Lucene search
K

4 matches found

OSV
OSV
added 2026/05/27 11:16 a.m.2 views

UBUNTU-CVE-2026-45843

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

8.2CVSS5.7AI score0.00278EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/27 9:24 a.m.35 views

CVE-2026-45843 slip: bound decode() reads against the compressed packet length

In the Linux kernel, the following vulnerability has been resolved: slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via decode and pull16. Neither helper bounds-checks against isize, and decod...

8.2CVSS0.00278EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.6 views

PT-2026-43677

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The slhc uncompress function parses VJ-compressed TCP headers by advancing a pointer through the packet using decode and pull16. These helper functions do not perform bounds-checks again...

8.2CVSS5.9AI score0.00278EPSS
Exploits0
OSV
OSV
added 2026/04/10 4:18 p.m.3 views

CLSA-2026-1775223344 freerdp: Fix of 3 CVEs

CVE-2023-39355: fix use-after-free in RDPGFXCMDIDRESETGRAPHICS handling when context-maxPlaneSize == 0; update context-planesBuffer after free and prevent access to freed memory - CVE-2026-26965: fix heap out-of-bounds write in RLE planar decode that permit attacker-controlled pixel data and...

9.8CVSS7.4AI score0.01069EPSS
Exploits3References1
Rows per page
Query Builder