Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 GNOME 之眼中發現一個缺陷。剖析包含格式錯誤色彩設定檔中繼資料的特製 PNG 影像時，應用程式在搜尋 Null 終止字元時無法驗證區塊界限。攻擊者可能會誘騙使用者開啟惡意映像，導致應用程式讀取已配置的緩衝區。此問題可能導致應用程式當機，進而造成拒絕服務 （DoS），或可能洩漏敏感記憶體內容。（CVE-2026-118475）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Eye of GNOME 中发现一个缺陷。解析包含畸形颜色配置文件元数据的特别构建的 PNG 图像时，应用程序在搜索 NULL 终止符时无法验证区块边界。攻击者可诱骗用户打开恶意图像，从而导致应用程序读取超出分配的缓冲区。此问题可导致应用程序崩溃，进而导致拒绝服务 （DoS），或可能暴露敏感内存内容。（CVE-2026-118475）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Eye of GNOME に欠陥が見つかりました。無効な形式のカラープロファイルメタデータを含む特別に細工された PNG 画像を解析する際に、アプリケーションは null 終端子の検索中にチャンク境界の検証に失敗します。攻撃者がユーザーを騙して、悪意のある画像を開かせ、割り当てられたバッファを超えてアプリケーションに読み取らせる可能性があります。この問題により、アプリケーションクラッシュが発生してサービス拒否(DoS)が引き起こされたり、機密性の高いメモリコンテンツが漏洩したりする可能性があります。(CVE-2026-118475)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color     profile metadata, the application fails to validate chunk boundaries while searching for a null     terminator. An attacker could trick a user into opening a malicious image, causing the application to read     past the allocated buffer. This issue can lead to an application crash, resulting in a Denial of Service     (DoS), or potentially expose sensitive memory contents. (CVE-2026-118475)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4874 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4874-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     October 31, 2026                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : eog     Version        : 43.2-1+deb12u1     CVE ID         : CVE-2026-107651 CVE-2026-118475     Debian Bug     : 1150455

    Two vulnerabilities were discovered in Eye of GNOME (eog), the     lightweight image viewer:

    CVE-2026-107651

        A heap-based buffer overflow existed in the PNG metadata reader         due to improper state handling when parsing split metadata         chunks. A remote attacker could have exploited this flaw by         enticing a user into opening a specially crafted `.png` file,         potentially leading to arbitrary code execution or a Denial of         Service (DoS) via crashing the application.

    CVE-2026-118475

        When parsing a specially crafted PNG image containing malformed         color profile metadata, *eog* failed to validate chunk boundaries         while searching for a null terminator. An attacker could have         tricked a user into opening a malicious image, causing         the application to read past the allocated buffer. This         issue could also have led to an application crash,         resulting in a Denial of Service (DoS) or potentially         exposing sensitive memory contents.

    For Debian 12 bookworm, these problems have been fixed in version     43.2-1+deb12u1.

    We recommend that you upgrade your eog packages.

    For the detailed security status of eog please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/eog

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
374025	Linux Distros 未修補弱點：CVE-2026-118475	Nessus	Misc.	2026/10/30	2026/11/2	low
374025	Linux Distros 未修补的漏洞：CVE-2026-118475	Nessus	Misc.	2026/10/30	2026/11/2	low
374025	Linux Distros のパッチ未適用の脆弱性: CVE-2026-118475	Nessus	Misc.	2026/10/30	2026/11/2	low
374025	Linux Distros Unpatched Vulnerability : CVE-2026-118475	Nessus	Misc.	2026/10/30	2026/11/2	low
374858	Debian dla-4874 : eog - security update	Nessus	Debian Local Security Checks	2026/11/1	2026/11/1	low

偵測

搜尋 Plugin

low

low

low

low

low