RHSA-2026:51153 Red Hat Security Advisory: gpsd-minimal security update

Bulletin has no description...

Oracle Linux 9 : gpsd-minimal (ELSA-2026-51153)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-51153 advisory. - fix command injection in gpsprof CVE-2026-58459 - fix buffer overflow in NMEA2000 driver CVE-2025-67268 Tenable has extracted the preceding description block...

RockyLinux 10 : gpsd (RLSA-2026:51075)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:51075 advisory. gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution CVE-2026-58459 Tenable has extracted the preceding description block direct...

RockyLinux 9 : gpsd-minimal (RLSA-2026:51153)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:51153 advisory. gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution CVE-2026-58459 Tenable has extracted the preceding description block directl...

Important: Red Hat Security Advisory: gpsd-minimal security update

An update for gpsd-minimal is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution

A flaw was found in gpsd, a service application that monitors one or more GPSes or AIS receivers. The gpsprof utility is vulnerable to a command injection. An attacker who can control the GPS device subtype value can embed malicious commands within the gnuplot plot title. When a user processes a...

Important: Red Hat Security Advisory: gpsd security update

An update for gpsd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RHEL 9 : gpsd-minimal (RHSA-2026:51153)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51153 advisory. gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the...

gpsd security update

3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459...

ALSA-2026:51153 Important: gpsd-minimal security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The AlmaLinux support for this package is limited...

RHEL 10 : gpsd (RHSA-2026:51075)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51075 advisory. gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the...

Oracle Linux 10 : gpsd (ELSA-2026-51075)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-51075 advisory. 3.26.1-3.0.1.el102.1 - Replace upstream reference Orabug: 37033219 1:3.26.1-3.el102.1 - fix command injection in gpsprof CVE-2026-58459 Tenable has extracted...

Photon OS 5.0: Gpsd PHSA-2026-5.0-91-0737

An update of the gpsd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0737. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Gpsd PHSA-2026-5.0-91-0738

An update of the gpsd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0738. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 43 : gpsd (2026-d61fcb86ed)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d61fcb86ed advisory. Security fix for CVE-2026-58459 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

(Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NMEA data by the gpsd daemon. The issue results from...

Linux Distros Unpatched Vulnerability : CVE-2026-60122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS...

CVE-2026-60122

gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute arbitrary OS commands by injecting malicious content into the SKY.satellites.used field, which is inserted unsanitize...

CVE-2026-60122 gpsd gpsprof Code Injection via SKY.satellites used Field

gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS input data to execute arbitrary OS commands by injecting malicious content into the SKY.satellites.used field, which is inserted unsanitize...

PT-2026-64167

Name of the Vulnerable Software and Affected Versions gpsd versions prior to 3.27.6 Description The gpsprof utility contains a code injection flaw. An attacker controlling GPS input data can execute arbitrary OS commands by injecting malicious content into the SKY.satellites.used field. This fiel...