Security update for 389-ds (critical)

openSUSE security update: security update for 389-ds ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21950-1 Rating: critical References: bsc1273133 bsc1279572 bsc1279864 bsc1279865 bsc1279866 bsc1279867 Cross-References: CVE-2026-11770 CVE-2026-183...

Linux Distros Unpatched Vulnerability : CVE-2026-88351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32...

Oracle Linux 9 : unbound (ELSA-2026-71487)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71487 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap...

CVE-2026-97957

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix mailbox segment buffer overflow checkmboxseqidandseglen validates that seqid does not exceed SEQIDMAXVAL 42 and seglen does not exceed MBOXSEGLEN 48. However, this allows the last segment seqid=42 to carry a full...

RHEL 8 : unbound (RHSA-2026:72183)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72183 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Heap buffer overflow and...

RockyLinux 10 : unbound (RLSA-2026:71419)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71419 advisory. unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis CVE-2026-82717 unbound: Unbound: Heap buffer overflow via malicious DNSSEC...

Oracle Linux 8 : unbound (ELSA-2026-70754)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70754 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Prevent heap...

Oracle Linux 10 : unbound (ELSA-2026-71419)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71419 advisory. - Prevent heap corruption during CNAME synthesis CVE-2026-82717 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 - Preven...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 の glibc vsysloginternal ヒープバッファオーバーフローの悪用を、収束時間理論（α = 0.0302011）を用いて行います。33層の時間的ヒープスプレー＋位相同期トリガーにより、信頼性の高いローカル権限昇格を実現します。 README.md root@kitploit: CTT-Vsyslog-Vortex CVE-2023-6246 glibc vsysloginternal ヒープオーバーフロー のための時間的共鳴エクスプロイト Copyright © 2026...

CVE-2026-42533

CVE-2026-42533 ラボ — NGINX 二段階キャプチャクラバリング RCE CVSS 9.2 Critical — nginx における認証前ヒープバッファオーバーフロー + 情報漏洩 影響: nginx 0.9.6 – 1.30.3 / 1.31.2 | 修正済み: 1.30.4 / 1.31.3 アーキテクチャ root@kitploit: ┌─────────────────────────────────────┐ │ ホストマシン │ │ │ PoC スクリプト ────┤ :8080 ──► nginx-vuln 1.26.x │ │ │ 脆弱 │ │ ▼ │ ...

CVE-2019-18634-writeup

CVE-2019-18634（https://www.exploit-db.com/exploits/47995）の分析 Sudo 1.8.25p - 'pwfeedback' バッファオーバーフロー（PoC）...

CVE-2021-3156-Sudo-Buffer-Overflow-Linux

CVE-2021-3156 – Sudo 버퍼 오버플로우 Linux Baron Samedit 권한 상승 익스플로잇 📌 개요 이 프로젝트는 Linux sudo 유틸리티의 중요한 힙 기반 버퍼 오버플로우 취약점인 CVE-2021-3156 Baron Samedit 의 악용을 시연합니다. 이 취약점은 sudoedit에서 부적절한 인수 처리로 인해 낮은 권한의 사용자가 루트 액세스 를 획득할 수 있게 합니다. 🎯 목표 취약점 근본 원인 분석 취약한 Linux 환경 구축 공개 익스플로잇 코드 실행 로컬 권한 상승 달성 Red Team 공격...

CVE-2026-84383

A critical heap buffer overflow vulnerability exists in libheif versions 1.22.0 through 1.23.1. When decoding a maliciously crafted HEIF, HEIC, or AVIF file using nested iden and auxl references, HeifPixelImage::transferchannelfromimageas can inappropriately append duplicate Alpha planes with...

RLSA-2026:69540 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...

rsyslog security update

An update is available for rsyslog. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...

CVE-2026-7482

🚨 CVE-2026-7482: Ollama におけるヒープバッファオーバーリード 📝 説明 CVE-2026-7482 は、ローカル言語モデルを実行するためのオープンソースフレームワークである Ollama の /api/create および /api/push エンドポイントにおける、重大なヒープバッファオーバーリード （ Heap Buffer Over-Read ）の脆弱性を特定したものです。 この脆弱性により、リモートかつ認証されていない攻撃者がプロセスメモリを漏えい させ、以下のような機密データを暴露する可能性があります: APIキーおよび認証トークン 環境変数...

CVE-2026-42945

CVE-2026-42945 セキュリティチェッカーツール これは、防御および内部ネットワーク調査向けの CVE-2026-42945 静的チェッカーツールです。NGINX の ngxhttprewritemodule 関連設定に高リスクの rewrite の組み合わせが存在するかどうかを確認します。 このプロジェクトは脆弱性の悪用コードを提供せず、悪意のある HTTP リクエストを送信せず、クラッシュやリモートコード実行を引き起こそうとしません。ローカルの NGINX 設定ファイルを読み取り、セキュリティチームがアップグレードや設定の修正が必要かどうかを判断するのに役立ちます。...

unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...

Critical: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

unbound: Unbound: Heap buffer overflow via malicious DNSSEC response

A flaw was found in Unbound. This vulnerability allows a remote attacker to cause a heap buffer overflow during the processing of DNSSEC responses. By sending a specially crafted DNSSEC response, a malicious server or an attacker tampering with network traffic can trigger this flaw. This could le...