72409 matches found
OESA-2026-3503 p11-kit security update
Provides a way to load and enumerate PKCS11 modules. Provides a standard configuration setup for installing PKCS11 modules in such a way that they're discoverable. Also solves problems with coordinating the use of PKCS11 by different components or libraries living in the same process. Security...
OESA-2026-3502 nss security update
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
SUSE CVE-2026-74394
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate data length check immbuf-len is a user-controlled uint32t received from the network. Adding it to immdataoffset without overflow checking allows a malicious initiator to send...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001489)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001489 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix hashtab overflow check on 32-bit arches The hashtab code relies on rounduppowoftwo to...
Linux Distros Unpatched Vulnerability : CVE-2025-70293
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to...
Linux Distros Unpatched Vulnerability : CVE-2025-70290
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk...
Unity Linux 20.1070e Security Update: gawk (UTSA-2026-104943)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104943 advisory. Integer overflow vulnerability has been found in builtin.c program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could b...
Unity Linux 20.1070a Security Update: coreutils (UTSA-2026-104994)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104994 advisory. GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. Th...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001496)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001496 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAPHASH overflow check on 32-bit arches The devmap code allocates a number hash bucke...
Unity Linux 20.1070e Security Update: spice-vdagent (UTSA-2026-104939)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104939 advisory. A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability c...
Unity Linux 20.1070e Security Update: libarchive (UTSA-2026-104945)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104945 advisory. A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in archivewritesetformatzip.c, when ZIP encryptio...
openSUSE 16 Security Update : wget (openSUSE-SU-2026:21665-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21665-1 advisory. Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. -...
GHSA-MRPP-V6PG-P54X klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
Summary On the SFT add-quantity path the only supply bound is SFTAddCirculation, which does meta.Circulation += amount with no overflow guard, then checks if meta.Circulation meta.MaxSupply && meta.MaxSupply != 0. If amount overflows int64 and wraps negative, negative MaxSupply is false, the cap...
EUVD-2026-68012
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...
CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...
CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupply on the semi-fungible token add-quantity path. In core/kapp/systemAccount/systemAcount.go, SFTAddCirculation performed meta.Circulation ...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the libswscale/utils.c process. An attacker can cause the application to crash or become unresponsive by supplying a specially crafted image file. Remediation Upgrade ffmpeg to version 8.1 or higher...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the yuv2planeX8c function in libswscale/output.c. An attacker can trigger a crash or application termination by supplying a specially crafted video file. Remediation Upgrade ffmpeg to version 8.1 or...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the hScale16To19c function. An attacker can trigger a crash or disrupt service by supplying a specially crafted image file. Remediation Upgrade ffmpeg to version 8.1 or higher. References -...