Lucene search
+L

24956 matches found

Debian CVE
Debian CVE
added 2026/07/28 4:17 p.m.15 views

CVE-2026-54332

gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ExtendedGatewayFlow decoder in layers/sflow.go reads an attacker-controlled 32-bit community count and AS path member count and sizes a slice allocation from those counts without bounding them against...

7.5CVSS5.9AI score0.00429EPSS
SaveExploits1
OSV
OSV
added 2026/07/28 4:17 p.m.8 views

GHSA-G6V3-7XMC-W563 GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS

Summary The sFlow ExtendedGatewayFlow record decoder in github.com/gopacket/gopacket allocates a slice with makeuint32, n where n is an attacker-controlled 32-bit wire field that has no upper bound. Because the allocation happens before the read loop that would consume the corresponding bytes, a...

6.9CVSS6.4AI score0.00429EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2026/07/28 4:14 p.m.5 views

CVE-2026-54345

gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the 12-byte header...

7.5CVSS5.9AI score0.00454EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/07/28 3:41 p.m.6 views

CVE-2026-64355

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter devmap feature. When handling devmap broadcast redirects, fragmented network frames are not properly managed during the cloning process. This can lead to an out-of-bounds access, where the system attempts to read or write data beyo...

9.8CVSS5.8AI score0.00502EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/28 12:18 p.m.4 views

SUSE-SU-2026:3362-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-byt...

8.8CVSS5.9AI score0.011EPSS
SaveExploits0References15
OSV
OSV
added 2026/07/28 10:0 a.m.4 views

UBUNTU-CVE-2026-58224

The CTDB protocol has bounds checking issues. CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets...

6.5CVSS5.9AI score0.00405EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/07/28 10:0 a.m.25 views

CVE-2026-58224

The CTDB protocol has bounds checking issues. CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets...

5.2AI score0.00405EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/07/28 10:0 a.m.22 views

CVE-2026-58216

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of th...

5.3CVSS5.2AI score0.00515EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/28 10:0 a.m.7 views

UBUNTU-CVE-2026-58216

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of th...

5.3CVSS5.4AI score0.00515EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-64547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the...

8.1CVSS5.5AI score0.00277EPSS
SaveExploits0References3
Samba
Samba
added 2026/07/28 12:0 a.m.8 views

The CTDB protocol has bounds checking issues

== Summary: CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets. Description CTDB fails to do a number of integrity checks on received packets. This includes: checking of field lengths against pack...

6.5CVSS6AI score0.00405EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-64548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full or nearly full, bpfmsgpushdata enters a copy fallback path and...

8.4CVSS5.5AI score0.00144EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/27 9:17 p.m.12 views

CVE-2026-64547

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...

8.1CVSS0.00277EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/27 9:17 p.m.7 views

UBUNTU-CVE-2026-64547

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...

8.1CVSS5.7AI score0.00277EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/27 9:17 p.m.6 views

UBUNTU-CVE-2026-64545

In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdpmasterredirect xdpmasterredirect dereferences the result of netdevmasterupperdevgetrcu without a NULL check, but that helper returns NULL when the receiving device has no upper-master...

7.5CVSS5.7AI score0.00496EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/27 8:10 p.m.14 views

CVE-2026-64548

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full or nearly full, bpfmsgpushdata enters a copy fallback path and computes copy + len for the page allocation size. Since len comes from...

8.4CVSS5.7AI score0.00144EPSS
SaveExploits0
CVE
CVE
added 2026/07/27 8:10 p.m.26 views

CVE-2026-64547

CVE-2026-64547 affects the Linux kernel net1080 USB network driver. The issue arises when an even packet_len is processed by net1080_rx_fixup: it reads the pad byte at skb->data[packet_len] before verifying skb->len, with packet_len only bounded by NC_MAX_PACKET, enabling a malicious NetChi...

8.1CVSS5.8AI score0.00277EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/27 8:10 p.m.34 views

CVE-2026-64547 net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...

8.1CVSS0.00277EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/07/27 8:10 p.m.10 views

CVE-2026-64547

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...

8.1CVSS5.7AI score0.00277EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/27 8:10 p.m.10 views

EUVD-2026-49598

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...

5.8AI score0.00277EPSS
SaveExploits0References8
Rows per page
Query Builder