11 matches found
Security Bulletin:Vulnerability in pyasn1 affects IBM Netezza Appliance
Summary The pyasn1 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-59884, CVE-2026-59885, CVE-2026-59886 Vulnerability Details CVEID:CVE-2026-59884 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder...
ANT-2026-JS5D1Z2X · wolfSSL/wolfssl · Buffer Overflow
buffer-overflow medium CVE-2026-5295 CVE-2026-6678 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-JS5D1Z2X: Stack buffer...
SUSE CVE-2025-66564
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits via a call to strings.Split an optionally-provided OID which is untrusted data on periods. Similarly, function api.getContentType splits the Content-Type heade...
Sigstore Timestamp Authority allocates excessive memory during request parsing
Impact Excessive memory allocation Function api.ParseJSONRequest currently splits via a call to strings.Split an optionally-provided OID which is untrusted data on periods. Similarly, function api.getContentType splits the Content-Type header which is also untrusted data on an application string...
CVE-2025-66564
Sigstore Timestamp Authority contains a vulnerability (CVE-2025-66564) where ParseJSONRequest and getContentType allocate O(n) bytes when handling untrusted input (an OID with many periods or a malformed Content-Type header). The issue is triggered by using strings.Split on untrusted data, leadin...
net-snmp:snmp_parse_oid_fuzzer: Global-buffer-overflow in __wrap_strlcpy
Detailed Report: https://oss-fuzz.com/testcase?key=4794118825181184 Project: net-snmp Fuzzing Engine: honggfuzz Fuzz Target: snmpparseoidfuzzer Job Type: honggfuzzasannet-snmp Platform Id: linux Crash Type: Global-buffer-overflow WRITE Crash Address: 0x00000a12ea60 Crash State: wrapstrlcpy...
net-snmp:snmp_parse_oid_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5385602735407104 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparseoidfuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000003b3e35 Crash State: NULL Sanitizer: undefined UBSAN...
OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)
Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...
OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)
Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...
