EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2026-4235)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP11 : unbound (EulerOS-SA-2026-4383)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare loca...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-4144)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

Rocky Linux 9.6 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791811122)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791811122 advisory. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success...

EulerOS 2.0 SP13 : patch (EulerOS-SA-2026-4171)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...

EulerOS 2.0 SP13 : libusbx (EulerOS-SA-2026-4067)

According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...

EulerOS 2.0 SP13 : patch (EulerOS-SA-2026-4080)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-4053)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791800936)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791800936 advisory. - In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunitdevicedriverte...

TencentOS Server 3: gstreamer1-plugins-base (TSSA-2026:1121)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1121 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

AlmaLinux 9.6 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791811122)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791811122 advisory. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4241)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fanotify: fix false positive on permission eventsCVE-2026-46150 nfsd: never defer requests during idmap lookupCVE-2026-45983 fbdev: defio:...

krb5: krb5: Denial of Service via malformed PAC in S4U2Proxy requests

A flaw was found in krb5. This vulnerability allows a compromised or malicious cross-realm trusted Key Distribution Center KDC to cause a Denial of Service DoS. By sending an S4U2Proxy delegation request containing a malformed client name within a Privilege Attribute Certificate PAC, an attacker...

krb5: krb5: Denial of Service via crafted forwarded credentials

A flaw was found in krb5. An authenticated remote attacker can cause a Denial of Service DoS by sending specially crafted forwarded credentials containing mismatched credential entries. This improper handling triggers a null pointer dereference, causing the service to crash and become unavailable...

CVE-2026-19737

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

CVE-2026-19737

The ESP32 I2S driver in Zephyr RTOS contains a NULL pointer dereference vulnerability in the i2s_esp32_trigger_check() function within drivers/i2s/i2s_esp32.c. The root cause is that the driver fails to validate stream pointers for I2S_DIR_RX and I2S_DIR_TX directions, leading to a load from addr...

CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

slicer

Slicer Una herramienta para automatizar el proceso de reconocimiento en un archivo APK. Slicer acepta una ruta a un archivo APK extraído y luego devuelve todas las actividades, receptores y servicios que están exportados, tienen permisos null y pueden ser provocados externamente. Nota : El APK de...

CVE-2026-92871

A flaw was found in pgpool-II. A remote, unauthenticated attacker could cause a Denial of Service DoS due to a NULL pointer dereference in the watchdog component. Exploiting this vulnerability leads to abnormal termination of the watchdog process. Mitigation Restrict network access to the pgpool-...