vaas-cve-2015-5477

Vulnerability as a Service - CVE 2015-5477 A Debian Wheezy Linux system with a vulnerable version of bind9 to showcase CVS-2015-5477. Overview This docker container is based on Debian Wheezy and has been modified to use a vulernable version of bind9 and the matching additional dependencies. Usage...

CVE-2016-2569

Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...

CVE-2026-97962

A flaw was found in the Linux kernel's mlx5 network driver. The driver fails to hold the required lock when destroying virtual network interface health reporters during device unloading. A local user with administrative privileges could trigger this flaw by unbinding the driver, resulting in a...

CVE-2026-97490

A flaw was found in the Linux kernel's Amiga Fast File System AFFS driver. When mounting a filesystem, the driver fails to properly handle block size configuration failures. A local user with permissions to mount filesystems could exploit this flaw by mounting a specially crafted AFFS image,...

CVE-2026-97487

A flaw was found in the Linux kernel's Journaled File System JFS. An unhandled error when initializing the file system block size during mount operations allows a local user with mount privileges to cause a Denial of Service DoS. By attempting to mount an incompatible or crafted storage volume, a...

EUVD-2026-71517

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor...

CVE-2026-96422

A flaw was found in Wireshark. This vulnerability allows an attacker to cause a Denial of Service DoS by injecting crafted network packets or convincing a user to open a malicious packet capture file. An assertion failure within the Frame protocol metadissector triggers an unexpected application...

Security Bulletin: IBM DataPower Gateway affected by denial of service due to glibc (CVE-2026-4046)

Summary IBM DataPower Gateway has addressed CVE-2026-4046 in glibc in versions 10.6.0.11 and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

CVE-2026-98105

A flaw was found in the Linux kernel's OPEN Alliance TC6 oatc6 Ethernet driver. Under heavy or oversubscribed network traffic, missing frame boundaries can cause the driver to append incoming data without verifying that adequate buffer capacity remains. This condition triggers an internal kernel...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

CVE-2026-97549

In the Linux kernel, the following vulnerability has been resolved: xfs: fix under-reservation of blocks when repairing sf directories Whilst running QA on XFS for-next as of 7.3-rc2 with MKFSOPTIONS="-n size=8192", I observed the following trimmed dmesg splat: XFS: Assertion failed: args-total =...

CVE-2026-97549 xfs: fix under-reservation of blocks when repairing sf directories

In the Linux kernel, the following vulnerability has been resolved: xfs: fix under-reservation of blocks when repairing sf directories Whilst running QA on XFS for-next as of 7.3-rc2 with MKFSOPTIONS="-n size=8192", I observed the following trimmed dmesg splat: XFS: Assertion failed: args-total =...

CVE-2026-97549

The Linux kernel XFS filesystem experienced an issue where the system would under-reserve blocks during the repair of shortform (sf) directories . The root cause was an incorrect assignment of the args->total value in xrep_dir_swap_prep, which failed to account for the correct ratio between di...

OESA-2026-4016 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

Linux Distros Unpatched Vulnerability : CVE-2026-97549

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix under-reservation of blocks when repairing sf directories Whilst running QA on XFS for-next as of 7.3-rc2 with MKFSOPTIONS=-n size=8192, I observed th...

SUSE CVE-2026-96675

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failur...

CVE-2026-95622

A flaw was found in ModemManager. When parsing a Cell Broadcast Message, some 3GPP data-coding-scheme values 8-bit and reserved character sets are not handled. The process hits a reachable assertion and aborts. An attacker who can deliver a crafted Cell Broadcast PDU over the radio network, or vi...

CVE-2026-96675

A flaw was found in alsa-lib. This denial of service vulnerability exists in the multi PCM plugin due to a failure to validate sparse binding indices before array access. A local attacker can supply a malicious ALSA configuration file with sparse bindings. This can trigger an out-of-bounds array...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the pcmmulti process. An attacker can cause the application to abort by supplying a crafted ALSA configuration file containing sparse bindings that trigger an out-of-bounds array read and assertion...

DEBIAN-CVE-2026-96675

alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failur...