CVE-2026-34059 Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

CVE-2026-34059

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

CVE-2026-34059 Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

CLSA-2026-1777883671 nginx: Fix of 2 CVEs

CVE-2026-27651: fix null pointer dereference in ngxmailauthhttpmodule when authentication retry is enabled with CRAM-MD5 or APOP - CVE-2026-32647: fix buffer over-read/write in ngxhttpmp4module when processing crafted mp4 files with empty stco/co64 atoms...

The vulnerability of the ausearch-parse.c component of the Linux Audit storage and record retrieval tool allows a perpetrator to trigger a service failure.

The vulnerability of the ausearch-parse.c component, a storage and search tool for audit records in Linux Audit, relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the krb5int_utf8_normalize() function in the ucstr.c component of the Kerberos authentication protocol allows a perpetrator to access confidential data.

The vulnerability of the krb5intutf8normalize function in the ucstr.c component of the Kerberos authentication protocol is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to access confidential data...

The vulnerability of the PackageFromTask() function in the program, which is used for installing, updating, and deleting software packages in the Apt system, allows a malicious actor to trigger a service failure.

The vulnerability of the PackageFromTask function in the software for installing, updating, and deleting Apt software packages is related to reading data beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux Audit storage and search tool lies in the reading beyond the allowed buffer data size, which allows an attacker to trigger a service failure.

The vulnerability of the Linux Audit recording and storage tool is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the xmlBuildRelativeURI() function in the uri.c component of the Libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlBuildRelativeURI function in the uri.c component of the Libxml2 library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the _libssh2_ntohu32() function in the SSH2 protocol implementation library Libssh2, which allows a attacker to cause a service failure.

The vulnerability of the libssh2ntohu32 function in the SSH2 protocol implementation library Libssh2 is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability in the src/kex.c component of the SSH2 protocol implementation library Libssh2 allows a attacker to access confidential data.

The vulnerability in the src/kex.c component of the SSH2 protocol implementation library Libssh2 involves reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...

The vulnerability of the nts_client_process_response() function in the ntpd/nts_client.c component of the NTPsec network time protocol allows a intruder to cause a service failure.

The vulnerability of the ntsclientprocessresponse function in the ntpd/ntsclient.c component of the NTPsec time synchronization protocol is related to reading data from within a buffer that is beyond acceptable limits. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the read_line() function in the parser.c component of the Keepalived network traffic balancing system allows a attacker to cause a service failure.

The vulnerability of the readline function in the parser.c component of the Keepalived network traffic balancing system is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to cause a service failure...

Apache 2.4.x < 2.4.67 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is prior to 2.4.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.67 advisory. - Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP...

KLA91019 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, bypass security restrictions, execute arbitrary code, inject malicious code, gain privileges. Below is a complete list of...

OESA-2026-2151 libXpm security update

X.Org X11 libXpm runtime library Security Fixes: A vulnerability was found in X.org libXpm up to 3.5.4. It has been classified as problematic.CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impa...

PT-2026-36908

Name of the Vulnerable Software and Affected Versions Postfix versions prior to 3.8.16 Postfix versions 3.9 prior to 3.9.10 Postfix versions 3.10 prior to 3.10.9 Description A buffer over-read can occur, potentially leading to a process crash, when an enhanced status code is used that lacks text...

gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...

squid34: Fix of 12 CVEs

CVE-2019-12525: fix heap buffer over-read in Digest auth parameter parsing - CVE-2018-1000027: fix NULL pointer dereference in X-Forwarded-For logging for internal transactions - CVE-2018-19131: escape certificate field injection via %D in ERRSECURECONNECTFAIL page - CVE-2018-19132: fix memory...

CLSA-2026-1777541147 squid34: Fix of 12 CVEs

CVE-2019-12525: fix heap buffer over-read in Digest auth parameter parsing - CVE-2018-1000027: fix NULL pointer dereference in X-Forwarded-For logging for internal transactions - CVE-2018-19131: escape certificate field injection via %D in ERRSECURECONNECTFAIL page - CVE-2018-19132: fix memory...