OESA-2026-3035 gpsd security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...

OESA-2026-3033 gpsd security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...

Photon OS 4.0: Gpsd PHSA-2026-4.0-0947

An update of the gpsd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0947. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Mageia: Security Advisory (MGASA-2026-0028)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 5.0: Gpsd PHSA-2026-5.0-0737

An update of the gpsd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0737. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CLSA-2026-1769593159 gpsd-minimal: Fix of 2 CVEs

CVE-2025-67268: fix heap-based out-of-bounds write in NMEA2000 Driver - CVE-2025-67269: fix integer underflow leading to DoS in NAVCOM packet parsing...

Fedora: Security Advisory (FEDORA-2026-a1552b48c3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : gpsd (2026-a1552b48c3)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a1552b48c3 advisory. Security fixes for CVE-2025-67268 and CVE-2025-67269. Tenable has extracted the preceding description block directly from the Fedora security...

Oracle Linux 9 : gpsd-minimal (ELSA-2026-0771)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-0771 advisory. 1:3.26.1-1.0.1.el97.1 - Replaced upstream reference Orabug: 35865525 Tenable has extracted the preceding description block directly from the Oracle Lin...

Fedora: Security Advisory (FEDORA-2026-2ca69451b9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : gpsd (2026-2ca69451b9)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2ca69451b9 advisory. Security fixes for CVE-2025-67268 and CVE-2025-67269. Tenable has extracted the preceding description block directly from the Fedora security...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : GPSd vulnerabilities (USN-7948-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7948-1 advisory. It was discovered that GPSd incorrectly handled processing NMEA2000 packets. An attacker could use this issue to cause GPSd t...

CVE-2025-67269

creationtimestamp| type| source ---|---|--- 2026-01-07 19:09:32+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mbu662ima22m...

gpsd-3.27.3-1.1 on GA media (moderate)

gpsd-3.27.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10008-1 Rating: moderate Cross-References: CVE-2025-67268 CVE-2025-67269 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

Exploit for CVE-2025-67268

CVE-2025-67268 and CVE-2025-67269: Vulnerabilities in gpsd Tw...

Linux Distros Unpatched Vulnerability : CVE-2025-67269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow vulnerability exists in the nextstate function in gpsd/packet.c of gpsd versions prior to commit ffa1d6f40bca0b035fc7f5e563160ebb67199da7...

CVE-2025-67269

An integer underflow vulnerability exists in the nextstate function in gpsd/packet.c of gpsd versions prior to commit ffa1d6f40bca0b035fc7f5e563160ebb67199da7. When parsing a NAVCOM packet, the payload length is calculated using lexer-length = sizetc - 4 without checking if the input byte c is le...