Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 5.3.5 之前的 Linux 核心中drivers/net/dsa/sja1105/sja1105_spi.c 的 sja1105_static_config_upload() 函式有兩個記憶體洩漏弱點攻擊者因而得以透過觸發 static_config_buf_prepare_for_upload() 或 sja1105_inhibit_tx()造成拒絕服務 (記憶體消耗)失敗，亦即 CID-68501df92d11。
    (CVE-2019-18807)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 5.3.5 之前的 Linux 内核中drivers/net/dsa/sja1105/sja1105_spi.c 中的 sja1105_static_config_upload() 函数存在两个内存泄漏允许攻击者通过触发 static_config_buf_prepare_for_upload() 或 sja1105_inubit_tx() 造成拒绝服务内存消耗故障，即 CID-68501df92d11。
    (CVE-2019-18807)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 5.3.5 より前の Linux カーネルの drivers/net/dsa/sja1105/sja1105_spi.c の sja1105_static_config_upload() 関数の 2 つのメモリ漏洩により、攻撃者が static_config_buf_prepare_for_upload() または sja1105_inhibit_tx() を発生させて、サービス拒否メモリ消費を引き起こす可能性があります。失敗 (別名 CID-68501df92d11)。
    (CVE-2019-18807)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003822 advisory.

    Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c     in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by     triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c     in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by     triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11.
    (CVE-2019-18807)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003681 advisory.

    Two memory leaks in the sja1105_static_config_upload() function in drivers/net/dsa/sja1105/sja1105_spi.c     in the Linux kernel before 5.3.5 allow attackers to cause a denial of service (memory consumption) by     triggering static_config_buf_prepare_for_upload() or sja1105_inhibit_tx() failures, aka CID-68501df92d11.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
246840	Linux Distros 未修補的弱點：CVE-2019-18807	Nessus	Misc.	2025/8/9	2026/7/17	high
246840	Linux Distros 未修补的漏洞：CVE-2019-18807	Nessus	Misc.	2025/8/9	2026/7/17	high
246840	Linux Distros のパッチ未適用の脆弱性: CVE-2019-18807	Nessus	Misc.	2025/8/9	2026/7/17	high
288456	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003822)	Nessus	Unity Linux Local Security Checks	2026/1/16	2026/1/16	high
246840	Linux Distros Unpatched Vulnerability : CVE-2019-18807	Nessus	Misc.	2025/8/9	2026/7/17	high
288582	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003681)	Nessus	Unity Linux Local Security Checks	2026/1/16	2026/1/17	high

偵測

搜尋 Plugin

high

high

high

high

high

high