329384 matches found
USN-8930-2: U-Boot vulnerabilities
USN-8930-1 fixed some vulnerabilities in U-Boot. This update provides the corresponding fix for U-Boot on Ubuntu 26.10. Original advisory details: Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could...
Security update for tiff
This update for tiff fixes the following issue: CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough bsc1280164. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:4845-1 Security update for tiff
This update for tiff fixes the following issue: - CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough bsc1280164...
php: PHP: Denial of Service via heap buffer overflow in SOAP client
A flaw was found in PHP. A malicious server can cause a Denial of Service DoS by exploiting an improper buffer size check in the Simple Object Access Protocol SOAP client during HTTP response parsing. When responding to a request, the server can supply crafted data that triggers an integer...
Important: Red Hat Security Advisory: php:7.4 security update
An update for the php:7.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
[SECURITY] [DSA 6575-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6575-1 [email protected] https://www.debian.org/security/ Jan MojžÃÅ¡ October 21, 2026 https://www.debian.org/security/faq -...
CVE-2026-102484
Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...
CVE-2026-102484 Heap-based Buffer Overflow in ntpsec
Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...
CVE-2026-102484
A Heap-based Buffer Overflow exists in the JJY refclock driver of NTPsec ntpd versions prior to 1.2.6 . An attacker who controls the Telephone JJY time source can cause a memory corruption or crash the ntpd service by sending more than six time replies. No information regarding specific exploits ...
CVE-2026-102484 Heap-based Buffer Overflow in ntpsec
Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...
EUVD-2026-107310
Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via more than six time replies...
CLSA-2026-1792591710 corosync: Fix of 4 CVEs
CVE-2025-30472: stack buffer overflow in orftokenendianconvert - CVE-2026-35091: out-of-bounds read via checkmembcommittokensanity - CVE-2026-35092: integer overflow in checkmembjoinsanity - CVE-2026-81665: heap buffer overflow in totempgdeliverfn...
fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01)
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...
Moderate: Red Hat Security Advisory: fetchmail security update
An update for fetchmail is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Moderate: Red Hat Security Advisory: fetchmail security update
An update for fetchmail is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01)
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...
Security Bulletin: Vulnerabilities in libxml2 (CVE-2026-86140, CVE-2026-86141, CVE-2026-86143, CVE-2026-86144) affect AIX.
Summary Vulnerabilities in libxml2 could cause stack-based buffer overflow CVE-2026-86140, A NULL pointer dereference CVE-2026-86141, An integer overflow CVE-2026-86143, denial-of-service CVE-2026-86144. AIX uses libxml2 as part of its XML parsing functions. Vulnerability Details...
Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...
SUSE-SU-2026:4836-1 Security update for cyrus-sasl
This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687...
CLSA-2026-1783354994 kernel: Fix of 17 CVEs
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 - btrfs: fix use-after-free after failure to create a snapshot CVE-2022-48733 - Bluetooth: SCO: Fix use-after-free in scorecvframe due to missing sockhold CVE-2026-31408 - xfs: delete attr leaf freemap entries...