1323 matches found
GHSA-GHM9-CR32-G9QJ vulnerabilities
Vulnerabilities for packages: sqlx, sentry-cli, ztunnel-fips, komodo, sdp-k8s-injector, valkey-ldap, vector, sccache, rustls-openssl-client, bootc, rustup, rpm-sequoia, deno, guestproxyagent, typst...
GHSA-PQF5-4PQQ-29F5 vulnerabilities
Vulnerabilities for packages: sqlx, sentry-cli, ztunnel-fips, komodo, sdp-k8s-injector, valkey-ldap, vector, sccache, rustls-openssl-client, bootc, rustup, rpm-sequoia, deno, guestproxyagent, typst...
CVE-2026-41676 vulnerabilities
Vulnerabilities for packages: sqlx, sentry-cli, ztunnel-fips, komodo, sdp-k8s-injector, valkey-ldap, vector, sccache, rustls-openssl-client, bootc, rustup, rpm-sequoia, deno, guestproxyagent, typst...
CVE-2026-41678 vulnerabilities
Vulnerabilities for packages: sqlx, sentry-cli, ztunnel-fips, komodo, sdp-k8s-injector, valkey-ldap, vector, sccache, rustls-openssl-client, bootc, rustup, rpm-sequoia, deno, guestproxyagent, typst...
GHSA-XMGF-HQ76-4VX2 vulnerabilities
Vulnerabilities for packages: sqlx, sentry-cli, ztunnel-fips, komodo, sdp-k8s-injector, valkey-ldap, vector, sccache, rustls-openssl-client, bootc, rustup, rpm-sequoia, deno, guestproxyagent, typst...
SUSE CVE-2026-31427
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
CVE-2026-31427
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
AZL-82709 CVE-2026-31427 affecting package kernel for versions less than 6.6.134.1-2
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
CVE-2026-31427
The CVE-2026-31427 issue in Linux kernel netfilter/nf_conntrack_sip was fixed by initializing the rtp_addr before calling nf_nat_sip SDP hooks and tracking via a have_rtp_addr flag. If SDP has no m= lines, or contains only inactive/unrecognized media, the code now avoids calling sdp_session with ...
CVE-2026-31427 netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
CVE-2026-31427
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
PT-2026-32353
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter module, the process sdp function declares a union nf inet addr named rtp addr on the stack. This variable is only initialized when a recognized media type with a non-zer...
Linux Distros Unpatched Vulnerability : CVE-2026-31427
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsi...
CVE-2026-23457: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix Content-Length u32 truncation in siphelptcp siphelptcp parses the SIP Content-Length header with simplestrtoul, which returns unsigned long, but stores the result in unsigned int clen. On 64-bit...
Linux Distros Unpatched Vulnerability : CVE-2026-33069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in...
USN-8122-1 pjproject vulnerabilities
Youngsung Kim discovered that PJSIP did not properly parse numeric header fields in SIP messages. A remote attacker could use this issue to cause PJSIP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2017-16872 Peter...
CVE-2026-33069
A flaw was found in PJSIP, a multimedia communication library. A remote attacker could exploit a vulnerability in the pjsipmultipartparse function when processing incoming Session Initiation Protocol SIP messages. This flaw, an out-of-bounds heap read, allows for the disclosure of a small amount ...
CVE-2026-33069 PJSIP has an Out-of-bounds Read in SIP multipart parsing
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsipmultipartparse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...
EUVD-2026-13632
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsipmultipartparse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...
CVE-2026-33069
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsipmultipartparse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...