377 matches found
Vulnerabilities in Snort 3 of Cisco
Cisco has addressed several vulnerabilities in Snort 3, the open-source intrusion detection and prevention system used in various Cisco products. These vulnerabilities reside in various components of the Snort 3 Detection Engine, including the SMTP MIME Decoder, NetFlow Detection Engine, GRE...
CVE-2026-76524
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the...
CVE-2026-76524
A vulnerability in the Open Source Snort 3 control channel socket implementation allows an authenticated, local attacker with low privileges to achieve arbitrary command execution . The root cause is a lack of authentication when a local user connects to the Snort control channel socket. Successf...
EUVD-2026-107358
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the...
CVE-2026-76524 Open Source Snort 3 Control Channel Socket Aribitrary Command Execution Vulnerability
A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the...
PT-2026-120712
Name of the Vulnerable Software and Affected Versions Open Source Snort 3 affected versions not specified Description An issue exists in the control channel socket implementation where a lack of authentication allows an authenticated local attacker with low privileges to connect to the socket. Th...
AZL-108900 CVE-2026-98694 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported use-after-free when request is canceled Alan reported that when doing stress testing sometimes KASAN notices use-after-free during control channel operation stripped down keeping the relevant parts...
CVE-2026-98694 thunderbolt: Fix KASAN reported use-after-free when request is canceled
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported use-after-free when request is canceled Alan reported that when doing stress testing sometimes KASAN notices use-after-free during control channel operation stripped down keeping the relevant parts...
CVE-2026-98694
The Linux kernel contains a use-after-free vulnerability within the thunderbolt component during control channel operations. The issue occurs when a request is canceled; specifically, if tb_cfg_request_work() completes just before tb_cfg_request_cancel() starts, it may re-queue work for a request...
EUVD-2026-103948
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported use-after-free when request is canceled Alan reported that when doing stress testing sometimes KASAN notices use-after-free during control channel operation stripped down keeping the relevant parts...
CVE-2026-98694 thunderbolt: Fix KASAN reported use-after-free when request is canceled
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported use-after-free when request is canceled Alan reported that when doing stress testing sometimes KASAN notices use-after-free during control channel operation stripped down keeping the relevant parts...
Linux Distros Unpatched Vulnerability : CVE-2026-98694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Fix KASAN reported use-after-free when request is canceled Alan reported that when doing stress testing sometimes KASAN notices use-after-free duri...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.13 contains security vulnerabilities. These vulnerabilities arise from a race condition that occurs when canceling requests for the lightning control channel. This race condition causes the tbcfgrequestwork and tbcfgrequest Cancel functions to compete, resulting in the...
EUVD-2026-101363
A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via a malformed RSVP Path message received on an EVPL LMP control channel...
CVE-2026-102039 Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used
A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via a malformed RSVP Path message received on an EVPL LMP control channel...
CVE-2026-102039: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via a malformed RSVP Path message received on an EVPL LMP control channel...
Exploit for CVE-2026-102253
CVE-2026-102253-POC DOS infinite-loop Vulnerability POC Su...
AlmaLinux 9.2 [TuxCare] Security Update: iperf3 / iperf3-devel (ALMALINUX9.2:CLSA-2026:1788532080)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788532080 advisory. - A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeri...
CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc (CENTOS7:CLSA-2023:1697135138)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2023:1697135138 advisory. - The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is on...
CentOS Linux 6 [TuxCare] Security Update: openvpn / openvpn-devel (CENTOS6:CLSA-2025:1759485890)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1759485890 advisory. - OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured wit...