625 matches found
[slackware-security] httpd
New httpd packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/httpd-2.4.71-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: Heap corruption and RCE in assignheaders...
CVE-2026-109163
modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292...
UBUNTU-CVE-2026-109163
modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292...
Critical: httpd
Issue Overview: modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292 CVE-2026-109163 Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server’s modhttp2 in assignheaders can lead to RCE. CVE-2026-119618 Affected Packages: httpd Issue...
CVE-2026-109163
Stack-based buffer overflow vulnerability in Apache HTTP Server's modvhostalias after CVE-2026-63292 This issue affects Apache HTTP Server: 2.4.69...
CLSA-2026-1792990909 libexif: Fix of 3 CVEs
CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks...
Linux Distros Unpatched Vulnerability : CVE-2026-109279
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the...
Astra Linux – vulnerability in Imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an incorrect check in the JP2 would result in a heap buffer overwrite involving a single byte when certain options were specified. This issue has been fixed in...
Astra Linux – vulnerability in Imagemagick
ImageMagick versions prior to 7.1.2-26 and 6.9.13-51 contain a heap-based buffer overwrite vulnerability. This occurs when an X11 import is run with a specially crafted window title, potentially leading to heap memory corruption and denial of service...
Astra Linux – vulnerability in Apache2
A buffer underwrite vulnerability exists in the Apache HTTP Server due to specially crafted regular expressions in the configuration. This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are advised to upgrade to version 2.4.68, which resolves the issue...
Astra Linux – vulnerability in Imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-24, a missing check on a return value could lead to a heap buffer over-write in the MAT decoder on 32-bit systems. This issue has been patched in versions 6.9.13-48...
Astra Linux – vulnerability in Imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick-distribute-cache service could cause a heap buffer overwrite in the server process. This issue has been patched in...
CVE-2026-109279
A flaw was found in ImageMagick. Due to improper synchronization during concurrent security policy access, simultaneous reads and writes across multiple threads can trigger a race condition, leading to a heap buffer overwrite. An attacker capable of inducing concurrent security policy operations...
CVE-2026-109279
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security...
PT-2026-110696
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 Description Insufficient synchronization occurs when the security policy is accessed. Simultaneous reads and writes of the policy by multiple threads trigger a race...
SUSE CVE-2026-106574
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...
CVE-2026-16179
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a heap buffer underwrite and potentially crash the service...
CVE-2026-106574
A flaw was found in ImageMagick. An attacker connected to the distributed pixel cache server can send crafted pixel data that triggers an integer calculation error, leading to a heap buffer overwrite. This issue causes the server to crash, resulting in a Denial of Service DoS...
DEBIAN-CVE-2026-106574
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...
CVE-2026-106574
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, crashing the server...