18164 matches found
CVE-2026-0861
Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size a...
CVE-2026-0861 Integer overflow in memalign leads to heap corruption
Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size a...
RHSA-2026:0341 Red Hat Security Advisory: gcc-toolset-14-binutils security update
Bulletin has no description...
GNU C Library 安全漏洞
The GNU C Library is an open source, free C language compiler from the GNU community released under the LGPL license. A security vulnerability exists in the GNU C Library versions 2.30 through 2.42, which stems from the fact that passing too large an alignment value to the memalign family of...
DLA-4437-1 gnupg2 - security update
Bulletin has no description...
MiracleLinux 3 : ed-0.2-39.1AXS3 (AXSA:2008-470:01)
The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2008-470:01 advisory. Ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. For most purposes, ed has been...
MiracleLinux 3 : tar-1.15.1-23.0.1.AXS3.2 (AXSA:2010-148:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2010-148:01 advisory. The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be...
TencentOS Server 3: glibc (TSSA-2025:0993)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0993 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
PT-2026-2957
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.30 through 2.42 Description Providing an excessively large alignment value to the memalign family of functions – including memalign, posix memalign, aligned alloc, valloc, and pvalloc – within the GNU C Library can lea...
MiracleLinux 3 : glibc-2.5-81.4.0.1.AXS3 (AXSA:2012-695:04)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-695:04 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make...
CVE-2026-0861: Integer Overflow or Wraparound
Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size a...
The vulnerability of the GNU Tar archive manager arises from an incorrect limitation on the path to the restricted-access directory. This allows attackers to circumvent existing security restrictions and gain access to the files for overwriting.
The vulnerability of the GNU Tar archive editor is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this vulnerability could allow a attacker to bypass existing security restrictions and gain access to the files for overwriting...
MiracleLinux 3 : gcc-4.1.2-50.0.1 (AXSA:2011-05:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-05:01 advisory. The gcc package contains the GNU Compiler Collection version 4.1. You will need this package in order to compile C code. Security issues fixed with th...
MiracleLinux 3 : glibc-2.5-58.2.0.1.AXS3 (AXSA:2011-151:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-151:01 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as t...
MiracleLinux 3 : glibc-2.5-65.3.0.1.AXS3 (AXSA:2012-210:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-210:01 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as t...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.6.12
Red Hat OpenShift Service Mesh 2.6.12 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...
Astra Linux – Vulnerability in Botan
Before version 3.6.0, when certain GCC versions were used, Botan had a compiler-induced operation that relied on secrets in the donna128.h file of lib/utils. This operation was used in Chacha-Poly1305 and x25519. An addition operation could be skipped if a carry wasn’t set. This issue was observe...
Astra Linux – Vulnerability in inetutils
In GNU Inetutils, telnetd in version 2.7 allows remote authentication bypass by using the -f root value for the USER environment variable...
Astra Linux – Vulnerability in binutils
A vulnerability was discovered in GNU Binutils 2.43 and is classified as problematic. The affected component is the function linkorderscan in the file ld/ldelfgen.c. Manipulation of this function leads to a memory leak. The attack can be launched remotely. The complexity of such an attack is quit...
