Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - Netpbm 通过在 11.16.00 converter/other/rast.c 的 rasttopnm Sun 栅格文件运行长度解码器pr_load_image包含堆越界写入漏洞。攻击者可以提供具有微小尺寸和长运行正文的字节编码栅格文件，以将控制的字节写过md_image，从而导致内存损坏和崩溃。（CVE-2026-112275）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - netpbm through 在 11.16.00 converter/other/rast.c 中的 rasttopnm Sun rasterfile 執行長度解碼器pr_load_image中包含堆積越界寫入弱點。攻擊者可以提供具有微小尺寸和長執行長度主體的位元組編碼光柵文件，以寫入超過md_image的受控位元組，從而導致記憶體損毀和崩潰。（CVE-2026-112275）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 11.16.00 までの Netpbm には、converter/other/rast.c の中の rasttopnm Sun rasterfile ランレングスデコーダー pr_load_imageにヒープ領域外書き込みの脆弱性があります。攻撃者が、小さな寸法と長いランレングスボディを持つバイトエンコードされたラスターファイルを供給し、制御されたバイトをmd_imageを超えて書き込み、メモリ破損およびクラッシュを引き起こす可能性があります。(CVE-2026-112275)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile     run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile     with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory     corruption and crashes. (CVE-2026-112275)

Note that Nessus relies on the presence of the package as reported by the vendor.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794238162 advisory.

  - Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam     that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a     crafted icon file with width or height above 32767, wrapping int16_t loop counters into negative row     buffer indices to cause crashes or potential code execution. (CVE-2026-120432)

  - Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile     run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile     with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory     corruption and crashes. (CVE-2026-112275)

  - Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in     jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a     crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the     undersized buffer, causing crashes or potentially code execution. (CVE-2026-120436)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794238162 advisory.

  - Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam     that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a     crafted icon file with width or height above 32767, wrapping int16_t loop counters into negative row     buffer indices to cause crashes or potential code execution. (CVE-2026-120432)

  - Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile     run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile     with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory     corruption and crashes. (CVE-2026-112275)

  - Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in     jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a     crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the     undersized buffer, causing crashes or potentially code execution. (CVE-2026-120436)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794237821 advisory.

  - Netpbm before 10.86.51, 11.02.30, and 11.15.08 contains an integer overflow vulnerability in winicontopam     that allows attackers to corrupt heap memory via oversized ICO/CUR dimensions. Attackers can supply a     crafted icon file with width or height above 32767, wrapping int16_t loop counters into negative row     buffer indices to cause crashes or potential code execution. (CVE-2026-120432)

  - Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile     run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile     with tiny dimensions and a long run-length body to write controlled bytes past md_image, causing memory     corruption and crashes. (CVE-2026-112275)

  - Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in     jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a     crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the     undersized buffer, causing crashes or potentially code execution. (CVE-2026-120436)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
367360	Linux Distros 未修补的漏洞：CVE-2026-112275	Nessus	Misc.	2026/10/19	2026/11/6	medium
367360	Linux Distros 未修補弱點：CVE-2026-112275	Nessus	Misc.	2026/10/19	2026/11/6	medium
367360	Linux Distros のパッチ未適用の脆弱性: CVE-2026-112275	Nessus	Misc.	2026/10/19	2026/11/6	medium
367360	Linux Distros Unpatched Vulnerability : CVE-2026-112275	Nessus	Misc.	2026/10/19	2026/11/6	medium
377719	AlmaLinux 9.6 [TuxCare] Security Update: netpbm / netpbm-devel / netpbm-doc / netpbm-progs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794238162)	Nessus	Alma Linux Local Security Checks	2026/11/9	2026/11/9	high
377724	Rocky Linux 9.6 [TuxCare] Security Update: netpbm / netpbm-devel / netpbm-doc / netpbm-progs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794238162)	Nessus	Rocky Linux Local Security Checks	2026/11/9	2026/11/9	high
377720	AlmaLinux 9.2 [TuxCare] Security Update: netpbm / netpbm-devel / netpbm-doc / netpbm-progs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1794237821)	Nessus	Alma Linux Local Security Checks	2026/11/9	2026/11/9	high

検出

プラグインの検索

medium

medium

medium

medium

high

high

high