44855 matches found
Fedora 44 : perl-Net-DNS (2026-57f107ed83)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-57f107ed83 advisory. Update to 1.57 to fix CVE-2026-81928 Net::DNS: Denial of Service via unbounded recursion with misplaced TSIG records Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2016-15059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encodepunycode. The XS backend...
ROS-20260923-73-0058
The vulnerability of the xskbind function in the net/xdp/xsk.c module, which implements networking functions for the Linux operating system’s kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
.NET Visual Studio Code Information Disclosure
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to improper boundary removal of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...
.NET Visual Studio Code Buffer Overflow Privilege Escalation
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
.NET Visual Studio Code Memory Leak Information Disclosure
The vulnerability of the .NET software platform and the Visual Studio Code code editor is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to disclose sensitive information...
.NET Visual Studio Code Buffer Overflow DoS
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
.NET Visual Studio Code HTTP Request Disclosure
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
.NET Visual Studio Code Buffer Overflow Privilege Escalation
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
.NET Visual Studio Code Critical Data Deletion DoS
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of input validation for cyclic operations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Important: buildah security update
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...
Important: skopeo security update
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fixes: skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarsha...
RockyLinux 9 : runc (RLSA-2026:70191)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:70191 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 Tenable has extracted the preceding description...
.NET and the Visual Privilege Escalation
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to the lack of checking for the return value. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
A flaw was found in the net/mlx5 driver of the Linux kernel. When the driver attempts to read the MCIA register from a device advertising the mcia32dwords capability, the mlx5querymcia function can read more data than the allocated buffer can hold. This leads to a buffer overflow, which can cause...
kernel: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads
A flaw was found in the net/mlx5 driver of the Linux kernel. When the driver attempts to read the MCIA register from a device advertising the mcia32dwords capability, the mlx5querymcia function can read more data than the allocated buffer can hold. This leads to a buffer overflow, which can cause...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
RLSA-2026:69293 Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...
CVE-2026-13087
A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svcrdmasendto.c. When a crafted RPC-over-RDMA client sends a large NFS READ request with an empty Write list and no Reply chunk, the server linearizes the entire...