18371 matches found
Astra Linux – Vulnerability in espeak-ng
It was discovered that Espeak-ng 1.52-dev contains a Floating Point Exception due to the use of the PeaksToHarmspect function in wavegen.c...
Astra Linux – Vulnerability in Less
Closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE...
Astra Linux – Vulnerability in binutils
It has been discovered that GNU Binutils prior to version 2.40 contains a memory leak vulnerability in the findabstractinstance function in dwarf2.c...
Astra Linux – Vulnerability in glibc
The iconv function in the GNU C Library also known as glibc or libc6 versions 2.32 and earlier, when processing invalid multi-byte input sequences in encodings such as IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399, fails to advance the input state properly. This can lead to an infinite loop in...
Astra Linux – Vulnerability in glibc
There exists an exploitable signed comparison vulnerability in the ARMv7 memcpy implementation of GNU glibc 2.30.9000. Calling memcpy on ARMv7 targets that utilize the GNU glibc implementation with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attack...
Astra Linux – Vulnerability in ffmpeg
A Denial of Service issue in FFmpeg 4.2 occurs due to resource management errors in the fftools/cmdutils.c file...
Astra Linux – Vulnerability in binutils
“findabstractinstance” in dwarf2.c, located in the Binary File Descriptor BFD library also known as libbfd, as part of GNU Binutils 2.32, allows remote attackers to cause a denial of service infinite recursion and application crash through a crafted ELF file...
Astra Linux – Vulnerability in binutils
A issue was discovered in the function stabdemanglev3arg in stabs.c in Binutils 2.34 through 2.38. This issue allows attackers to cause a denial of service due to memory leaks...
Astra Linux – Vulnerability in libjpeg-turbo
LibJPEG 9c has a major issue with a large loop, as the readPixel function in rdtarga.c improperly handles EOF situations...
Astra Linux – Vulnerability in glibc
A flaw has been identified in glibc. In a rare situation, the gaihinet function may use memory that has already been freed, leading to an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with...
The vulnerability in the md/raid1.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the md/raid1.c component of the Linux kernel lies in the fact that resources are not released after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the internal_b44.c component of the image storage software for OpenEXR, which has a wide dynamic range of brightness levels, allows a hacker to cause a service failure.
The vulnerability of the internalb44.c component of the OpenEXR image storage software, which handles images with a wide dynamic range of brightness, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the dpaa2_caam_probe() function in the caamalg_qi2.c component of the Linux kernel allows a hacker to induce a service failure.
The vulnerability of the dpaa2caamprobe function in the caamalgqi2.c component of the Linux kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-84878
USN-8737-1 fixed vulnerabilities in GNU C Library. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly...
CVE-2026-68768
hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...
SUSE CVE-2026-72854
msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...
CVE-2026-74441
A flaw was found in the Linux kernel's USB Type-C UCSI driver. This vulnerability arises from a timing issue during the unregistration of USB Type-C ports, where certain operations can race against the destruction of internal work queues. A local attacker could exploit this race condition to...
Linux Distros Unpatched Vulnerability : CVE-2026-72854
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xmlrpc-c (UTSA-2026-102697)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102697 advisory. XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component. Tenable has extracte...
