AlmaLinux 9.2 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792162546)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792162546 advisory. - ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in...

CentOS Linux 7 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ldap / etc (CENTOS7:CLSA-2026:1791855215)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1791855215 advisory. - Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache...

CVE-2026-85745: Buffer Over-read

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STArea reads beyond the allocated buffer when processing invalid WKB for a MultiPolygon because the multi-polygon parser advances past a nested geometry header...

PT-2026-125070

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: One-Byte Buffer OverRead in HTTP Request Header Parsing。CVE-2024-28124...

Linux Distros Unpatched Vulnerability : CVE-2026-85745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STArea reads beyond the...

CVE-2026-46471: Buffer Over-read

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vxlan: The pxbnetworkmaypull function was used in routeshortcircuit. routeshortcircuit currently calls pbkmaypullskb, sizeofstruct iphdr or ipv6hdr, which checks whether bytes are available starting from skb-data. However, in...

Astra Linux – vulnerability in mbedtls

An issue was found in Arm Mbed TLS prior to version 2.24.0. mbedtlsx509crlparseder contains a buffer over-read of one byte...

Astra Linux – vulnerability in Apache2

Buffer over-read vulnerability in Apache HTTP Server caused by outbound OCSP requests to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are advised to upgrade to version 2.4.68, which resolves the issue...

Astra Linux – Vulnerability in glusterfs

In Gluster GlusterFS 11.0, there is a stack-based buffer over-read issue in xlators/mount/fuse/src/fuse-bridge.c...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed NULL dereference and buffer over-reading in SDP debugfs Why & How The function dpsdpmessagedebugfswrite dereferences connector-base.state-crtc without checking for NULL. A connector may be connected but...

Astra Linux – Vulnerability in Linux

A buffer overflow at the framebuffer layer in the fbcon code within the Linux kernel, prior to version 5.8.15, could be exploited by local attackers to read kernel memory, referred to as CID-6735b4632def...

SUSE CVE-2026-109951

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

Microsoft Office PowerPoint Information Disclosure Vulnerability

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

Unity Linux 20.1070e Security Update: libsoup (UTSA-2026-130370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130370 advisory. A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soupheadersparse can cause...

PT-2026-115256

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description A buffer over-read exists in Microsoft Office PowerPoint, which could allow an unauthorized attacker to disclose information over a network. A buffer over-read occurs when...

CVE-2026-108454: Buffer Over-read

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-101310: Buffer Over-read

The HDA audio device model did not check for zero-length Buffer Descriptor List BDL entries when starting a stream. A zero-length entry caused an out-of-bounds read or write during DMA transfer processing. BDL fields were also subject to modification by the guest after validation. A malicious gue...

K000163720: Apache Tomcat vulnerabilities CVE-2026-86243, CVE-2026-86246, and CVE-2026-86247

Security Advisory Description CVE-2026-86243 Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupporte...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read in the GnuTLS backend during WebSocket communication with a malicious server when a transmission is blocked. An attacker can cause the client to crash or access sensitive memory contents by manipulating I/O blocking...