CVE-2026-73242 FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-bounds decrypt in `kerberos_DecryptMessage`

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

wildfly: wildfly-iiop: wildfly-jacorb: Wildfly: Pre-auth denial of service on the IIOP listener

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...

CVE-2026-72745

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73242...

CVE-2026-72745

CVE-2026-72745 is a duplicate of CVE-2026-73242 for FreeRDP. Technical details in connected docs describe an out-of-bounds vulnerability in kerberos_DecryptMessage() within winpr/libwinpr/sspi/Kerberos/kerberos.c, where a peer-supplied 16-bit EC (extra count) in a GSS Wrap token can move decrypt ...

CVE-2026-72745

...

CVE-2026-72745 FreeRDP before 3.30.0 Out-of-Bounds Read via Kerberos GSS Wrap-token EC

FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberosDecryptMessage winpr/libwinpr/sspi/Kerberos/kerberos.c. The 16-bit EC extra count field of a peer-supplied GSS Wrap token RFC 4121 is used directly in pointer arithmetic to locate the encrypted regions without being...

EUVD-2026-55989

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...

CVE-2026-15567

The CVE-2026-15567 entry concerns WildFly. A remote, unauthenticated attacker can trigger an OutOfMemoryError because CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and allocates a byte array of that size. This indicates a memory allocation vulnera...

CVE-2026-15567 Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...

CVE-2026-15567

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...

postgresql security update

13.23-5 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 13.23-4 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 SSL/GSS init causes denial of service via uncontrolled recursion - Resolves: CVE-2026-6479...

PT-2026-70096

Name of the Vulnerable Software and Affected Versions Wildfly affected versions not specified Description A remote unauthenticated attacker can trigger an OutOfMemoryError. This occurs because the GSS token decoder in CSIv2Util reads a length field controlled by the attacker without performing...

PT-2026-70158

FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberos DecryptMessage winpr/libwinpr/sspi/Kerberos/kerberos.c. The 16-bit EC extra count field of a peer-supplied GSS Wrap token RFC 4121 is used directly in pointer arithmetic to locate the encrypted regions without being...

Oracle Linux 9 : postgresql (ELSA-2026-52395)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-52395 advisory. - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 SSL/GSS init causes denial of...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauthgss: Avoid NULL dereferencing on a zero-length gsstoken in gssreadproxyverf A zero-length gsstoken results in pageaddress being == 0, and intoken-pages0 being NULL. The code pageaddressintoken-pages0, which can lea...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: Fixed memory leaks in XDR decoding error paths. The functions gssxdecctx, gssxdecstatus, and gssxdecname allocate memory through gssxdecbuffer, which calls kmemdup. When a subsequent decoding operation fails, the...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: SUNRPC: The issue with the gssauth kref leak in the gssallocmsg error path has been fixed. Commit 5940d1cf9f42 “SUNRPC: Rebalancing the kref in authgss.c” includes a call to krefget&gssauth-kref to balance the gssputauth...

postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation

A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...

ALSA-2026:52395 Important: postgresql security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVE-2026-6479 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...

Important: postgresql security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVE-2026-6479 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...