101070 matches found
CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2024:1727815919)
The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2024:1727815919 advisory. - In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the fact that typecpartnerdesc is not initialized in tps6598xconnect. As a result, uninitialized function pointers may be called, and stack data may be leaked through the partner sysfs...
Security update for p11-kit (moderate)
openSUSE security update: security update for p11-kit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22105-1 Rating: moderate References: bsc1269664 bsc1280702 Cross-References: CVE-2026-13757 CVE-2026-18938 CVSS scores: CVE-2026-13757 SUSE : 6.2...
Security update for virtiofsd (important)
openSUSE security update: security update for virtiofsd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22079-1 Rating: important References: bsc1257912 bsc1283239 Cross-References: CVE-2026-25727 CVSS scores: CVE-2026-25727 SUSE : 7.5...
Security update for fetchmail (important)
openSUSE security update: security update for fetchmail ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22077-1 Rating: important References: bsc1282055 Cross-References: CVE-2026-94184 CVSS scores: CVE-2026-94184 SUSE : 8.1...
Security update for stunnel (moderate)
openSUSE security update: security update for stunnel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22088-1 Rating: moderate References: bsc1274206 bsc1274207 Cross-References: CVE-2026-70367 CVE-2026-70368 CVSS scores: CVE-2026-70367 SUSE : 5.4...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel prior to 6.12.113, 6.18.56, and 7.2.10 contain security vulnerabilities. These vulnerabilities stem from the viovcc structure used in vccsendctl, where the packet associated with the stack allocation is not fully initialized. As a result, the tag.stypeenv field is not...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the fact that in the function cd321xupdatework, the variable typecpartnerdesc is not initialized to zero. Only the variables usbpd, accessory, and identity are initialized. As a result, fields such as...
AbiWord wv buffer error vulnerability
AbiWord versions 1.2.9 and earlier have a buffer error vulnerability. This vulnerability stems from the lack of verification of the FKP run count in functions wvGetPAPXFKP and wvGetCHPXFKP. Attackers can read content that exceeds the 512-byte stack buffer by providing a specially crafted.doc file...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from the fact that emtextdump does not zero the stack when allocating a struct tcfemtext; the strscpy function writes the algorithm name and NUL terminator, but the remaining bytes are not initialized...
lwIP Developers: lwIP buffer error vulnerability
lwIP Developers: Versions of lwIP 2.2.1 and earlier contain a buffer overflow vulnerability. This vulnerability stems from the mdnshandleresponse function, which allows stack-based out-of-bounds writes. Attackers can exploit this vulnerability by sending mDNS responses with invalid domain names...
Linux Kernel Security Vulnerabilities
The Linux kernel version 7.1 contains a security vulnerability. This vulnerability arises from fprobefgraphentry, which does not clear uninitialized reserved shadow stack spaces. As a result, fprobereturn misinterprets unused tail sections as previously called headers, potentially causing exit...
Lode Vandevenne has a buffer error vulnerability
Lode Vandevenne’s lodepng 20261006 and earlier versions have a buffer error vulnerability. This vulnerability stems from the lodepng::getFilterTypesInterlaced function in lodepngutil.cpp, which fails to perform boundary checks on the decompressed IDAT data. As a result, a stack overflow attack is...
Strophe/Libstrophe buffer error vulnerability
Strophe libstrophe versions 0.14.0 and earlier have a buffer overflow vulnerability. This vulnerability stems from SCRAMHi’s handling of SCRAM salts, where a stack buffer overflow occurs when processing SCRAM salts. Malicious XMPP servers can exploit this vulnerability by sending SCRAM salts that...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.4 contains a security vulnerability. This vulnerability arises from the fact that the stackslotobjgetspi function does not reject non-negative offsets. When the offset is 0, the calculated spi index is the same as the valid stack slot at fp-8. This may lead to...
Grigory Chudov’s buffer error vulnerability
Grigory Chudov’s libtta versions 2.3 and earlier have a buffer error vulnerability. This vulnerability arises from the lack of header checks that reject zero audio channels. An attacker can create a specially crafted .tta file that declares zero audio channels, causing the application to access...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.9 contains security vulnerabilities. These vulnerabilities stem from the gpiodesctolineinfo function, which returns early when attempting to retrieve GPIO chip protection information, and does not clear the info structure. This may lead to the leakage of kernel stack...
Linux Kernel Security Vulnerabilities
The Linux kernel versions from 6.11.7 to 6.12 and version 6.12 contain security vulnerabilities. These vulnerabilities arise when the TPM empty key name does not match, resulting in the chip not being disabled and a success return being given. This allows uninitialized stack values to be used as...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from IP-in-IP GSO, which allows each nested IP header to repeatedly enter inetgsosegment or ipv6gsosegment. However, encaplevel only tracks the header bytes and not the callback depth. Deeply nested chains...
Grigory Chudov: A bug related to numerical errors
Grigory Chudov’s libtta versions 2.3 and earlier have a numerical error vulnerability. This vulnerability stems from the ttadecoderinitgetinfo function not verifying header fields properly. Integer overflow leads to a stack buffer overflow in 32-bit builds. Attackers can exploit this vulnerabilit...