munge

MUNGE Uid 'N' Gid Emporium MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating user credentials. It is designed to be highly scalable for use in an HPC cluster environment. It provides a portable API for encoding the user's identity into a tamper-proof...

Astra Linux – Vulnerability in Munge

MUNGE is an authentication service for creating and validating user credentials. From version 0.5 to 0.5.17, local attackers could exploit a buffer overflow vulnerability in MUNGE the authentication daemon to leak cryptographic key material from process memory. With the leaked key material,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: comedi: A divide-by-zero issue in comedibufmunge has been fixed. The comedibufmunge function performs a modulo operation: async-mungechan %= async-cmd.chanlistlen. However, it does not check whether chanlistlen is zero first. If ...

AlmaLinux 9.6 [TuxCare] Security Update: munge / munge-devel / munge-libs (ALMALINUX9.6:CLSA-2026:1772572505)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772572505 advisory. - MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer...

Rocky Linux 9 [CIQ] Security Update: munge / munge-debuginfo / munge-debugsource / munge-devel / etc (crlsa-2026_3034)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263034 advisory. MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery CVE-2026-25506 Tenable has extracted the preceding description blo...

Rocky Linux 10.1 [CIQ] Security Update: munge / munge-debuginfo / munge-debugsource / munge-devel / etc (crlsa-2026_3033)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263033 advisory. MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery CVE-2026-25506 Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: munge / munge-debuginfo / munge-debugsource / munge-devel / etc (ciqsa-2026_1189)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261189 advisory. This advisory aggregates security fixes for the munge SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-25506. Tenable has extracted the preceding description blo...

Rocky Linux 8 [CIQ] Security Update: munge / munge-debuginfo / munge-debugsource / munge-devel / etc (crlsa-2026_3032)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263032 advisory. MUNGE: MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery CVE-2026-25506 Tenable has extracted the preceding description blo...

Rocky Linux 9.2 [CIQ] Security Update: munge / munge-debuginfo / munge-debugsource / munge-devel / etc (ciqsa-2026_1187)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261187 advisory. This advisory aggregates security fixes for the munge SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-25506. Tenable has extracted the preceding description blo...

Rocky Linux 9.4 [CIQ] Security Update: munge / munge-debuginfo / munge-debugsource / munge-devel / etc (ciqsa-2026_1188)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261188 advisory. This advisory aggregates security fixes for the munge SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2026-25506. Tenable has extracted the preceding description blo...

Rocky Linux 9.6 [CIQ] Security Update: munge / munge-debuginfo / munge-debugsource / munge-devel / etc (ciqsa-2026_1204)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261204 advisory. This advisory aggregates security fixes for the munge SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-25506. Tenable has extracted the preceding description blo...

Rocky Linux 9.6 [TuxCare] Security Update: munge / munge-devel / munge-libs (ALMALINUX9.6:CLSA-2026:1772572505)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772572505 advisory. - MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer...

AlmaLinux 9.2 [TuxCare] Security Update: munge / munge-devel / munge-libs (ALMALINUX9.2:CLSA-2026:1772571803)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772571803 advisory. - MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: munge (UTSA-2026-014299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014299 advisory. MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013759 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedibufmunge The comedibufmunge function performs a modulo...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011223 advisory. In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedibufmunge The comedibufmunge function performs a modulo...

Unity Linux 20.1070a Security Update: munge (UTSA-2026-007303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007303 advisory. MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in...

TencentOS Server 4: munge (TSSA-2026:0139)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0139 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Amazon Linux 2023 : munge, munge-devel, munge-libs (ALAS2023-2026-1453)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1453 advisory. MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged the MUNGE authentication daemon...

Important: munge

Issue Overview: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulnerability in munged the MUNGE authentication daemon to leak cryptographic key material from process memory. With the leaked key...