Lucene search
+L

76155 matches found

OSV
OSV
added 2026/07/22 1:52 p.m.3 views

SUSE-SU-2026:22810-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. - CVE-2026-31503: udp: Fix wildcard bind...

9.8CVSS7.2AI score0.03234EPSS
SaveExploits8References181
CVE
CVE
added 2026/07/22 1:10 p.m.138 views

CVE-2026-55991

CVE-2026-55991 affects NLnet Labs Unbound 1.22.0–1.25.1. A remote unauthenticated DoQ client can trigger a libngtcp2 assertion by passing an erroneous error value when ngtcp2_conn_writev_stream() returns NGTCP2_ERR_STREAM_DATA_BLOCKED and Unbound calls ngtcp2_ccerr_set_application_error() with -1...

5.9CVSS5.4AI score0.00237EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/22 1:10 p.m.37 views

CVE-2026-55991 Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...

5.9CVSS0.00237EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 1:10 p.m.10 views

EUVD-2026-47683

In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...

5.9CVSS5.4AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/22 1:9 p.m.37 views

CVE-2026-55973 'dns-error-reporting: yes' leads to stack buffer overflow

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS0.00291EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/22 1:9 p.m.42 views

CVE-2026-55973

CVE-2026-55973 affects NLnet Labs Unbound 1.23.0 through 1.25.1. When dns-error-reporting: yes is enabled, the EDNS Report-Channel option (code 18) length from the last upstream response is treated as the length of the agent domain. If the agent domain contains garbage after the domain, those byt...

7.5CVSS5.4AI score0.00291EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/22 1:9 p.m.7 views

EUVD-2026-47681

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.3AI score0.00291EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/07/22 1:9 p.m.13 views

CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.3AI score0.00291EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/22 1:9 p.m.7 views

CVE-2026-55973

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.3AI score0.00291EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/22 1:9 p.m.9 views

CVE-2026-55973 'dns-error-reporting: yes' leads to stack buffer overflow

In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...

7.5CVSS5.3AI score0.00291EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 1:8 p.m.8 views

EUVD-2026-47672

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS DoT forwarded queries is tied to a struct's 'servicedquery' lifetime but also referenced by another struct 'waitingtcp'. When the owning struct is jostled out of the mesh while the DoT TCP stream is...

5.9CVSS5.4AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/22 1:6 p.m.44 views

CVE-2026-44687 Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN

In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be shadowed by the intermediate label's secure NXDOMAIN answer from the parent. This is caused by an off-by-one error in...

3.7CVSS0.00218EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/22 11:40 a.m.10 views

kernel: crypto: af_alg - zero initialize memory allocated via sock_kmalloc

A flaw was found in the Linux kernel's crypto AFALG subsystem. Memory allocated via sockkmalloc for crypto user API contexts is not zero-initialized, leaving fields with garbage values. Specifically, the 'inflight' variable can contain random data, causing afalgallocareq to spuriously return -EBU...

5.5CVSS5.6AI score0.00123EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/22 11:40 a.m.9 views

kernel: scsi: core: Wake up the error handler when final completions race against each other

Race condition vulnerabilities were found in the Linux kernel's SCSI error handler wake-up logic. Memory ordering issues in scsidechostbusy and ordering problems in scsiehinchostfailed can cause the SCSI error handler to never wake up when command completions race against each other. This leaves...

4.7CVSS5.1AI score0.00095EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/22 11:16 a.m.6 views

CVE-2026-16473

A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...

4.3CVSS0.00245EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/22 12:50 a.m.5 views

CVE-2026-64023

A flaw was found in the Linux kernel's GPIO General Purpose Input/Output aggregator module. This vulnerability occurs when an error condition causes memory to be prematurely freed while still being referenced in a lookup table. A local attacker could potentially exploit this timing issue, leading...

7.8CVSS5.2AI score0.00124EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/22 12:11 a.m.12 views

SUSE CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

8.8CVSS5.8AI score0.00405EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.11 views

PT-2026-63479

An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via the $rankFusion and $scoreFusion aggregation stages. The issue originates in the server's error-handling path and requires the ability to run aggregation queries...

7.1CVSS5.2AI score0.00235EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.16 views

PT-2026-63389

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.23.0 through 1.25.1 Description When the dns-error-reporting: yes setting is enabled, the software incorrectly processes the EDNS Report-Channel option code 18 from upstream responses. Specifically, it uses the...

7.5CVSS6.2AI score0.00291EPSS
SaveExploits0References30
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.16 views

PT-2026-63392

Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions prior to 1.25.2 Description A heap buffer overflow occurs when the validator builds the canonical RDATA form for an RRSIG-covered PX, RP, MINFO, or SOA RRset. The system computes the address of the second embedded...

4.8CVSS6.1AI score0.00118EPSS
SaveExploits0References29
Rows per page
Query Builder