Photon OS 5.0: Linux PHSA-2023-5.0-91-0046

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0046. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Pixman PHSA-2023-5.0-91-0013

An update of the pixman package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

The vulnerability of the functions __ioam6_fillTraceData() and ioam6_fillTraceData() in the net/ipv6/ioam6.c module of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions ioam6fillTraceData and ioam6fillTraceData in the net/ipv6/ioam6.c module of the Linux operating system is related to integer overflow. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibilit...

Linux Distros Unpatched Vulnerability : CVE-2026-68297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPCNLMEDIASET and TIPCNLBEARERSET accept user-supplied MTU values but only enforce a minim...

Linux Distros Unpatched Vulnerability : CVE-2026-68108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 6553665536...

Linux Distros Unpatched Vulnerability : CVE-2026-68257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation totalcwsrsize was computed in 32-bit before being used as a BO/SVM allocation size. With large...

ROS-20260810-73-0031

The vulnerability of the ssh2transportread function in the libssh2 library is related to buffer overflows due to integer overflows. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using specially created SSH packets...

Linux Distros Unpatched Vulnerability : CVE-2026-19389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from craft...

Linux Distros Unpatched Vulnerability : CVE-2026-68289

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tipc: fix integer overflow in tipcrecvmsg and tipcrecvstream In tipcrecvmsg, the copy length is computed as: copy = mintint, dlen - offset, buflen %NASLMINLEVE...

UBUNTU-CVE-2026-15534

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in Sregmatch. The regex engine's superlinear cache holds one bit per subject position for each participating WHILEM node, so the bit count is the subject...

JLSEC-2026-1232

libexpat before 2.8.2 has an integer overflow in copyString...

JLSEC-2026-1231

libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen...

SUSE SLES15 Security Update : libssh2_org (SUSE-SU-2026:3526-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3526-1 advisory. - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598:...

expat: Fix of CVE-2026-56407

CVE-2026-56407: signed integer overflow in doProlog when an internal entity value longer than INTMAX XMLChars truncates ENTITY.textLen to a negative length...

EulerOS 2.0 SP11 : libssh2 (EulerOS-SA-2026-3135)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2026-3147)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2026-3093)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...

UBUNTU-CVE-2026-65819

gopacket provides packet processing capabilities for Go. Through version 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, or offsets before validating them against packet buffers, allowing a crafted packet decoded through DecodingLayerParser or DecodeFromBytes to trigger an...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the capacity check in dvbsubparse in libavcodec/dvbsubparser.c. An attacker can trigger an out-of-bounds heap write and potential code execution by supplying a crafted WTV file that drives the bufsize ...

CVE-2026-20339

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpi...