The version of glibc installed on the remote host is prior to 2.26-40. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1599 advisory.

    A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could     cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from     this vulnerability is to system availability. (CVE-2019-25013)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : glibc (ALAS-2021-1599)

medium Nessus Plugin ID 146625

Version 1.4