Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 Netty 的「netty-codec-http」元件中發現缺陷。遠端攻擊者可傳送包含後位數空格的特製 HTTP/1.1 區塊大小權杖，藉此惡意探索此弱點。這種區塊大小的錯誤剖析可能會導致 HTTP 要求走私。這允許攻擊者繞過安全控制或存取 Proxy/後端部署中未經授權的資源。
    (CVE-2026-93574)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Netty 的“netty-codec-http”组件中发现一个缺陷。远程攻击者可通过发送特别构建的包含后位数空白的 HTTP/1.1 区块大小标记来利用此漏洞。这种不正确的区块大小解析可导致 HTTP 请求走私。这允许攻击者绕过安全控制或访问代理/后端部署中未授权的资源。
    (CVE-2026-93574)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Netty の「netty-codec-http」コンポーネントに欠陥が見つかりました。リモートの攻撃者が、ポストディジットの空白を含む特別に細工された HTTP/1.1 チャンクサイズのトークンを送信することで、この脆弱性を悪用する可能性があります。このチャンクサイズの不適切な解析により、HTTP リクエストのスマグリングが発生する可能性があります。これにより、攻撃者がプロキシ/バックエンド展開でセキュリティコントロールをバイパスしたり、認証されていないリソースにアクセスしたりする可能性があります。
    (CVE-2026-93574)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4391-1 advisory.

    - CVE-2026-59902: Netty: Memory Exhaustion in SctpMessageCompletionHandler (bsc#1275501).
    - CVE-2026-59903: Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header     Overwrite       (bsc#1275500).
    - CVE-2026-62243: TLS hostname verification bypass in Netty OpenSSL client path (bsc#1276455).
    - CVE-2026-62380: null byte and CRLF injection in Socks4ClientEncoder and Socks5ClientEncoder     (bsc#1276456).
    - CVE-2026-75595: fragmented TLS `ClientHello` causes fallback to default `SslContext` and allows for SNI     routing and       mTLS requirement bypass (bsc#1276420).
    - CVE-2026-75596: fragmented `ClientHello`records can trigger quadratic pre-handshake reassembly in     default SNI parsing       (bsc#1276421).
    - CVE-2026-76816: missing input validation in `MqttEncoder` allows for null-byte injection, topic     hijacking, and ACL       bypassing (bsc#1277243).
    - CVE-2026-89044: HTTP request smuggling in Netty via improper validation of final Transfer-Encoding     coding       (bsc#1280048).
    - CVE-2026-93488: Denial of Service via unbounded concurrent SPDY streams (bsc#1282084).
    - CVE-2026-93491: Denial of Service via unbounded HttpServerCodec HTTP/1.1 pipeline queue (bsc#1282085).
    - CVE-2026-93492: HTTP/2 HpackEncoder DoS with large table size (bsc#1282132).
    - CVE-2026-93493: missing `nextUpdate` field in OCSP responses leads to silent validation bypass     (bsc#1281431).
    - CVE-2026-93494: ByteBuf Leak in StompSubframeDecoder When a Frame Body Is Never Terminated     (bsc#1282506).
    - CVE-2026-93558: Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial     of Service       (bsc#1282140).
    - CVE-2026-93560: STOMP codec content-length long-to-int truncation causes infinite decode loop DoS     (bsc#1282141).
    - CVE-2026-93562: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling     (bsc#1282362).
    - CVE-2026-93563: unbounded multi-line response accumulation in `SmtpResponseDecoder` leads to memory     exhaustion and a       DoS (bsc#1281432).
    - CVE-2026-93564: HAProxy PROXY-v2 nested-TLV grandchild ByteBuf reference-count leak (bsc#1282363).
    - CVE-2026-93565: RtspDecoder Method-Token Smuggling via Trailing Control Byte (bsc#1282364).
    - CVE-2026-93566: HTTP Request Smuggling due to control characters in the chunk-size line (bsc#1282366).
    - CVE-2026-93567: HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-     controlled       :authority (bsc#1282367).
    - CVE-2026-93568: HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests     (bsc#1282370).
    - CVE-2026-93569: HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the     request-target       authority (bsc#1282372).
    - CVE-2026-93572: multiplication of patched preallocation limits in `RedisArrayAggregator` nested RESP     headers can lead       to denial of service (bsc#1281433).
    - CVE-2026-93573: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling     (bsc#1282373).
    - CVE-2026-93574: HTTP request smuggling via post-digit whitespace in chunk-size parsing (bsc#1282374).
    - CVE-2026-93575: missing validations in the `MqttDecoder` can lead to excessive resource consumption and     a DoS       (bsc#1281434).
    - CVE-2026-93576: netty-codec-smtp -- SMTP command-name field is not CRLF-validated (bsc#1282507).
    - CVE-2026-93578: missing Extended Key Usage (EKU) check in OCSP client allows certificate revocation     bypass       (bsc#1281435).
    - CVE-2026-93579: HTTP/2 header field values are not validated by default (bsc#1282378).

    Changes for netty:

    - Upgrade to upstream version 4.1.138

    Changes for netty-tcnative:

    - Upgrade to version 2.0.84 Final

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this     vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit     whitespace. This incorrect parsing of the chunk size can lead to HTTP request smuggling. This allows an     attacker to bypass security controls or access unauthorized resources in proxy/backend deployments.
    (CVE-2026-93574)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
348328	Linux Distros 未修補弱點：CVE-2026-93574	Nessus	Misc.	2026/9/19	2026/9/22	medium
348328	Linux Distros 未修补的漏洞：CVE-2026-93574	Nessus	Misc.	2026/9/19	2026/9/22	medium
348328	Linux Distros のパッチ未適用の脆弱性: CVE-2026-93574	Nessus	Misc.	2026/9/19	2026/9/22	medium
351404	SUSE SLED15 / SLES15 Security Update : netty, netty-tcnative (SUSE-SU-2026:4391-1)	Nessus	SuSE Local Security Checks	2026/9/30	2026/9/30	critical
348328	Linux Distros Unpatched Vulnerability : CVE-2026-93574	Nessus	Misc.	2026/9/19	2026/9/22	medium

偵測

搜尋 Plugin

medium

medium

medium

critical

medium