9935 matches found
RLSA-2026:54654 Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
EUVD-2026-59396
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Adding a max and min check and fail if user supplied value is more than t...
CVE-2026-74550: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...
CVE-2026-74497: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result directly in outpacket-packetsizei. If a connected USB device sends an...
PT-2026-72943
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL bus dereference occurs in the of pci range parser one function. This issue arises because of match bus returns NULL for nodes containing ranges or dma-ranges but lacking local...
CVE-2026-74491: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in ofpcirangeparserone The bus matching rework made ofmatchbus return NULL for nodes with ranges/dma-ranges but no local address-cells. parserinit stored that NULL bus, and the range iterator...
CVE-2026-74419: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Adjust size for copytouser The amount of data returned to user space should be limited by the buffer size provided by the application. If the buffer is smaller than the data size, return only the portion that fits...
SUSE CVE-2026-33818
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-72816 go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...
The vulnerability of Azure’s Application Insights Profiler, a cloud-based tool for analyzing web application performance, stems from an incorrect path name limitation in the catalog. This allows attackers to escalate their privileges.
The vulnerability of Azure’s Application Insights Profiler, a cloud-based tool for analyzing web application performance, is related to an incorrect path name limitation. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
AlmaLinux 8 : bind9.16 (ALSA-2026:54509)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54509 advisory. bind9: bind: Potential wildcard CNAME RPZ policy bypass CVE-2026-11331 bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field CVE-2026-133...
DEBIAN-CVE-2026-33818
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-33818
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
AZL-96653 CVE-2026-33818 affecting package golang 1.25.12-1
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-33818
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-33818
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-33818 Enforce maximum recursion depth in encoding/asn1
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-33818
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-33818
The golang programming language, specifically the encoding/asn1 package, is vulnerable to a Denial of Service via excessive recursion in the Unmarshal function. This flaw allows an attacker to cause stack exhaustion when parsing deeply-nested, recursive structures. The vulnerability affects sever...