DEBIAN-CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

UBUNTU-CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893

osmo-bsc versions 1.0.1 through 1.14.1 contain a heap-based buffer overflow in the ipaccess_proxy_read_msg() function, triggered via crafted IPA frame lengths . A fix is available in the upstream repository (commit 2852a03c153cd9418c2a86d0b2193ac41169dbb7). CISA SSVC assesses exploitation as none...

CVE-2026-75893 Heap based buffer overflow at ipaccess_proxy_read_msg()

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893 Heap based buffer overflow at ipaccess_proxy_read_msg()

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE-2026-75893

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

EUVD-2026-83272

In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...

CVE2026-42926

CVE-2026-42926 NGINX Laboratorio de Inyección de Tramas HTTP/2 Un laboratorio controlado de ciberseguridad para validar y comparar el comportamiento relacionado con CVE-2026-42926 , un problema de inyección de tramas HTTP/2 que afecta versiones específicas de NGINX cuando se utiliza una...

CVE-2026-16512

gptphandlemsg in subsys/net/l2/ethernet/gptp/gptp.c dereferenced the gPTP header returned by GPTPHDR and switched on hdr-messagetype without first checking that the received frame carries at least sizeofstruct gptphdr 34 bytes of payload. The header accessor gptpgethdr deliberately never fails fo...

CVE-2026-47888

A flaw was found in Spring Framework, specifically within Spring RSocket applications. A remote attacker could exploit this vulnerability by sending a malformed SETUP frame to an affected application. This could lead to a memory leak, potentially causing a denial of service. Mitigation Disable...

EUVD-2026-82947

gptphandlemsg in subsys/net/l2/ethernet/gptp/gptp.c dereferenced the gPTP header returned by GPTPHDR and switched on hdr-messagetype without first checking that the received frame carries at least sizeofstruct gptphdr 34 bytes of payload. The header accessor gptpgethdr deliberately never fails fo...

CVE-2026-93561

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...

CVE-2026-93561 Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...

CVE-2026-93561

This vulnerability affects the netty-codec-memcache component of the Netty project. A signed/unsigned type mismatch in the Memcache binary codec can cause frame desynchronization , potentially enabling response smuggling . Red Hat rates it CVSS 6.5 (Medium) — network-exploitable with low complexi...

EUVD-2026-82864

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...

CVE-2026-93561

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...

CVE-2026-93561

A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads keyLength and extrasLength as signed Java types instead of unsigned, as specified by the protocol. A malicious Memcache server can exploit this type mismatch by sending a specially crafted...

UBUNTU-CVE-2026-93494

A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body without its terminating null byte. This causes the decoder to allocate a ByteBuf a buffer for bytes that is never released, leading to a...