Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: icu (UTSA-2025-984781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984781 advisory. A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag...

Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680617 advisory. A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggerin...

Unity Linux 20.1070e Security Update: iptraf-ng (UTSA-2025-634479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-634479 advisory. iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to...

Unity Linux 20.1070a Security Update: libxml2 (UTSA-2025-986120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986120 advisory. A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can...

Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2025-2226 Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities October 7, 2025 CVE Number CVE-2025-54401,CVE-2025-54400,CVE-2025-54399,CVE-2025-54402 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd...

PT-2025-41000

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is related...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the rcuirqenterchecktick function being probed by kprobe, which could lead to a stack overflow...

CVE-2023-53655: Uncontrolled Recursion

In the Linux kernel, the following vulnerability has been resolved: rcu: Avoid stack overflow due to rcuirqenterchecktick being kprobe-ed Registering a kprobe on rcuirqenterchecktick can cause kernel stack overflow as shown below. This issue can be reproduced by enabling CONFIGNOHZFULL and bootin...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414344 advisory. A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: sleuthkit (UTSA-2025-986095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986095 advisory. In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in...

Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680663 advisory. A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414505 advisory. A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2025-986171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986171 advisory. Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. Tenable has extracted the preceding description block directly from the Unity Linux...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 has a stack buffer overflow vulnerability, which originates from the parameter newVersion i...

Planet WGR-500 安全漏洞

The Planet WGR-500 is a WiFi router from Planet in Taiwan, China. A security vulnerability exists in the Planet WGR-500 v1.3411b190912 version, which stems from a stack buffer overflow in the submit-url and ipaddr request parameters, which could lead to the execution of arbitrary code...

Unity Linux 20.1070e Security Update: opensc (UTSA-2025-680621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680621 advisory. Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library. Tenable has...

Unity Linux 20.1070e Security Update: transfig (UTSA-2025-984799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984799 advisory. In xfig diagramming tool, a stack-overflowwhile running fig2dev allows memory corruption via local input manipulation at the bezierspline function. Tenable has...

Unity Linux 20.1070e Security Update: transfig (UTSA-2025-984789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984789 advisory. In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function. Tenable has extracte...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986595 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIGCPUMASKOFFSTACK=y kernel,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987246 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hardlockup on vmap stack overflow Since the commit c118c7303ad5 powerpc/32: Fix...