Lucene search
+L

17846 matches found

OSV
OSV
added 2026/08/25 3:16 p.m.8 views

UBUNTU-CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.4AI score0.0038EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/25 3:16 p.m.22 views

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.4AI score0.0038EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/25 2:17 p.m.22 views

CVE-2026-16599

GNU wget has a denial-of-service vulnerability in its FTP OPIE/S-KEY authentication code. The server-supplied sequence number from an FTP challenge line is used directly as an iteration count for an MD5 key-derivation loop with no upper-bound validation. A malicious FTP server—or a network attack...

5.1CVSS5.4AI score0.0038EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/25 2:17 p.m.10 views

EUVD-2026-65494

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.4AI score0.0038EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/25 2:17 p.m.13 views

CVE-2026-16599 Denial of Service in GNU wget

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.6AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/25 2:17 p.m.86 views

CVE-2026-16599 Denial of Service in GNU wget

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS0.0038EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/08/25 2:17 p.m.11 views

CVE-2026-16599

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.5AI score0.0038EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/08/25 2:17 p.m.11 views

CVE-2026-16599 Denial of Service in GNU wget

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

5.1CVSS5.4AI score0.0038EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/25 8:39 a.m.15 views

CVE-2026-77219

A flaw was found in GNU Emacs. An integer overflow in the PBM/PPM/PGM image loader allows a remote attacker to leak heap memory contents. By supplying a specially crafted image with large dimensions and an elevated maximum color index, the image loader's internal calculations can wrap to a negati...

7.1CVSS5.4AI score0.00128EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/08/25 1:17 a.m.9 views

SUSE CVE-2026-77219

GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...

7.1CVSS5.9AI score0.00128EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.8 views

PT-2026-86463

Converting crafted SHIFT JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFT JISX0213 sequences decode to two code...

5.9CVSS5.9AI score0.00412EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.18 views

PT-2026-81317

Name of the Vulnerable Software and Affected Versions GNU wget versions prior to 1.25.0 Description GNU wget is susceptible to a denial of service in its FTP OPIE/S-KEY authentication functionality. The issue occurs because the software uses a server-supplied sequence number from the FTP challeng...

5.1CVSS5.3AI score0.0038EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.11 views

PT-2026-86427

Calling strfmon and strfmon l in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmon l with right-justified width paddi...

7.7CVSS6AI score0.00376EPSS
SaveExploits0References28
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in binutils

A vulnerability was discovered in GNU Binutils 2.43 and is classified as critical. This issue affects the function bfdelfgcmarkrsec in the file elflink.c of the component ld. The vulnerability leads to a heap-based buffer overflow. The attack can be initiated remotely. The complexity of the attac...

5.1CVSS6.1AI score0.00678EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in glibc

The iconv function in the GNU C Library also known as glibc or libc6 version 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially leading to a denial of service...

7.5CVSS6.9AI score0.03093EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in glibc

NSCD: The NetGroup Cache may terminate the daemon due to a memory allocation failure. The NetGroup Cache Daemon’s NSCD netgroup cache uses xmalloc or xrealloc, and these functions may terminate the process due to a memory allocation failure, resulting in a denial of service for clients. This flaw...

7.3CVSS6.7AI score0.01075EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability in binutils

A issue was discovered in the Binary File Descriptor BFD library also known as libbfd, as distributed in GNU Binutils 2.32. It involves an attempt at excessive memory allocation in the bfdelfslurpversiontables function within elf.c...

5.5CVSS6.8AI score0.01097EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in glibc

NSCD: Stack-based buffer overflow in netgroup cache If the fixed-size cache of the Name Service Cache Daemon nscd is exhausted due to client requests, then a subsequent client request for netgroup data may lead to a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cach...

8.1CVSS7.2AI score0.0131EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.19 views

Astra Linux – Vulnerability in glibc

The iconv function in the GNU C Library versions 2.39 and earlier may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set. This could potentially cause an application to crash or overwrite a neighboring variable...

7.3CVSS7.2AI score0.8833EPSS
SaveExploits18References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in gzip, xz-utils

A arbitrary file writing vulnerability was discovered in the GNU gzip’s zgrep utility. When zgrep is applied to a file name chosen by the attacker e.g., a crafted file name, it can overwrite the content of the target file with an arbitrary file selected by the attacker. This flaw arises due to...

8.8CVSS6.9AI score0.0507EPSS
SaveExploits0References2
Rows per page
Query Builder