154 matches found
CVE-2026-85498 Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...
CVE-2026-85498
A flaw in polkit involves an arithmetic error in the authentication agent helper when processing input starting with a null byte. This error causes an integer underflow during buffer length calculation, leading to an out-of-bounds memory read (specifically a stack buffer underflow in the read_coo...
Astra Linux – Vulnerability in vorbis-tools
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package, within the remotethread function in remote.c. This vulnerability occurs during the remote control functionality, when processing malformed inputs, resulting in a buffer underflow that c...
MGASA-2026-0485 Updated polkit package fixes a security vulnerability
Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...
Updated polkit package fixes a security vulnerability
Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow. CVE-2026-85498...
openSUSE 16 Security Update : aria2 (openSUSE-SU-2026:21997-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21997-1 advisory. Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0...
Rocky Linux 9.6 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.6:CLSA-2026:1774347657)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774347657 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious...
cups-filters:fuzz_cupsfilters_command_to_pclx: Stack-buffer-underflow in cf_v2_legacy_main
Project: https://github.com/OpenPrinting/cups-filters.git Detailed Report: https://oss-fuzz.com/testcase?key=6549021016260608 Project: cups-filters Fuzzing Engine: libFuzzer Fuzz Target: fuzzcupsfilterscommandtopclx Job Type: libfuzzerasancups-filters Platform Id: linux Crash Type:...
OPENSUSE-SU-2026:21997-1 Security update for aria2
This update for aria2 fixes the following issues: Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0 be1caa2d bsc1257934...
Astra Linux – Vulnerability in espeak-ng
It was discovered that Espeak-ng 1.52-dev contains a Stack Buffer Underflow due to the CountVowelPosition function in synthdata.c...
polkit: Regression in CVE-2026-4897 fix (polkit read_cookie()) - stack buffer underflow
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...
CVE-2026-85498
Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...
UBUNTU-CVE-2026-85498
Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...
CVE-2026-85498
A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underflow during buffer length calculation, resulting in an out-of-bounds memory read. An attacker capable of supplying crafted input can trigge...
Linux Distros Unpatched Vulnerability : CVE-2026-85498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in polkit. When processing input that begins with a null byte, an arithmetic error in the authentication agent helper causes an integer underfl...
OPENSUSE-SU-2026:21720-1 Security update for dovecot24
This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: submission-login: panic when mailmaxuseripconnections is reached bsc1276794. - CVE-2026-27852: DoS by sending mail with bad header bsc1276799. - CVE-2026-33604: SMTP smuggling via missing dot-stuffing after...
CVE-2026-75421
A flaw was found in aria2. This stack-buffer-underflow vulnerability, located in the IOFile::getLine function, could allow an attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability arises when the application attempts to write data before the beginning of a...
UBUNTU-CVE-2026-40013
An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...
CVE-2026-40013
An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...
