CVE-2026-0861

A flaw was found in the glibc library. Passing an excessively large alignment value to the memalign suite of functions, such as memalign, posixmemalign, alignedalloc, valloc and pvalloc, an integer overflow can occur during internal size calculations due to improper overflow checks, causing an...

firefox: thunderbird: Sandbox escape due to integer overflow in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to integer overflow in the Graphics component...

RLSA-2026:0608 Moderate: vsftpd security update

The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing CVE-2025-14242 For more details about the security issues, including the...

vsftpd security update

An update is available for vsftpd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon,...

firefox: thunderbird: Sandbox escape due to integer overflow in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to integer overflow in the Graphics component...

SUSE CVE-2025-14242

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002238)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002238 advisory. Integer overflow in drivers/gpu/drm/i915/i915gemexecbuffer.c in the i915 driver in the Direct Rendering Manager DRM subsystem in the Linux kernel through 3.8.3, as...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002366 advisory. Integer overflow in the pinginitsock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service use-after-free an...

SUSE SLES15: ovmf / ovmf-tools / qemu-ovmf-ia32 / qemu-ovmf-x86_64 / etc (SUSE-SU-2026:0120-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0120-1 advisory. - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability bsc1218680. Tenable has extracted...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002835 advisory. The getdatablock function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service integer overflow and loop via crafted use...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003492 advisory. The futexrequeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial of service integer overflow or possibly have...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003315 advisory. Integer overflow in the xtalloctableinfo function in net/netfilter/xtables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002196 advisory. Integer overflow in lib/asn1decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data. Tenable has extracted the precedin...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002992 advisory. The ip6find1stfragopt function in net/ipv6/outputcore.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service integer overflow and...

Linux Distros Unpatched Vulnerability : CVE-2026-0988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during leng...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002852)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002852 advisory. The netfilter subsystem in the Linux kernel before 4.9 mishandles IPv6 reassembly, which allows local users to cause a denial of service integer overflow,...

Linux Distros Unpatched Vulnerability : CVE-2025-14242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002368 advisory. Integer overflow in the sndcomprallocatebuffer function in sound/core/compressoffload.c in the ALSA subsystem in the Linux kernel before 3.6-rc6-next-20120917 allows...

RockyLinux 8 : vsftpd (RLSA-2026:0608)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:0608 advisory. vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing CVE-2025-14242 Tenable has extracted the preceding description block direct...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001917)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001917 advisory. Integer overflow in lib/asn1decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data. Tenable has extracted the precedin...