6174 matches found
ROOT-OS-UBUNTU-2204-CVE-2026-4438 CVE-2026-4438 in rootio-glibc - Patched by Root
Root has patched CVE-2026-4438 in the rootio-glibc package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-5435 CVE-2026-5435 in rootio-glibc - Patched by Root
Root has patched CVE-2026-5435 in the rootio-glibc package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-4046 CVE-2026-4046 in rootio-glibc - Patched by Root
Root has patched CVE-2026-4046 in the rootio-glibc package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-4437 CVE-2026-4437 in rootio-glibc - Patched by Root
Root has patched CVE-2026-4437 in the rootio-glibc package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-6238 CVE-2026-6238 in rootio-glibc - Patched by Root
Root has patched CVE-2026-6238 in the rootio-glibc package for Root:Ubuntu:22.04. Multiple fixed versions available...
EUVD-2026-50279
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-18220
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-18220 Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...
CVE-2026-18220
The CVE-2026-18220 vulnerability affects the GNU binutils BFD library’s DLX ELF backend (source file bfd/elf32-dlx.c). The root cause is an insufficient bounds check in dlx_rtype_to_howto() on ELF32_R_TYPE(r_info) before indexing into dlx_elf_howto_table[], despite non-contiguous DLX relocation t...
PT-2026-65773
An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlx rtype to howto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values v...
NewStart CGSL MAIN 6.06 : glibc Vulnerability (NS-SA-2026-0058)
The remote NewStart CGSL host, running version MAIN 6.06, has glibc packages installed that are affected by a vulnerability: - The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EX...
RockyLinux security update for glibc (RLSA-2026:2786) and kernel (RLSA-2026:2722), curl (RLSA-2026:1350)
Rocky Linux Security Update for curl RLSA-2026:1350 curl: libcurl: Curl out of bounds read for cookie path CVE-2025-9086 Rocky Linux Security Update for kernel RLSA-2026:2722 kernel: ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettrans CVE-2023-53034 kernel: smc: Fix use-after-free i...
DEBIAN-CVE-2026-66032
libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with SSHFXPSTATUS containin...
CVE-2026-66032
libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with SSHFXPSTATUS containin...
UBUNTU-CVE-2026-66032
libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with SSHFXPSTATUS containin...
CVE-2026-66035
libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...
CVE-2026-66032
libssh2
EUVD-2026-48719
libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSHFXPOPEN with SSHFXPSTATUS containin...
PT-2026-64379
Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A double-free issue exists in the sftp open function within src/sftp.c. This occurs when a malicious SSH server responds to SSH FXP OPEN with SSH FXP STATUS containing FX OK, causing the response da...