9335 matches found
CVE-2026-17259
CVE-2026-17259 affects the Debug Server component of IBM i versions 7.3 through 7.6. A remote authenticated attacker can trigger a stack-based buffer overflow (CWE-121), resulting in a denial of service with low availability impact and no impact on confidentiality or integrity. The attack vector ...
CVE-2026-17270
CVE-2026-17270 is one of eight vulnerabilities in the IBM i Debug Server component affecting versions 7.3, 7.4, 7.5, and 7.6 . The root cause is a stack-based buffer overflow (CWE-121) that allows a local attacker to cause a denial of service . The assigned CVSS v3.1 score is 4.3 (Medium) with a ...
CVE-2026-17270 IBM i is Affected By Multiple Vulnerabilities in Debug Server
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow...
AZL-99399 CVE-2026-80803 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...
AZL-99467 CVE-2026-80802 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdpncii2cread takes the next packet length from two device-supplied bytes and never validates it. The value is a u16 used as the i2cmasterrecv count into a...
CVE-2026-80803 nfc: digital: clamp SENSF_RES length to the destination buffer
In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...
CVE-2026-71979
A flaw was found in INDI indiserver. An unauthenticated remote attacker can exploit a stack buffer overflow vulnerability by sending specially crafted XML with oversized, mismatched tags. This can lead to an unbounded write operation, causing the daemon to crash and disrupting all active client a...
CVE-2026-85508
A stack-based buffer overflow exists in FreeIPMI's ipmi-oem tool, in the Dell OEM handler for the get-system-info cmc-ipv6-info subcommand. The vulnerable function outputdellsysteminfocmcipv6info uses a 256-byte stack buffer but allows up to 65536 bytes of data to be copied from a BMC response...
CVE-2026-85504
A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, occurs when the software processes malformed Fujitsu System Event Log SEL responses. An attacker could exploit this by providing specially crafted SEL data, potentially requiring user interaction, to achieve arbitrar...
CVE-2026-85507
A flaw was found in FreeIPMI. A local attacker can exploit a stack-based buffer overflow vulnerability in the ipmi-oem utility when processing the dell get-system-info cmc-info subcommand. This can lead to arbitrary code execution, allowing the attacker to run malicious code on the affected syste...
CVE-2026-85506
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in getdellsysteminfoidracinfo in ipmi-oem/ipmi-oem-dell.c idrac-info subcommand to dell get-system-info...
CVE-2026-85504
FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...
CVE-2026-85507
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcinfo in ipmi-oem/ipmi-oem-dell.c cmc-info subcommand to dell get-system-info...
AZL-99116 CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcinfo in ipmi-oem/ipmi-oem-dell.c cmc-info subcommand to dell get-system-info...
UBUNTU-CVE-2026-85504
FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses...
UBUNTU-CVE-2026-85508
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c cmc-ipv6-info subcommand to dell get-system-info...
UBUNTU-CVE-2026-85506
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in getdellsysteminfoidracinfo in ipmi-oem/ipmi-oem-dell.c idrac-info subcommand to dell get-system-info...
UBUNTU-CVE-2026-85505
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 which has different affected versions...
