21718 matches found
AZL-105813 CVE-2026-95520 affecting package rpm 4.18.2-2
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
CVE-2026-95520
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
Security update for corosync
This update for corosync fixes the following issue: CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...
SUSE-SU-2026:4387-1 Security update for corosync
This update for corosync fixes the following issue: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738...
CVE-2026-96423
A flaw was found in Wireshark. A heap-based buffer overflow in the X11 protocol dissector allows an attacker to cause a Denial of Service DoS by injecting malformed packets or providing a crafted capture file. Successful exploitation leads to an application crash, disrupting network packet...
CVE-2026-95520
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
CVE-2026-95520 Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
CVE-2026-95520 Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
EUVD-2026-88733
A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAGLONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext that shrinks a buffer allocation to one byte, after which the payload's...
CVE-2026-95520
A heap-based buffer overflow vulnerability exists in rpm when parsing untrusted RPM packages. The flaw is triggered when processing a symlink entry where the RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF. This causes an integer overflow in the iterReadArchiveNext() function, shrinking a buffer...
CVE-2026-95393
A flaw was found in Wireshark's CSN.1 Concrete Syntax Notation One protocol dissector. By transmitting malformed network packets or providing a crafted packet capture file, an attacker can trigger a heap-based buffer overflow. This vulnerability causes the application to crash, leading to a Denia...
CVE-2026-95388
A flaw was found in Wireshark. A heap-based buffer overflow in the sharkd utility can cause the application to crash, resulting in a Denial of Service DoS. An attacker could exploit this vulnerability by convincing a user to process specially crafted input. Mitigation To mitigate this flaw,...
CVE-2026-95387
A flaw was found in Wireshark. The SPDY protocol dissector suffers from a heap-based buffer overflow due to improper handling of packet data. A remote attacker could exploit this vulnerability by injecting crafted network packets or enticing a user to inspect a malicious capture file, causing the...
CVE-2026-95389 Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95389 Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95389 Heap-based Buffer Overflow in Wireshark
SCTP protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95389
A heap-based buffer overflow vulnerability exists in the SCTP protocol dissector of Wireshark . This flaw affects versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 , potentially allowing an attacker to cause a denial of service (DoS) . For impacted systems, it is recommended to update to the latest ver...
CVE-2026-95387
A heap-based buffer overflow exists in the SPDY protocol dissector of Wireshark , affecting versions 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 . Exploitation of this vulnerability can result in a denial of service (DoS) . Users are advised to update to the latest version, specifically 4.6.9 or 4.4.19 , ...