NewStart CGSL MAIN 6.06 (SP) : glibc Multiple Vulnerabilities (NS-SA-2026-0027)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has glibc packages installed that are affected by multiple vulnerabilities: - The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object passed...

libpsl:libpsl_load_fuzzer: Stack-buffer-overflow in domain_to_punycode

Project: https://github.com/rockdaboot/libpsl.git Detailed Report: https://oss-fuzz.com/testcase?key=6483136742031360 Project: libpsl Fuzzing Engine: afl Fuzz Target: libpslloadfuzzer Job Type: aflasanlibpsl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fddc41669a...

AZL-41581 CVE-2021-22918 affecting package pytorch for versions less than 2.2.2-4

Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uvidnatoascii is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe, with the latter holding a pointer to the end of the buffer. This can lead to...

PT-2016-6811

Name of the Vulnerable Software and Affected Versions libidn versions prior to 1.33 Description The issue allows context-dependent attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via 64 bytes of input. This is due to a problem in the idna to ascii 4i function...

UBUNTU-CVE-2016-6261

The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via 64 bytes of input...