1015 matches found
PT-2026-43737
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory leaks occur in the SUNRPC auth gss component during XDR decoding error paths. The functions gssx dec ctx, gssx dec status, and gssx dec name allocate memory using gssx dec buffer,...
CVE-2025-68382 Packetbeat Out-of-bounds Read
Out-of-bounds read CWE-125 allows an unauthenticated remote attacker to perform a buffer overflow CAPEC-100 via the NFS protocol dissector, leading to a denial-of-service DoS through a reliable process crash when handling truncated XDR-encoded RPC messages...
CVE-2025-68382: Out-of-bounds Read
Out-of-bounds read CWE-125 allows an unauthenticated remote attacker to perform a buffer overflow CAPEC-100 via the NFS protocol dissector, leading to a denial-of-service DoS through a reliable process crash when handling truncated XDR-encoded RPC messages...
PT-2025-52364
Name of the Vulnerable Software and Affected Versions Wireshark affected versions not specified Description An out-of-bounds read condition exists in the NFS protocol dissector. This allows a remote, unauthenticated attacker to trigger a buffer overflow when processing truncated XDR-encoded RPC...
Palo Alto Networks Cortex Unauthorized Access
The vulnerability of the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to user registration data...
EUVD-2025-203711
In the Linux kernel, the following vulnerability has been resolved: nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy...
CVE-2025-68185
In the Linux kernel, the following vulnerability has been resolved: nfs4setupreaddir: insufficient locking for -dparent-dinode dereferencing Theoretically it's an oopsable race, but I don't believe one can manage to hit it on real hardware; might become doable on a KVM, but it still won't be easy...
Linux RPC Kernel Heap Buffer Overflow DoS
The vulnerability of the xdrstreamdecodeopaqueauth function in the net/sunrpc/authgss/svcauthgss.c module of the Linux operating system’s RPC implementation is related to the swapping of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
SUSE CVE-2025-40129
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...
UBUNTU-CVE-2025-40129
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...
CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...
CVE-2025-40129
CVE-2025-40129 is a Linux kernel vulnerability addressed in Unity Linux/UTSA-2026-013110: sunrpc may dereference checksum.data due to a zero-length checksum in xdr_stream_decode_opaque_auth(), causing a null pointer dereference when gss_krb5_verify_mic_v2() accesses checksum.data. The patch ensur...
CVE-2025-40129 sunrpc: fix null pointer dereference on zero-length checksum
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdrstreamdecodeopaqueauth, zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when accessing checksum.data in gsskrb5verifymicv2...
EUVD-2010-2080
Malware in sbrugna...
EUVD-2003-0570
Malware in sbrugna...
EUVD-2015-8506
Malware in sbrugna...
EUVD-2014-9242
Malware in sbrugna...
EUVD-2021-26394
Malware in sbrugna...