    It was discovered that Pod::Text in Perl did not properly handle POD documents with deeply nested =over     directives. If a user or automated system were tricked into processing a specially crafted file, an     attacker could possibly use this issue to cause CPU and memory exhaustion, resulting in a denial of     service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose     =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which     wrap() subtracts from the output width to get the space available for text. When that space reaches zero,     the line-splitting substitution matches the empty string, and the loop consumes no input while appending     the margin padding on every pass. Formatting an attacker-supplied POD document never returns, and the     output grows until memory is exhausted. (CVE-2026-82560)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of perl-podlators installed on the remote host is prior to 2.5.1-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4080 advisory.

    Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose     =over nesting drives the margin to the output width.

    Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space     available for text. When that space reaches zero, the line-splitting substitution matches the empty     string, and the loop consumes no input while appending the margin padding on every pass.

    Formatting an attacker-supplied POD document never returns, and the output grows until memory is     exhausted. (CVE-2026-82560)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
457378	Echo: perl: security update to 5.40.1-6+e19	Tenable Cloud Security	Echo Local Security Checks	2026/10/2	2026/10/2	high
476775	Chainguard: miniperl, multiple perl packages: security update to 5.44.0-r2	Tenable Cloud Security	Chainguard Local Security Checks	2026/10/22	2026/10/22	high
457378	Echo: perl: security update to 5.40.1-6+e19	Tenable Self-Hosted Container Security	Echo Local Security Checks	2026/10/2	2026/10/2	high
476775	Chainguard: miniperl, multiple perl packages: security update to 5.44.0-r2	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	2026/10/22	2026/10/22	high
377906	Amazon Linux 2023 : perl-podlators (ALAS2023-2026-3399)	Nessus	Amazon Linux Local Security Checks	2026/11/9	2026/11/9	high
380038	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : Perl vulnerability (USN-9006-1)	Nessus	Ubuntu Local Security Checks	2026/11/13	2026/11/14	high
349318	Linux Distros Unpatched Vulnerability : CVE-2026-82560	Nessus	Misc.	2026/9/23	2026/11/12	high
377914	Amazon Linux 2 : perl-podlators (ALAS-2026-4080)	Nessus	Amazon Linux Local Security Checks	2026/11/9	2026/11/9	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high