5345 matches found
CVE-2026-74671
In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...
EUVD-2026-64390
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...
CVE-2026-74671 ima: fix out-of-bounds read in xattr_verify()
In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...
EUVD-2026-64358
In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattrverify The digest-length check in xattrverify mixes int and sizet: if xattrlen - sizeofxattrvalue-type - hashstart = iint-imahash-length sizeof yields sizet, so the usual arithmetic conversions...
PT-2026-79708
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Validate T10 PI scatterlist counts When T10 PI is negotiated, vhost-scsi splits protection bytes from the data iterator before mapping the request scatterlists. A malformed request can claim protection bytes that cove...
PT-2026-79676
In the Linux kernel, the following vulnerability has been resolved: ima: fix out-of-bounds read in xattr verify The digest-length check in xattr verify mixes int and size t: if xattr len - sizeofxattr value-type - hash start = iint-ima hash-length sizeof yields size t, so the usual arithmetic...
EUVD-2026-63738
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow...
EUVD-2026-63632
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow...
CVE-2026-18670
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow...
CVE-2026-16996
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow...
CVE-2026-18670 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to an integer underflow...
CVE-2026-18670
CVE-2026-18670 is an integer underflow vulnerability in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a remote, unauthenticated attacker to cause a denial of service and potentially disclose sensitive information . The CVSS 3.1 base score is 8.2 (HIGH) with a network attack vector requiri...
CVE-2026-16996 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow...
CVE-2026-16996
CVE-2026-16996 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The vulnerability is an integer underflow that allows a local attacker with low privileges to execute arbitrary code , with changed scope and high impact on confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ). CISA ...
CVE-2026-74282
A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC component. A remote or local attacker could send an oversized connection acknowledgment ACK message, leading to an integer underflow. This underflow can cause the connection to become permanently congested,...
GO-2026-6185 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6195 vulnerabilities
Vulnerabilities for packages: telegraf...
AlmaLinux 8 : gstreamer1-plugins-good (ALSA-2026:56966)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:56966 advisory. gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders CVE-2026-18649 gstreamer1-plugins-good:...
RockyLinux 8 : gstreamer1-plugins-good (RLSA-2026:56966)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56966 advisory. gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders CVE-2026-18649 gstreamer1-plugins-good:...
