There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a
    stack buffer overflow exists in pjsip_auth_create_digest2() in PJSIP when using pre-computed digest
    credentials (PJSIP_CRED_DATA_DIGEST). The function copies credential data using cred_info->data.slen as
    the length without an upper-bound check, which can overflow the fixed-size ha1 stack buffer (128 bytes) if
    data.slen exceeds the expected digest string length. (CVE-2026-40892)

  - PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a
    buffer overflow vulnerability exists in PJNATH ICE Session when processing credentials with excessively
    long usernames. (CVE-2026-25994)

  - PJSIP is a free and open source multimedia communication library. Versions prior to 2.17 have a critical
    heap buffer underflow vulnerability in PJSIP's H.264 packetizer. The bug occurs when processing malformed
    H.264 bitstreams without NAL unit start codes, where the packetizer performs unchecked pointer arithmetic
    that can read from memory located before the allocated buffer. Version 2.17 contains a patch for the
    issue. (CVE-2026-26203)

  - PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below,
    there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. The bug occurs
    when processing malformed SRTP packets, where the unpacketizer reads a 2-byte NAL unit size field without
    validating that both bytes are within the payload buffer bounds. The vulnerability affects applications
    that receive video using H.264. A patch is available at
    https://github.com/pjsip/pjproject/commit/f821c214e52b11bae11e4cd3c7f0864538fb5491. (CVE-2026-26967)

  - PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, a
    heap use-after-free vulnerability exists in PJSIP's event subscription framework (evsub.c) that is
    triggered during presence unsubscription (SUBSCRIBE with Expires=0). This issue has been patched in
    version 2.17. (CVE-2026-28799)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - PJSIP 是一種以 C 語言撰寫的免費開放原始碼多媒體通訊程式庫。在 2.16 及更舊版本中，使用預先計算的摘要憑證 (PJSIP_CRED_DATA_DIGEST) 時，PJSIP 的 pjsip_auth_create_digest2() 中存在堆疊緩衝區溢位弱點。此函式會使用 cred_info->data.slen 作為長度來複製憑證資料，而不進行上限檢查；如果 data.slen 超過預期的摘要字串長度，這可導致其從固定大小的 ha1 堆疊緩衝區 (128 位元組) 溢位。(CVE-2026-40892)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - PJSIP 是以 C 编写的免费开源多媒体通信库。在 2.16 和之前版本中，使用预先计算的摘要凭据 (PJSIP_CRED_DATA_DIGEST) 时，PJSIP 中的 pjsip_auth_create_digest2() 存在堆栈缓冲区溢出。该函数使用 cred_info->data.slen 作为长度复制凭据数据，但不会检查上限。如果 data.slen 超出预期的摘要字符串长度，这将导致从固定大小的 ha1 堆栈缓冲区（128 字节）溢出。(CVE-2026-40892)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - PJSIP は、C で記述された無料でオープンソースのマルチメディア通信ライブラリです。2.16 以前の場合、事前計算されたダイジェスト認証情報 (PJSIP_CRED_DATA_DIGEST) を使用する際に、PJSIP の pjsip_auth_create_digest2() にスタックバッファオーバーフローが存在します。関数は、cred_info->data.slen を長さとして使用して上限チェックなしで認証情報データをコピーします。これにより、data.slen が予想されるダイジェスト文字列の長さを超えた場合、固定サイズの ha1 スタックバッファ (128 バイト) がオーバーフローする可能性があります。CVE-2026-40892

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a     stack buffer overflow exists in pjsip_auth_create_digest2() in PJSIP when using pre-computed digest     credentials (PJSIP_CRED_DATA_DIGEST). The function copies credential data using cred_info->data.slen as     the length without an upper-bound check, which can overflow the fixed-size ha1 stack buffer (128 bytes) if     data.slen exceeds the expected digest string length. (CVE-2026-40892)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
444415	Alpine: multiple pjproject packages: security update to 2.17-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/7/5	2026/11/4	critical
444415	Alpine: multiple pjproject packages: security update to 2.17-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/7/5	2026/11/4	critical
309690	Linux Distros 未修補的弱點：CVE-2026-40892	Nessus	Misc.	2026/4/22	2026/7/21	critical
309690	Linux Distros 未修补的漏洞：CVE-2026-40892	Nessus	Misc.	2026/4/22	2026/7/21	critical
309690	Linux Distros のパッチ未適用の脆弱性: CVE-2026-40892	Nessus	Misc.	2026/4/22	2026/7/21	critical
309690	Linux Distros Unpatched Vulnerability : CVE-2026-40892	Nessus	Misc.	2026/4/22	2026/7/21	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical