PT-2026-107639

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g malloc sizing based on overflowing width height bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow...

CVE-2026-42616

A heap buffer overflow exists in the ntfs-3g utility (specifically within the cat() function in ntfscat.c) for versions prior to 2026.7.7 . An attacker can trigger this vulnerability by providing a maliciously crafted NTFS filesystem image . When the ntfscat binary attempts to read a file from th...

Linux Distros Unpatched Vulnerability : CVE-2026-106065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:77371)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:77371 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

AlmaLinux 10 : freerdp (ALSA-2026:75570)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75570 advisory. FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU CVE-2026-85089 FreeRDP: FreeRDP: Denial o...

Linux Distros Unpatched Vulnerability : CVE-2026-106564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder ...

Linux Distros Unpatched Vulnerability : CVE-2026-106247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-106063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was found in GIMP's DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates ...

Linux Distros Unpatched Vulnerability : CVE-2026-105839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKTdoPBOD that allows attackers to cause heap buffer overflow via crafted track...

Rocky Linux 10.2 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_75583)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202675583 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buff...

MiracleLinux 9 : ghostscript-9.54.0-19.el9_8.1 (AXSA:2026-1983:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1983:01 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly fro...

MiracleLinux 9 : libvirt-11.10.0-12.7.el9_8.ML.1 (AXSA:2026-1982:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1982:08 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap...

AlmaLinux 8 : ghostscript (ALSA-2026:76877)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:76877 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-106574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel...

Rocky Linux 8 [CIQ] Security Update: librabbitmq / librabbitmq-debuginfo / librabbitmq-debugsource / etc (crlsa-2026_75582)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202675582 advisory. rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 Tenable has extracted the preceding description block directly from the CI...

PT-2026-107389

Name of the Vulnerable Software and Affected Versions wolfSSL wolfSSH versions 1.4.11 through 1.5.0 Description An unsigned integer underflow occurs in the wstrncat function within src/port.c on non-Windows platforms. This issue allows an authenticated remote attacker to write a single null byte...

RockyLinux 8 : freerdp (RLSA-2026:76747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76747 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...

CentOS Linux 8 [TuxCare] Security Update: gd / gd-devel / gd-progs (CENTOS-STREAM8:CLSA-2026:1791373162)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1791373162 advisory. - libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 Note that Nessus has not tested for this issue but has...

MiracleLinux 8 : gd-2.2.5-8.el8_10 (AXSA:2026-1980:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1980:01 advisory. libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-107161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST- MD5 plugin computes the size of the buffer needed for a...