85 matches found
EUVD-2026-103194
Text::CSVXS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds. When the record has a syntax error, getline returns undef and never fre...
EUVD-2026-103195
Text::CSVXS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. With eol unset, the default, getline reads with Perl's default line separator, so input with CR-only line endings arrives as one chunk. After each record the...
EUVD-2026-103193
Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...
CVE-2026-110754
Text::CSVXS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds. When the record has a syntax error, getline returns undef and never fre...
CVE-2026-110755
Text::CSVXS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. With eol unset, the default, getline reads with Perl's default line separator, so input with CR-only line endings arrives as one chunk. After each record the...
CVE-2026-110754
A flaw was found in Text::CSVXS. When parsing a CSV record containing a syntax error, the getline function fails to release memory allocated for fields parsed prior to the failure. An attacker who can supply malformed CSV input to a long-running application can exploit this vulnerability to trigg...
CVE-2026-110755
The Text::CSV_XS Perl module (versions before 1.65 ) is vulnerable to an inefficient algorithmic complexity (CWE-407) issue. When the eol option is unset, the getline function handles input with carriage return (CR) only line endings by copying the entire unparsed remainder into a new buffer for ...
CVE-2026-110755 Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline
Text::CSVXS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. With eol unset, the default, getline reads with Perl's default line separator, so input with CR-only line endings arrives as one chunk. After each record the...
CVE-2026-110754
The Text::CSV_XS module for Perl (versions before 1.65 ) contains a memory leak vulnerability within the getline() function. When a record contains a syntax error, the function returns undef but fails to free the array or the fields already parsed during the process. Consequently, a long-running ...
CVE-2026-110754 Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline
Text::CSVXS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns a reference to it only when the parse succeeds. When the record has a syntax error, getline returns undef and never fre...
CVE-2026-110753 Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline
Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...
CVE-2026-110753
The Text::CSV_XS Perl module (versions 1.46 to 1.64 ) is vulnerable to a use-after-free condition. When using bind_columns , the parser fails to check if a field scalar is bound before freeing it when skip_empty_rows skips an empty line in getline . The same issue occurs in "eof" mode on any empt...
Text::CSV_XS -- multiple vulnerabilities
H.Merijn Brand - Tux reports: Text::CSVXS versions before 1.65 have these vulnerabilities listed below. CVE-2026-110759: parse : report trailing lone CR, do not store EOF as 0xFF CVE-2026-110758: Under allowwhitespace, do not strip beyond field start CVE-2026-110757: combine : decide quoting from...
openSUSE 16 Security Update : aria2 (openSUSE-SU-2026:21997-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21997-1 advisory. Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0...
OPENSUSE-SU-2026:21997-1 Security update for aria2
This update for aria2 fixes the following issues: Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0 be1caa2d bsc1257934...
CVE-2026-75421
A flaw was found in aria2. This stack-buffer-underflow vulnerability, located in the IOFile::getLine function, could allow an attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability arises when the application attempts to write data before the beginning of a...
SUSE CVE-2026-75421
aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function...
Linux Distros Unpatched Vulnerability : CVE-2026-75421
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function. CVE-2026-75421 Note that Nessus relies on the presence of the package ...
