Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 之前3.4.6的 HAProxy 3.2 允许未经认证的远程攻击者通过截断的 HTTP/2 PING 帧造成拒绝服务（工作线程 CPU 耗尽）。 与其他 H2 帧处理程序不同，src/mux_h2.c 中的 h2c_handle_ping 未检查短读取。由于无法处理不完整的帧，因此其数据永远不会被消耗，并且 H2 多路复用器 tasklet 被该待处理数据反复唤醒而没有取得进展。CPU 会旋转，直到超时 http-request 关闭连接，而打开许多此类连接的攻击者可维持高 CPU 使用率。（CVE-2026-110353）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - HAProxy 3.2 before 3.4.6 允許遠端未經驗證的攻擊者透過截斷的 HTTP/2 PING 框架造成拒絕服務 （工作執行緒 CPU 耗盡）。 與其他 H2 框架處理常式不同，src/mux_h2.c 中的 h2c_handle_ping 不會檢查短讀取。因為無法處理不完整的幀，所以其數據永遠不會被消耗，並且 H2 多路復用器任務 let 會被該擱置數據重複喚醒，而不會取得進展。CPU 會旋轉，直到逾時 http-request 關閉連線，而開啟許多此類連線的攻擊者可能會維持較高的 CPU 使用率。（CVE-2026-110353）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 3.4.6 より前の HAProxy 3.2により、認証されていないリモートの攻撃者が、切り捨てられた HTTP/2 PING フレームを介してサービス拒否(ワーカースレッド CPU 枯渇)を引き起こす可能性があります。 src/mux_h2.c のh2c_handle_pingは、他の H2 フレームハンドラーとは異なり、短い読み込みをチェックしません。不完全なフレームは処理できないため、そのデータは消費されず、H2マルチプレクサタスクレットは、進行せずにその保留中のデータによって繰り返し呼び出されます。タイムアウト http リクエストが接続を閉じるまで CPU がスピンし、そのような接続を多数開いている攻撃者が、高い CPU 使用率を維持する可能性があります。(CVE-2026-110353)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-     thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in src/mux_h2.c does not check     for a short read, unlike the other H2 frame handlers. Because the incomplete frame cannot be processed,     its data is never consumed, and the H2 multiplexer tasklet is repeatedly woken by that pending data     without making progress. The CPU spins until timeout http-request closes the connection, and an attacker     opening many such connections can sustain high CPU usage. (CVE-2026-110353)

Note that Nessus relies on the presence of the package as reported by the vendor.

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794226157 advisory.

  - HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent     worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the     request before closing the stream, the parser repeatedly re-processes the same bytes without making     progress. The affected thread stays busy at 100% CPU after timeouts expire and after the client     disconnects, and repeated requests can consume all worker threads until the process is restarted.
    (CVE-2026-110354)

  - HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-     thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in src/mux_h2.c does not check     for a short read, unlike the other H2 frame handlers. Because the incomplete frame cannot be processed,     its data is never consumed, and the H2 multiplexer tasklet is repeatedly woken by that pending data     without making progress. The CPU spins until timeout http-request closes the connection, and an attacker     opening many such connections can sustain high CPU usage. (CVE-2026-110353)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8972-1 advisory.

    It was discovered that HAProxy incorrectly handled truncated HTTP/2 PING frames. A remote attacker could     possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of     service. (CVE-2026-110353)

    It was discovered that HAProxy incorrectly handled certain HTTP/1.1 chunked requests. A remote attacker     could possibly use this issue to cause HAProxy to consume excessive CPU resources, leading to a denial of     service. (CVE-2026-110354)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
370533	Linux Distros 未修补的漏洞：CVE-2026-110353	Nessus	Misc.	2026/10/22	2026/11/5	high
370533	Linux Distros 未修補弱點：CVE-2026-110353	Nessus	Misc.	2026/10/22	2026/11/5	high
370533	Linux Distros のパッチ未適用の脆弱性: CVE-2026-110353	Nessus	Misc.	2026/10/22	2026/11/5	high
370533	Linux Distros Unpatched Vulnerability : CVE-2026-110353	Nessus	Misc.	2026/10/22	2026/11/5	high
377677	AlmaLinux 9.2 [TuxCare] Security Update: haproxy Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1794226157)	Nessus	Alma Linux Local Security Checks	2026/11/9	2026/11/9	high
375780	Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : HAProxy vulnerabilities (USN-8972-1)	Nessus	Ubuntu Local Security Checks	2026/11/4	2026/11/4	high

検出

プラグインの検索

high

high

high

high

high

high