dfir-orc

DFIR ORC !LGPL licensedimg-license French Cybersecurity Agency ANSSI This project is managed byANSSI. To find out more, you can visit the page in French dedicated to ANSSI’s open-source strategy. You can also click on the badges above to learn more about their meaning. Documentation...

ai.chatur:cortex-core (>=0.0.1, <=0.1.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2224 more potentially affected by CVE-2026-94651 via org.apache.thrift:libthrift (>=0.14.0, <=0.24.0)

org.apache.thrift:libthrift MAVEN version =0.14.0, =0.0.1, =0.0.1, =0.0.1, =3.10.0.5, =6.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =5.0.1, =1.2.0, =1.2.0, =2.0.0 - be.ugent.solidlab:shapeshift 0.0.1 and more Source cves: CVE-2026-94651 Source advisory: MEND:CVE-2026-94651...

CentOS Linux 7 [TuxCare] Security Update: orc / orc-compiler / orc-devel / orc-doc (CENTOS7:CLSA-2024:1725650489)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1725650489 advisory. - Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a speciall...

Rocky Linux 8 [CIQ] Security Update: orc / orc-compiler / orc-compiler-debuginfo / orc-debuginfo / etc (crlsa-2024_5306)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245306 advisory. orc: Stack-based buffer overflow vulnerability in ORC CVE-2024-40897 Tenable has extracted the preceding description block directly from the CIQ security advisory...

AlmaLinux 9.2 [TuxCare] Security Update: orc / orc-compiler / orc-devel / orc-doc (ALMALINUX9.2:CLSA-2025:1755114348)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1755114348 advisory. - Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a...

SUSE CVE-2026-4833

A weakness has been identified in Orc discount up to 3.0.1.2. This issue affects the function compile of the file markdown.c of the component Markdown Handler. This manipulation causes uncontrolled recursion. The attack is restricted to local execution. The exploit has been made available to the...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1363 more potentially affected by CVE-2026-79993 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.25 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

Astra Linux – Vulnerability in ORC

A stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked into processing a specially crafted file using the affected ORC compiler, arbitrary code may be executed on the developer’s build environment. This may lead to compromise of...

NewStart CGSL MAIN 7.02 : orc Vulnerability (NS-SA-2026-0108)

The remote NewStart CGSL host, running version MAIN 7.02, has orc packages installed that are affected by a vulnerability: - Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the...

ROOT-OS-DEBIAN-12-CVE-2024-40897 CVE-2024-40897 in orc - Patched by Root

Root has patched CVE-2024-40897 in the orc package for Root:Debian:12. Multiple fixed versions available...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10907 more potentially affected by CVE-2026-12802 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-12802 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519217...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10907 more potentially affected by CVE-2026-13586 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-13586 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518992...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10907 more potentially affected by CVE-2026-15055 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-15055 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18517495...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10907 more potentially affected by CVE-2026-12802 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-12802 Source advisory: MEND:CVE-2026-12802...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10907 more potentially affected by CVE-2026-59639 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-59639 Source advisory: MEND:CVE-2026-59639...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10907 more potentially affected by CVE-2026-59642 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-59642 Source advisory: MEND:CVE-2026-59642...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +11438 more potentially affected by CVE-2026-59645 via org.bouncycastle:bcutil-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcutil-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-59645 Source advisory: MEND:CVE-2026-59645...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10907 more potentially affected by CVE-2026-59647 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-59647 Source advisory: MEND:CVE-2026-59647...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10907 more potentially affected by CVE-2026-15055 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-15055 Source advisory: MEND:CVE-2026-15055...

TencentOS Server 4: liborc (TSSA-2026:0742)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0742 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...