13 matches found
CVE-2026-124000
NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...
EUVD-2026-120223
NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...
CVE-2026-124000 ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd
NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...
CVE-2026-124000
NASA JPL ION-DTN versions 2.1.0 through 4.2.0 are vulnerable to a heap buffer under-allocation in the Asynchronous Message Service daemon (amsd ). The root cause is an insufficient buffer size calculation for the internal state-event object, which occurs when the daemon processes Meta-AMS (MAMS) ...
PT-2026-140967
NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...
CVE-2026-124000: nasa-jpl ION-DTN: NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message…
NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon amsd that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS MAMS configuration management messages that are...
Linux Distros Unpatched Vulnerability : CVE-2026-71973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers ca...
CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
DEBIAN-CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
UBUNTU-CVE-2026-71973
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
CVE-2026-71973 U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
CVE-2026-71973 U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...
IBM Informix Dynamic Server librpc.dll Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Informix Dynamic Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RPC protocol parsing library, librpc.dll, utilized by the ISM Portmapper...