Lucene search
+L

535 matches found

RedhatCVE
RedhatCVE
added 2026/08/27 12:37 p.m.3 views

CVE-2026-63388

A flaw was found in Libevent. A heap out-of-bounds write vulnerability in the buffereventsocketsetconnaddress function allows an unauthenticated local peer to achieve arbitrary code execution. By connecting to an AFUNIX listener, an attacker can overwrite critical heap data, leading to memory...

8.4CVSS8.6AI score0.00142EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/27 6:31 a.m.5 views

EUVD-2026-66587

In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--' 2 Run the following concurrently: 2-1 send sk-B to sk-B from sk-X 2-...

7.8CVSS5.4AI score0.0012EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/26 3:17 p.m.6 views

CVE-2026-80521

In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--' 2 Run the following concurrently: 2-1 send sk-B to sk-B from sk-X 2-...

7.8CVSS0.0012EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/26 2:37 p.m.3 views

CVE-2026-80574

In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also finger1 unsigned, so that if the finger index in the packet is 0 then subtracting 1 creates an array index which overflows above the...

8.4CVSS5.4AI score0.00134EPSS
SaveExploits0
CVE
CVE
added 2026/08/26 2:37 p.m.15 views

CVE-2026-80521

CVE-2026-80521 is a use-after-free in the Linux kernel's af_unix subsystem, specifically in the garbage collection (GC) logic for strongly connected components (SCC). A race in unix_del_edge() allows the GC to free a dead SCC partially when a concurrent send() of a socket and close() of other soc...

7.8CVSS5.4AI score0.0012EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/26 2:37 p.m.31 views

CVE-2026-80521 af_unix: Unlink scc_entry in unix_del_edge().

In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. Kyle Zeng reported that GC could free a dead SCC partially. The scenario is as follows: 1 Create two SCCs: X -. A B ^--' 2 Run the following concurrently: 2-1 send sk-B to sk-B from sk-X 2-...

7.8CVSS0.0012EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/26 2:36 p.m.4 views

CVE-2026-74738

In the Linux kernel, the following vulnerability has been resolved: regmap: sdw-mbq: don't call an unset readablereg callback regmapsdwmbqpollbusy decides whether to poll the Function Busy bit by calling ctx-readablereg, which is a straight copy of config-readablereg. That callback is optional:...

5.4AI score0.00173EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/08/26 12:07 p.m.10 views

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

7.5CVSS7.2AI score0.00471EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/25 11:05 p.m.5 views

bad_garbage

BADGARBAGE.c CVE-2026-53361 — una use-after-free non privilegiata e con escape dal container nel garbage collector dei socket AFUNIX. Questa è la versione a vettore singolo solo MSGPEEK. Il Bug Il GC AFUNIX recupera i socket "in-flight" che formano cicli di riferimento irraggiungibili. Una MSGPEE...

7.1CVSS6.5AI score0.0085EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/21 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-63388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of- bounds write in buffereventsock.c when...

8.4CVSS5.7AI score0.00142EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/20 6:17 p.m.9 views

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

7.5CVSS7.1AI score0.00471EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/20 6:16 p.m.7 views

DEBIAN-CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

8.4CVSS5.8AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/20 6:16 p.m.11 views

CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

8.4CVSS0.00142EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/20 5:44 p.m.37 views

CVE-2026-63388 Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

8.4CVSS0.00142EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/20 5:44 p.m.27 views

CVE-2026-63388 Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

8.4CVSS5.6AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/08/20 5:44 p.m.8 views

CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

8.4CVSS5.7AI score0.00142EPSS
SaveExploits0
CVE
CVE
added 2026/08/20 5:44 p.m.67 views

CVE-2026-63388

CVE-2026-63388 is a heap out-of-bounds write in libevent (an event notification library) affecting versions prior to 2.1.13 and 2.2.2-alpha . The flaw is in bufferevent_sock.c, where bufferevent_socket_set_conn_address_ copies a kernel-supplied AF_UNIX peer address into a 28-byte conn_address fie...

8.4CVSS5.5AI score0.00142EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/08/17 12:00 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099519 advisory. Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service...

7.5CVSS7.4AI score0.00471EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/15 5:59 a.m.9 views

CVE-2026-74435

In the Linux kernel, the following vulnerability has been resolved: rxrpc: rxrpcverifydata ensure rxdecbuffer alloc rxrpcrecvmsgdata calls rxrpcverifydata whenever the rxrpccall.rxdecbuffer is unallocated and assumes that upon successful return that rxdecbuffer must be allocated. However,...

7.5CVSS5.3AI score0.00346EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/08/15 5:59 a.m.10 views

CVE-2026-74433

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed...

9.8CVSS5.3AI score0.00347EPSS
SaveExploits0
Rows per page
Query Builder