Astra Linux – Vulnerability in GIMP

GIMP PSP File Parsing: An Off-by-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page or open a malicio...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed another “off-by-one” issue with the fsmap for 1k-block file systems. It seems that syzbot discovered that issuing the FSMAP call as follows: c struct fsmaphead cmd = .fmhcount = ...; .fmhkeys = .fmrdevice = / ext4...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the InterpretImageFilename function. The issue arises from an off-by-one error that causes out-of-bounds memory access when...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: sd: A “off-by-one” error has been fixed in sdreadBlockcharacteristics. If the device returns page 0xb1 with a length of 8 this occurs with QEMU v2.x, for example, sdReadBlockCharacteristics may attempt an out-of-bounds...

CVE-2026-90781

A flaw was found in alsa-lib. This vulnerability is an off-by-one stack buffer overflow in the sndctlasciielemidparse function. A local attacker can exploit this by supplying a specially crafted, long control-element identifier string through saved state files or command-line arguments. This can...

cve-2010-1938

🚀 CVE-2010-1938 FTP 越界漏洞利用 一个简单的 Python 脚本，用于测试 OPIE 库中的越界漏洞（CVE-2010-1938）。该漏洞影响特定 FTP 服务器，可能导致拒绝服务（DoS）或任意代码执行。 📜 描述 该脚本针对某些 FTP 服务器使用的 OPIE 库中已知的漏洞（CVE-2010-1938）。通过发送特制的用户名，脚本试图在 FTP 服务器中引发堆栈溢出，从而导致远程代码执行。 💡 功能特性 可调节的有效载荷大小 ，用于微调利用。 以分段 方式发送有效载荷，以避免检测并防止服务器立即崩溃。 可自定义的目标 IP 和端口 ，用于渗透测试。 🚨 免责声明...

httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...

CVE-2026-90781

alsa-lib through 1.2.16.1 contains an off-by-one stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function (in ctlparse.c). When parsing a name= field with 64 or more characters, the function writes one byte past a 64-byte stack buffer, overwriting adjacent stack memory and potentiall...

CVE-2026-90781 alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

CVE-2026-90781 alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in __snd_ctl_ascii_elem_id_parse()

alsa-lib through 1.2.16.1 contains a stack buffer overflow in the sndctlasciielemidparse function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-li...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit 脆弱性環境 Dockerfileを使用してイメージを作成 root@kitploit: docker build -t cve-2021-3156:ubuntu2004 . イメージを使用してコンテナを作成 root@kitploit: docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash 脆弱性の原因 Sudo 1.9.5p2 より前のバージョン では、off-by-one エラーが存在し、ヒープベースのバッファオーバーフロー を引き起こす可能性があります。...

Linux Distros Unpatched Vulnerability : CVE-2026-89525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. snumentries stores the...

Linux Distros Unpatched Vulnerability : CVE-2026-89442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate socket ID in closassoc ioctl isstifclosassoc validates the user- supplied socketid with 'socketid topologymaxpackages', but...

Linux Distros Unpatched Vulnerability : CVE-2026-89596

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - forcedeth: fix off-by-one when saving/restoring non-PCI config space nvsuspend and nvresume walk the non-PCI configuration space with for i = 0; i...

Linux Distros Unpatched Vulnerability : CVE-2026-89726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen Patch series lib/ucs2string.c: fix out-of- bounds read in ucs2strnlen, v2. This series fixes an off-by-o...

Linux Distros Unpatched Vulnerability : CVE-2026-81012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-89751

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0 %NASLMINLEVEL 80900 C...

CVE-2026-89751

A flaw was found in the Linux kernel's x86/tdx component. An off-by-one error in the handlein and handleout functions, specifically in the GENMASK calculation for port I/O operations, causes the mask to be one bit too wide. This incorrect handling of I/O sizes could potentially lead to unintended...

CVE-2026-81012

A flaw was found in the Linux kernel's hp-bioscfg component. The hpgetstringfrombuffer function contains an off-by-one write vulnerability. This occurs because the NUL terminator can be written one byte beyond the allocated buffer, leading to a buffer overflow. An attacker could potentially explo...

CVE-2026-89596

A flaw was found in the Linux kernel's forcedeth driver. An off-by-one error in the nvsuspend and nvresume functions, which handle saving and restoring non-PCI configuration space, can lead to an out-of-bounds memory access. This occurs during system suspend and resume operations. If specific...