ROS-20261001-73-0038

The vulnerability in Xen is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0033

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0032

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0036

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-105122

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure...

Rocky Linux 8 [CIQ] Security Update: Judy / Judy-debuginfo / Judy-debugsource / galera / etc Multiple Vulnerabilities (crlsa-2023_5683)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20235683 advisory. mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6 CVE-2023-5157 mariadb: use-after-poison in prepareinplaceaddvirtual in...

ROS-20261001-73-0061

The vulnerability in aardvark-dns is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service failures...

AlmaLinux 9.2 [TuxCare] Security Update: libnghttp2 / libnghttp2-devel / nghttp2 Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778129164)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778129164 advisory. - Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's HTTP/2 codec may leak a header map and bookkeeping...

ROS-20261001-73-0025

The vulnerability in glib2 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0028

The vulnerability in glib2 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

AlmaLinux 9.6 [TuxCare] Security Update: libnghttp2 / libnghttp2-devel / nghttp2 (ALMALINUX9.6:CLSA-2026:1777974095)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777974095 advisory. - nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2024_1818)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241818 advisory. OpenJDK: long Exception message leading to crash 8319851 CVE-2024-21011 OpenJDK: integer overflow in C1 compiler address generation 8322122 CVE-2024-21068...

The vulnerability of the fragment_reassembly() function (epan/dissectors/packet-sctp.c) in the Wireshark network traffic analyzer allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fragmentreassembly function epan/dissectors/packet-sctp.c in the Wireshark network traffic analyzer is related to the execution of operations outside the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruption...

The vulnerability of the Sharkd traffic analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the Sharkd traffic analyzer in Wireshark relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the MBIM protocol dissecators (epan/dissectors/packet-mbim.c) and the Wireshark traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the MBIM protocol dissector epan/dissectors/packet-mbim.c and the Wireshark traffic analyzer is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of the arch/x86/include/asm/nospec-branch.h and arch/x86/kernel/cpu/bugs.c files in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the arch/x86/include/asm/nospec-branch.h and arch/x86/kernel/cpu/bugs.c files in Linux operating systems is related to a violation of expected behavior. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the MobiDoc::ParseHeader() function in the src/MobiDoc.cpp file of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu format document viewing software, SumatraPDF, allows a hacker to induce a service failure.

The vulnerability of the MobiDoc::ParseHeader function in the src/MobiDoc.cpp file of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing software SumatraPDF lies in the reading of data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the csnStreamDissector component (epan/dissectors/packet-csn1.c) in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the csnStreamDissector component epan/dissectors/packet-csn1.c in the Wireshark network traffic analyzer allows an attacker to cause a service failure by executing the operation outside of the buffer in memory...

The vulnerability of the netmon_process_record() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the netmonprocessrecord function, a traffic analyzer in Wireshark, is related to the lack of input data validation for cyclic operations. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Dot11DecryptFtMicCheck() function (epan/crypt/dot11decrypt.c), a traffic analyzer for computer networks in Wireshark, allows a hacker to cause a service failure.

The vulnerability of the Dot11DecryptFtMicCheck function epan/crypt/dot11decrypt.c, a traffic analyzer for computer networks in Wireshark, is related to the operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures...