CVE-2024-12084

CVE-2024-12084 В демоне rsync обнаружена ошибка переполнения буфера в куче. Эта проблема вызвана некорректной обработкой управляемых атакующим длин контрольных сумм s2length в коде. Когда MAXDIGESTLEN превышает фиксированное значение SUMLENGTH 16 байт, атакующий может выполнить запись за границы...

CVE-2025-66676

CVE-2025-66676 Dans IOBit Unlocker 1.3.0.11 et versions antérieures, l'application permet la terminaison arbitraire de processus en essayant de déverrouiller un fichier. Contexte L'application est utilisée pour déverrouiller un fichier verrouillé. En spécifiant le fichier image du processus d'un...

CVE-2026-65652

github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can reach a listener can complete the standard initialization handshake and send a call request with an unsupported checksum type. The parser uses that value as...

CVE-2026-65652 temporalio/tchannel-go malformed checksum type causes process termination

github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can reach a listener can complete the standard initialization handshake and send a call request with an unsupported checksum type. The parser uses that value as...

EUVD-2026-83893

github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can reach a listener can complete the standard initialization handshake and send a call request with an unsupported checksum type. The parser uses that value as...

CVE-2026-65652 temporalio/tchannel-go malformed checksum type causes process termination

github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can reach a listener can complete the standard initialization handshake and send a call request with an unsupported checksum type. The parser uses that value as...

CVE-2026-65652

github.com/temporalio/tchannel-go fails to validate the one-byte checksum-type field in inbound TChannel call frames. An unauthenticated remote peer that completes the standard initialization handshake can send a call request with an unsupported checksum type. The parser uses that value as an ind...

PT-2026-96075

Name of the Vulnerable Software and Affected Versions github.com/temporalio/tchannel-go affected versions not specified Description The software fails to validate the one-byte checksum-type field in inbound TChannel call frames. A remote network peer can complete the standard initialization...

CVE-2026-65652: Improper Validation of Array Index

github.com/temporalio/tchannel-go did not validate the one-byte checksum-type field in inbound TChannel call frames. A network peer that can reach a listener can complete the standard initialization handshake and send a call request with an unsupported checksum type. The parser uses that value as...

CVE-2026-54578 mport verify can compare stale checksum data after hashing failures

mport is the MidnightBSD Package Manager. Prior to 2.7.8, mportverifypackage in libmport/verify.c could continue after MD5File or SHA256File failed and compare an expected checksum with stale data in the hash buffer rather than a newly computed digest. An attacker able to influence an installed...

CVE-2026-54578 mport verify can compare stale checksum data after hashing failures

mport is the MidnightBSD Package Manager. Prior to 2.7.8, mportverifypackage in libmport/verify.c could continue after MD5File or SHA256File failed and compare an expected checksum with stale data in the hash buffer rather than a newly computed digest. An attacker able to influence an installed...

CVE-2026-54578 mport verify can compare stale checksum data after hashing failures

mport is the MidnightBSD Package Manager. Prior to 2.7.8, mportverifypackage in libmport/verify.c could continue after MD5File or SHA256File failed and compare an expected checksum with stale data in the hash buffer rather than a newly computed digest. An attacker able to influence an installed...

CVE-2026-89832: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to clear dirty flag on folio in error path If node block is corrupted due to chksum mismatch or inconsistent footer info, it needs to drop clear flag of node folio, in order to persist inconsistent node data to storage...

Astra Linux – Vulnerability in rsync

A flaw was discovered in rsync. It allows a server to enumerate the contents of an arbitrary file from the client’s machine. This issue occurs when files are being copied from the client to the server. During this process, the rsync server sends checksums of local data to the client for compariso...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nfsd: Map EBADMSG to nfserrio to avoid warnings. Ext4 will throw -EBADMSG during ext4readdir when a checksum error occurs, resulting in the following warning. Fix this by mapping EBADMSG to nfserrio. nfsdbufferedreaddir...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A issue was discovered in the Linux kernel before version 6.3.3. There is an out-of-bounds read in the crc16 function in lib/crc16.c when called from fs/ext4/super.c, because ext4groupdesccsum does not properly check an offset. NOTE: This issue is disputed by third parties, as the kernel is not...

Astra Linux – Vulnerability in rsync

A flaw was discovered in rsync that can be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length, causing a comparison between a checksum and uninitialized memory, and resulting in the leakage of one byte of uninitialized stack data ...

Astra Linux – Vulnerability in open-iscsi

A issue was discovered in Contiki version 3.0. A out-of-bounds read vulnerability exists in the uIP TCP/IP stack component when calculating checksums for IP packets in the upperlayerchksum function in net/ipv4/uip.c...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: Missing check for virtio Two missing checks in virtionethdrtoskb allowed syzbot to crash kernels again. 1. After the skbsegment function, the buffer may become non-linear nrfrags != 0. However, since the SKBTXSHAREDFRAG...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fixed an issue with OoB access in the IP checksum code for negative lengths. Although the commit c2c24edb1d9c “arm64: csum: Fix pathological zero-length calls” added an early return for zero-length inputs, syzkaller...