DEBIAN-CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...

ROS-20260922-73-0008

The vulnerability in gstreamer1-plugins-bad-free is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0010

The vulnerability in gstreamer1-plugins-good is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0028

The vulnerability in gstreamer1-plugins-ugly is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

SQLite SQLAR Extension DoS

The vulnerability of the sqlarcompress and sqlaruncompress functions in the SQLite database management system’s SQLAR extension involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

pyasn1 Uncontrolled Resource Consumption DoS

The vulnerability of the pyasn1 library in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Microsoft Windows Defender DoS

The vulnerability of Microsoft Windows Defender operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service interruptions...

ROS-20260922-73-0027

The vulnerability in gstreamer1-plugins-bad-free is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0132

The vulnerability in Python-Django is related to an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-97027

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration num buffers=0 that triggers an assertion failure in yr arena get ptr, causing the application to terminate...

ROS-20260922-73-0085

The vulnerability in Tomcat10 is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0107

The vulnerability in the 389-ds-base relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0005

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0031

The vulnerability in gstreamer1-plugins-ugly is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-88341: Reachable Assertion

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...

ROS-20260922-73-0123

The vulnerability of the WINS-server software Samba is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20260922-73-0114

The vulnerability in perl-Socket is related to reading beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0079

The vulnerability in Tomcat10 is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0017

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0013

A vulnerability in the WAV parser of the GStreamer multimedia framework allows for integer overflow when processing improperly formatted WAV files. This vulnerability enables a malicious actor to cause the application to terminate abnormally service failure...