101929 matches found
CVE-2026-90823: Stack-based Buffer Overflow
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/authuserpass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that...
CVE-2026-92477: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: debugfs: Reserve space for a string terminator ufssavederrwrite copies user input into a zero-initialized stack buffer and passes it to kstrtoint. A write that fills the entire buffer overwrites its only terminator...
PT-2026-95163
Name of the Vulnerable Software and Affected Versions redis-parser versions prior to 3.0.1 Description A denial of service issue exists in the RESP Redis Serialization Protocol parser. Malicious Redis endpoints can crash the client process by sending crafted RESP byte streams containing repeated...
PT-2026-94764
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack out-of-bounds read exists in the RDMA/mlx5 cc params debugfs. The get param function reads a congestion parameter as a u32 but formats it using a signed %d into an 11-byte stack...
PT-2026-94706
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem on x86 architectures where the trampoline stack size is incorrectly calculated for 128-bit arguments. The btf distill func proto function accepts...
unbound security update
1.24.2-20 - Backport additional fix of locks during initialization 1.24.2-19 - Fix CVE-2026-50252: prevent cache poisoning via shared ports 1.24.2-18 - Add unit tests for CVE-2026-44690,55973 1.24.2-17 - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow 1.24.2-16 - Fix CVE-2026-44690 ...
PT-2026-94245
Name of the Vulnerable Software and Affected Versions FatPipe MPVPN version 10.1.2r60p100 FatPipe WARP version 10.1.2r60p100 FatPipe IPVPN version 10.1.2r60p100 Description A stack-based buffer overflow exists in the /usr/sbin/auth user pass function. An unauthenticated remote attacker with acces...
PT-2026-95059
Name of the Vulnerable Software and Affected Versions MCC Universal Library for Linux uldaq versions prior to 1.2.1 Description A stack-based buffer overflow exists in the library, which can lead to arbitrary code execution or information disclosure. A stack-based buffer overflow occurs when a...
Linux Kernel Security Vulnerabilities
The Linux kernel versions 5.4.258, 5.10.198, 5.15.134, 5.1.56, 6.5.6, and 6.6 contain security vulnerabilities. These vulnerabilities stem from the BPF queue and stack pop/view helper functions, which return -EBUSY when lock acquisition fails, without clearing the output buffer. This may allow BP...
PT-2026-94308
Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.0 through 3.11.6 Description Absolute host filesystem paths are leaked to sandboxed code via error stack formatting. An attacker can force the host-realm source transformer to throw a SyntaxError by calling eval with malforme...
CVE-2026-90231: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined is not correctly, applied. This results in an escape if two transitio...
EulerOS 2.0 SP15 : python3 (EulerOS-SA-2026-3819)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same...
Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction with the rlottie library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the rlotti...
CLSA-2026-1789601022 Fix of 5 CVEs
SECURITY UPDATE: stack buffer overflow in xmlSnprintfElements - debian/patches/CVE-2026-86140.patch: add bounds checks around the parenthesis writes in xmlSnprintfElements in valid.c - CVE-2026-86140 SECURITY UPDATE: NULL pointer dereference in xmlRegNewParserCtxt after a failed allocation -...
Security Bulletin: node-tar is a tar archive manipulation library for Node.js vulnerability
Summary node-tar is a tar archive manipulation library for Node.js vulnerability causing an uncatchable RangeError stack overflow. Vulnerability Details CVEID:CVE-2026-73566 DESCRIPTION: node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
CVE-2026-86358
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...