CVE-2011-4862

CVE-2011-4862 Projet final pour Sécurité et Vie Privée CS 600.443 | Automne 2018 J'ai initialement essayé d'utiliser diff pour créer un patch. J'ai patché le fichier comme je pensais qu'il devrait l'être, avant de voir le vrai patch. encrypt.patch est ce patch original que j'ai créé avec diff...

CVE-2026-9637

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...

EUVD-2026-69133

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...

CVE-2026-9637 CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...

Astra Linux – Vulnerability in node-moment

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Versions of moment that were affected use an inefficient parsing algorithm. Specifically, the string-to-date parsing method used by moment more precisely, the rfc2822 parsing method, which is used by...

Astra Linux – Vulnerability in grub2

The “read” command is used to read the keyboard input from the user. While reading, the input length is stored as a 32-bit integer value. This value is then used to reallocate the line buffer to accommodate the next character. During this process, if the line is long enough, it’s possible for thi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: Validates user input to ensure it is of the expected length. I received multiple syzbot reports indicating that old bugs were exposed due to BPF after the commit 20f2505fb436 “bpf: Try to avoid kzalloc in...

EulerOS 2.0 SP11 : python-idna (EulerOS-SA-2026-3090)

According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and...

OESA-2026-3242 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A denial-of-service and resource...

CVE-2026-5056 GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

Fedora 43 : perl-HTTP-Date (2026-b1bdb7c518)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b1bdb7c518 advisory. Changes: 6.08 2026-07-09 02:04:21Z - SECURITY Reject input longer than 64 characters in parsedate to prevent quadratic regex backtracking a denial of service...

CVE-2026-64445 staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth OnAuth has two bugs in the shared-key authentication path. When the Privacy bit is set, rtwwepdecrypt is called without verifying that the frame is long enough t...

CVE-2026-14257 brace-expansion DoS via unbounded expansion length causing an out-of-memory process crash

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand function limits the number of results with a max option default 100,000 but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count und...

CVE-2026-64014

A flaw was found in the Linux kernel's usbtouchscreen driver. A local attacker with a specially crafted USB touch screen device could exploit this vulnerability by sending a malicious interrupt packet with an oversized length field. This improper handling of input lengths can lead to an...

UBUNTU-CVE-2026-15588

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...

Linux Distros Unpatched Vulnerability : CVE-2026-63886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: target: iscsi: Validate CHAPR length before base64 decode chapservercomputehash allocates clientdigest as kzallocchap-digestsize and then, for...

CVE-2026-63886

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAPR length before base64 decode chapservercomputehash allocates clientdigest as kzallocchap-digestsize and then, for BASE64-encoded responses, passes chapr directly to chapbase64decode without...

CVE-2026-63886

The CVE-2026-63886 entry concerns the Linux kernel SCSI iSCSI path, where chap_server_compute_hash() could overflow a digest buffer during BASE64 decoding. Root cause: chap_r is fed to chap_base64_decode() without validation that the decoded output fits into client_digest (kzalloc(chap->digest...

CVE-2026-56455

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service DoS. The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become...

CVE-2026-56455

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability caused by improper input size validation. An attacker can send oversized data to a memory container, potentially crashing or rendering the system unresponsive (DoS). The documents indicate mitigation as implementing comprehensive inp...