[SECURITY] Fedora 45 Update: yaz-5.38.0-3.fc45

YAZ is a programmers toolkit supporting the development of Z39.50/SRW/SRU clients and servers. Z39.50-2003 version 3 as well as SRW/SRU version 1.1 are supported in both the client and server roles. The SOLR webservice is supported in the client role through the ZOOM API. The current version of Y...

The vulnerability of the Z39.50 protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the Z39.50 protocol analyzer of Wireshark relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-15170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service CVE-2026-15170 Note that Nessus relies on the presence ...

SUSE CVE-2026-15170

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170

A flaw was found in Wireshark's Z39.50 protocol dissector. A heap buffer overflow can occur when the dissector processes malformed Z39.50 records with partial directory entries, as the pre-allocated array size is calculated using floor division and does not account for additional partial entries...

AZL-92117 CVE-2026-15170 affecting package wireshark 4.4.7-2

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

UBUNTU-CVE-2026-15170

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170

The CVE-2026-15170 entry concerns the Wireshark Z39.50 protocol dissector crash. Affects Wireshark versions 4.6.0–4.6.6 and 4.4.0–4.4.16. Description indicates a crash leading to denial of service; no exploitation details or exploit status are provided in the documents. The root cause is describe...

CVE-2026-15170 Heap-based Buffer Overflow in Wireshark

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170 Heap-based Buffer Overflow in Wireshark

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2026-15170: Heap-based Buffer Overflow

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

PT-2026-56596

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.6 Wireshark versions 4.4.0 through 4.4.16 Description A crash in the Z39.50 protocol dissector can lead to a denial of service. Recommendations At the moment, there is no information about a newer version...

CVE-2026-26379

Koha versions up to 25.11 contain a Server-Side Request Forgery SSRF vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times...

CVE-2026-26379

Koha versions up to 25.11 contain a Server-Side Request Forgery SSRF vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times...

CVE-2026-26379: Server-Side Request Forgery (SSRF)

Koha versions up to 25.11 contain a Server-Side Request Forgery SSRF vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times...