6975 matches found
Astra Linux – Vulnerability in Vim
Buffer over-reading in the GitHub repository vim/vim before version 8.2.4974...
Astra Linux – Vulnerability in opensc
A vulnerability was discovered in OpenSC. This security flaw causes a buffer overflow vulnerability in the cardoshaveverifyrcpackage function. An attacker can provide a smart card package with malformed ASN1 data. The cardoshaveverifyrcpackage function scans the ASN1 buffer for two tags, but the...
Astra Linux – Vulnerability in Vim
Buffer over-reading in the findnextquote function in the GitHub repository’s Vim/Vim version prior to 8.2.4925. These vulnerabilities can cause software to crash, modify memory, and may lead to remote execution...
curl: Out-of-bounds read in curl_formadd when CURLFORM_NAMELENGTH is explicitly 0
Hi all, I've discovered a heap out-of-bounds read in curlformadd that causes libcurl to silently read past a caller-supplied buffer and transmit the leaked contents to the remote server. It's confirmed under ASan and reachable without violating any documented precondition. Impact An application...
CVE-2026-80985 net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry
In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry smcllcrmtdeleterkey and smcllcsaveaddlinkrkeys read the part of a v2 message that does not fit into the 44-byte union smcllcmsg, and both bound themselves by the si...
MGASA-2026-0391 Updated glibc package fixes security vulnerabilities
Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...
Updated glibc package fixes security vulnerabilities
Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...
Important: Red Hat Security Advisory: openssl security, bug fix, and enhancement update
An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
openssl: SSL_select_next_proto buffer overread
A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...
RHEL 6 : openssl (RHSA-2026:66524)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66524 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
TencentOS Server 3: mingw-openssl (TSSA-2026:0988)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0988 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
SUSE CVE-2026-80833
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...
NewStart CGSL MAIN 7.02 : libsoup Multiple Vulnerabilities (NS-SA-2026-0100)
The remote NewStart CGSL host, running version MAIN 7.02, has libsoup packages installed that are affected by multiple vulnerabilities: - A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This...
AZL-99573 CVE-2026-80833 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...
CVE-2026-80833
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...
CVE-2026-80833 crypto: sun8i-ss - Remove crypto_rng interface
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...
CVE-2026-80833 crypto: sun8i-ss - Remove crypto_rng interface
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...
CVE-2026-80833
CVE-2026-80833 affects the sun8i-ss crypto driver in the Linux kernel, specifically the now-removed crypto_rng interface . The driver contained two distinct bugs: a use-after-free in its ->generate() function (caused by wait_for_completion_interruptible_timeout() failing to shut down the DMA o...
EUVD-2026-71283
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove cryptorng interface Since the cryptorng interface for hardware PRNGs is unused and is redundant with hwrng and the actual Linux RNG, it's being phased out. Most drivers for it were already removed. Go...