There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration
    content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of
    an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful
    exploitation could result in heap metadata corruption, potentially causing the affected process to become
    unavailable (denial of service). (CVE-2026-18743)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 popt 中发现一个缺陷。此漏洞允许攻击者向主机提供特别构建的配置内容，当加载这些内容时，可导致小型内存损坏问题。发生这种情况的原因是“poptConfigFileToString”函数为缓冲区重新分配内存的方式中存在错误。成功利用可导致堆元数据损坏，从而可能造成受影响的进程不可用（拒绝服务）。（CVE-2026-18743）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 popt 中發現了一個缺陷。此弱點可讓攻擊者向主機提供特製的組態內容，載入時可能會導致小型記憶體損毀問題。發生這種情況的原因是 'poptConfigFileToString' 函式重新配置緩衝區記憶體的方式發生錯誤。成功惡意利用可能會導致堆積中繼資料損毀，進而可能導致受影響的處理程序變得無法使用 （拒絕服務）。（CVE-2026-18743）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - popt に欠陥が見つかりました。この脆弱性により、攻撃者が特別に細工された構成コンテンツをホストに提供し、それがロードされたときに、小さなメモリ破損の問題につながる可能性があります。これは、「poptConfigFileToString」関数がバッファ用にメモリを再割り当てする方法でのエラーのために発生します。悪用に成功すると、ヒープメタデータが破損したり、影響を受けるプロセスが利用できなくなる(サービス拒否)可能性があります。(CVE-2026-18743)

Nessus は、ベンダーから報告されたパッケージの存在に依存していることに注意してください。

According to the versions of the popt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs     function, when repeatedly called by a host application or through deep alias nesting, can lead to     corruption of internal program data. This corruption could potentially enable a local attacker to execute     arbitrary code if the host application then unsafely processes the altered data.(CVE-2026-18739)

    A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration     content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of     an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful     exploitation could result in heap metadata corruption, potentially causing the affected process to become     unavailable (denial of service).(CVE-2026-18743)

Tenable has extracted the preceding description block directly from the EulerOS popt security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration     content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of     an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful     exploitation could result in heap metadata corruption, potentially causing the affected process to become     unavailable (denial of service). (CVE-2026-18743)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
478663	Echo: popt: security update to 1.19+dfsg-2+e1	Tenable Cloud Security	Echo Local Security Checks	2026/11/9	2026/11/9	low
478663	Echo: popt: security update to 1.19+dfsg-2+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	2026/11/9	2026/11/9	low
342117	Linux Distros 未修补的漏洞：CVE-2026-18743	Nessus	Misc.	2026/9/1	2026/11/6	low
342117	Linux Distros 未修補弱點：CVE-2026-18743	Nessus	Misc.	2026/9/1	2026/11/6	low
342117	Linux Distros のパッチ未適用の脆弱性: CVE-2026-18743	Nessus	Misc.	2026/9/1	2026/11/6	low
376681	EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4518)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	low
376782	EulerOS 2.0 SP12 : popt (EulerOS-SA-2026-4441)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	low
342117	Linux Distros Unpatched Vulnerability : CVE-2026-18743	Nessus	Misc.	2026/9/1	2026/11/6	low

検出

プラグインの検索

low

low

low

low

low

low

low

low