Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)

Summary DS8900F and DS8A00 updates have been released to remediate vulnerabilities in libexpat, libxml2, libsoup and krb5 libraries. Review the Vulnerability Details section below for additional information. Vulnerability Details CVEID:CVE-2024-8176 DESCRIPTION: A stack overflow vulnerability...

CLSA-2025-1757924940 glibc: Fix of CVE-2019-9169

CVE-2019-9169: fix heap-based buffer over-read in proceednextnode function in posix/regexec.c...

NewStart CGSL MAIN 6.06 : p11-kit Multiple Vulnerabilities (NS-SA-2025-0209)

The remote NewStart CGSL host, running version MAIN 6.06, has p11-kit packages installed that are affected by multiple vulnerabilities: - An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remo...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read in the pdfload process, if compiled with support for PDF input via Poppler. An attacker can cause the application to read beyond the bounds of allocated memory by submitting a specially crafted PDF document with media...

CVE-2025-59933 libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

CVE-2025-59933 libvips is vulnerable to Buffer Over-Read in poppler-based pdfload

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

CVE-2025-59933

CVE-2025-59933 affects libvips prior to 8.17.2 when built with PDF support via poppler. A buffer read overflow occurs in pdfload during header parsing of crafted PDFs that define a width but not a height. Affected versions: 8.17.1 and earlier; unaffected when built without PDF support or with PDF...

AlmaLinux 8 : php:8.2 (ALSA-2025:15687)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15687 advisory. php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-deco...

Linux sch_cake Heap Buffer Overflow DoS

The vulnerability of the net/sched/schcake.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux Driver Network PPP SYNCTTY Buffer Overflow DoS

The vulnerability in the drivers/net/ppp/pppsynctty.c component of the Linux kernel relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service interruptions...

isofs Component DoS

The vulnerability of the isofs component in Linux operating systems involves reading data from buffers beyond their allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux net/can/bcm.c Buffer Overflow DoS

The vulnerability in the net/can/bcm.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

Linux kernel nvmet_ctrl_state_show Buffer Overflow DoS

The vulnerability of the nvmetctrlstateshow function in the drivers/nvme/target/debugfs.c kernel module of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to access confidential data and also...

Linux kernel fs/jfs/xattr.c ea_get() Heap Buffer Overflow DoS

The vulnerability of the eaget function in the fs/jfs/xattr.c component of the Linux kernel involves reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

Linux kernel Wi-Fi DoS

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to reading data from buffer files beyond the allowed limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux driver hid-thrustmaster Heap Buffer Overflow DoS

The vulnerability of the drivers/hid/hid-thrustmaster.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

Linux Component Confidential Data Access DoS

The vulnerability in the loongarch/lib/csum.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the orangefsdebugwrite function in the fs/orangefs/orangefs-debugfs.c component of the Linux kernel is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service...

Linux iommufd DoS

The vulnerability of the drivers/iommu/iommufd/iovabitmap.c component in the Linux operating system is related to reading data from beyond the allowed boundaries of the data buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Driver Confidential Data Compromise

The vulnerability of the drivers/ntb/hw/mscc/ntbhwswitchtec.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...