3 matches found
CVE-2026-48065 pam_usb: Unchecked integer multiplication before xmalloc() in conf.c allows heap-based buffer overflow on 32-bit targets
pamusb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/conf.c allocates heap memory proportional to ndevices, a count derived from libxml2 XPath evaluation of the config file, without first enforcing an upper bound. On 32-bit targets armv7l, i686 --...
Linux Distros Unpatched Vulnerability : CVE-2025-68222
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: s32cc: fix uninitialized memory in s32pinctrldesc s32pinctrldesc is allocated with devmkmalloc, but not all of its fields are initialized. Notably,...
robdns security breach
robdns is a dns service. A security vulnerability exists in robdns, which was discovered to contain a null pointer dereference vulnerability via the item-tokens component at /src/conf-parse.c. The vulnerability was discovered in the item-tokens component at /src/conf-parse.c...