92006 matches found
PT-2026-122039
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in read skb After a partial stream receive, rx bytes tracks the unread suffix while buf used and peer credit still cover the whole packet. virtio transport read skb dequeues that packet but...
SUSE SLED15 / SLES15 Security Update : python-hpack (SUSE-SU-2026:4832-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4832-1 advisory. This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause...
SUSE SLES16 Security Update : aliyun-cli (SUSE-SU-2026:24261-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:24261-1 advisory. This update for aliyun-cli fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDic...
GitLab 19.5.0 Regular Expression Compiler Integer Overflow
GitLab version 19.5.0 and prior affected versions contain an integer overflow in the regular expression compiler that can allow unauthenticated code execution. This proof of concept triggers the vulnerable Onigmo regular expression path. https://packetstorm.news/download/237296...
Linux Distros Unpatched Vulnerability : CVE-2026-115505
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A...
AlmaLinux 9.2 [TuxCare] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-gtk / etc (ALMALINUX9.2:CLSA-2026:1792769449)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792769449 advisory. - An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps...
AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792800480)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792800480 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before...
AlmaLinux 9 : expat (ALSA-2026:88247)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:88247 advisory. expat: expat: Denial of Service via integer overflow in expatrealloc CVE-2026-102633 expat: expat: Information disclosure via heap buffer over-read in...
Linux Distros Unpatched Vulnerability : CVE-2026-10758
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer...
ROS-20261023-73-0074
The vulnerability in libheif is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
FreeRDP 3.31.1 Integer Truncation Heap Buffer Overflow
FreeRDP versions 3.0.0 through 3.31.1 contain an integer truncation vulnerability in licensecheckstreamlength that lets a malicious RDP server trigger a heap buffer overflow on 32-bit clients...
Linux sch_cake Heap Buffer Overflow DoS
The vulnerability of the cakecalcoverhead function in the net/sched/schcake.c component of the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 4.20. It arises because bpfflowdissect fails to enforce hlen to U16MAX prior to clamping it when processing offsets returned by BPF programs. If hlen exceeds 65535, it is truncated to U16MAX, causing nhoff and thoff to be forced to zero. Thi...
PT-2026-121870
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gntalloc ioctl alloc function where the grant-id array is allocated before verifying if the requested count is within the global grant limit. This allows...
Oracle Linux 9 : expat (ELSA-2026-88247)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88247 advisory. - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expatrealloc - CVE-2026-77214 expat: expat: Information disclosure via heap...
Linux Distros Unpatched Vulnerability : CVE-2026-93518
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer truncation issue in XkbResizeKeyType that could lead to a heap buffer overflow by authenticated X clients in X.org X server before 21.1.25 and XWayla...
GitLab 19.5.0 Integer Overflow Remote Code Execution
GitLab CE/EE versions 7.0 through 19.5.0 contain an integer overflow in the regular expression compiler that may allow unauthenticated remote code execution. This proof of concept triggers the issue through a crafted org file rendered by the blob viewer. https://packetstorm.news/download/237263...
Rocky Linux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792801476)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792801476 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before...
SUSE CVE-2026-98819
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8MAX, and records exceeding...
