5107 matches found
ECHO-CD39-6531-4266
Bulletin has no description...
ECHO-4F7C-C9EF-8A40
Bulletin has no description...
ECHO-E70A-36E0-4574
Bulletin has no description...
ECHO-8D11-E996-AA3C Reported (VulDB) stack-based buffer overflow in llvm::StringMap::insert in lib/IR/ValueSymbolTable.cpp (ValueSymbolTable module), reachable only by locally feeding crafted IR/input to LLVM tooling. NVD carries the "disputed" tag and the record notes "The presence of this vulnerability remains uncertain". The LLVM project explains that the reported behavior is outside its documented security scope and is therefore not considered a security vulnerability (LLVM libraries are not a security boundary for untrusted input). Reported against llvm-project 22.1.x; the shipped toolchain is 19.1.7. Debian classifies it as an unimportant issue. No code change required. https://security-tracker.debian.org/tracker/CVE-2026-13573
Bulletin has no description...
ECHO-915C-A579-C425 Reported (VulDB) heap-based buffer overflow in GCRelocateInst::getBasePtr in llvm/lib/IR/IntrinsicInst.cpp (Bitcode File Handler), reachable only by locally feeding a crafted bitcode file to LLVM tooling. NVD carries the "disputed" tag and notes "There are still doubts about whether this vulnerability truly exists". The LLVM project explains that the reported behavior is outside its documented security scope and is therefore not considered a security vulnerability. Reported against llvm-project 22.1.x; the shipped toolchain is 19.1.7. Debian classifies it as an unimportant issue. No code change required. https://security-tracker.debian.org/tracker/CVE-2026-13574
Bulletin has no description...
ECHO-E768-001A-16BA
Bulletin has no description...
ECHO-FAD9-E6AB-E1E3
Bulletin has no description...
ECHO-E3A5-7704-649F
Bulletin has no description...
ECHO-AE30-49BE-9CC5
Bulletin has no description...
ECHO-7D51-101D-8C23
Bulletin has no description...
ECHO-D94C-0448-6A95
Bulletin has no description...
ECHO-6798-161C-8954
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-55677
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the...
ECHO-2A9B-9969-0D91
Bulletin has no description...
ECHO-E124-F081-DD1A
Bulletin has no description...
ECHO-8A57-2350-8830
Bulletin has no description...
ECHO-60EE-2760-44EB
Bulletin has no description...
ECHO-9320-F34E-79DB
Bulletin has no description...