349 matches found
CVE-2026-121390
The FreeRDP software (versions 3.0.0 before 3.32.2) built with WITH_AAD=ON is vulnerable to a Null Pointer Crash . The root cause is located in the ARM gateway response parser , which incorrectly accepts a missing or non-string redirectedServerCert field and passes a null buffer to the certificat...
CVE-2026-121390 FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response
FreeRDP 3.0.0 before 3.32.2 built with WITHAAD=ON contains a reachable assertion because its ARM gateway response parser accepts a missing or non-string redirectedServerCert field and passes a null buffer to the certificate parser. A malicious or malformed user-selected gateway can return such a...
CVE-2026-121390 FreeRDP before 3.32.2 Null Pointer Crash via ARM Gateway Response
FreeRDP 3.0.0 before 3.32.2 built with WITHAAD=ON contains a reachable assertion because its ARM gateway response parser accepts a missing or non-string redirectedServerCert field and passes a null buffer to the certificate parser. A malicious or malformed user-selected gateway can return such a...
Astra Linux – vulnerability in Apache2
A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server via a malicious request. moddavlock is not used internally by moddav or moddavfs. The only known use case for moddavlock was moddavsvn from Apache Subversion prior to versio...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fixed possible resource leaks in mpt3sastransportportadd. In mpt3sastransportportadd, if sasrphyadd returns an error, sasrphyfree must be called to free the resources allocated in sasenddevicealloc. Otherwise, a...
Astra Linux – vulnerability in evolution-data-server
In GNOME evolution-data-server versions prior to 3.35.91, a malicious server can crash the mail client by performing a NULL pointer dereference, achieved by sending an invalid e.g., minimal CAPABILITY line during a connection attempt. This issue is related to imapxfreecapability and...
AlmaLinux 9.2 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1718897210)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1718897210 advisory. - nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's nscd cache fails to add a not-found netgroup...
CVE-2026-89749
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop. kthreadrun returns an error pointer such as ERRPTR-ENOMEM when kthread...
EUVD-2026-76412
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBSATTRUHW to UVERBSMETHODREGMR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with regmr that cannot be passed through the ioctl. They also assume that the udata cann...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053207)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053207 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtkdrmcrtcfinishpageflip It's possible that mtkcrtc-eve...
Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-105547)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105547 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data Buffer crash In newer version of the SBC specs, we have a NDO...
SUSE-SU-2026:2641-1 Security update for apache2
This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...
CVE-2026-72248
The CVE-2026-72248 entry pertains to the Linux kernel netfilter flowtable: IPIP tunnels with direct xmit can crash the tunnel transmit path due to missing dst_entry when checking headroom and setting iph->frag_off. The workaround/patch moves dst_cache and dst_cookie out of the runtime union so...
CVE-2026-68139
CVE-2026-68139 affects the Linux kernel mlx5e/MPV path. After PCIe DPC recovery, mlx5 reloads affected PCIe functions and replays multiport affiliation events; during resume, an RDMA multiport binding replay triggers an MPV_DEVCOM_MASTER_UP. The host panics with a NULL pointer dereference in mlx5...
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-3070)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are...
MiracleLinux 9 : kernel-5.14.0-687.20.1.el9_8 (AXSA:2026-1467:60)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1467:60 advisory. kernel: net: atm: fix crash due to unvalidated vcc pointer in sigdsend CVE-2026-31411 kernel: tcp: fix potential race in tcpv6synrecvsock...
SUSE CVE-2026-63990
In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in canrxunregister inside net/can/afcan.c. The crash occurs because a virtual CAN device vxcan is being enslaved to a bonding master. During the...
MGASA-2026-0283 Updated perl-JavaScript-Minifier-XS package fixes security vulnerabilities
The updated package fixes security vulnerabilities: JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. CVE-2026-56017 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call...
CVE-2026-35590
libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing data to libexif, leading to a possible null pointer dereference and crash. This has been patched in...