RockyLinux 10 : libxml2 (RLSA-2026:71586)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71586 advisory. libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflo...

PT-2026-99098

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description An integer overflow or wraparound occurs in Microsoft Office Outlook, which could allow an unauthorized attacker to execute code remotely over a network. This issue requires...

CVE-2025-14181: Integer Overflow or Wraparound

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

CVE-2026-6103: Integer Overflow or Wraparound

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

CVE-2026-97559

In the Linux kernel, the following vulnerability has been resolved: smb: client: fail DACL rewrite when the new DACL exceeds 64K replacesidsandcopyaces and setchmoddacl accumulate the size of the DACL they build in a u16. That accumulator can wrap. validatedacl caps numaces at daclsize -...

Linux Distros Unpatched Vulnerability : CVE-2026-88372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files. CVE-2026-88372 Note that Nessus relies ...

Fedora 44 : 389-ds-base (2026-b16c9cbc0f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-b16c9cbc0f advisory. - Resolves: rhbz2492927 CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer...

CVE-2026-10758: Integer Overflow or Wraparound

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

PT-2026-99113

Name of the Vulnerable Software and Affected Versions PHP affected versions not specified Description The phar tar number function parses the octal size field of a TAR header into a uint32 t without an overflow check. Because the field is 11 octal digits wide and can hold values up to 0x1FFFFFFFF...

Linux Distros Unpatched Vulnerability : CVE-2026-96749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built fr...

Vim Integer Overflow DoS

The vulnerability of the Vim text editor is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-99128

Name of the Vulnerable Software and Affected Versions Esri LERC versions 4.1.0 and earlier Description Esri LERC is an open-source image or raster format designed for rapid encoding and decoding of pixel types. A heap-based out-of-bounds write occurs due to an integer overflow when the applicatio...

PT-2026-98499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the SMB client when rewriting a Discretionary Access Control List DACL. The functions replace sids and copy aces and set chmod dacl use a u16 accumulator to...

ROS-20260925-73-0178

The vulnerability of the asymmetrickeygenerateid function in the crypto/asymmetrickeys/asymmetrictype.c module of the Linux kernel’s cryptography subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service...

PT-2026-98570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the get boot config from initrd function. A crafted initrd with an excessively large bootconfig size can cause pointer arithmetic to wrap around on 32-bit...

Linux Distros Unpatched Vulnerability : CVE-2026-6668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-97906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as...

Linux Distros Unpatched Vulnerability : CVE-2026-88351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms. When parsing a specially crafted MessagePack array32 or map32...

Linux Distros Unpatched Vulnerability : CVE-2026-97990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpasimnet: check TX pull result before RX copy vringhiovpulliotlb returns a signed byte count. A failed TX pull is currently added to the unsigned byte counter...

RockyLinux 9 : libxml2 (RLSA-2026:71585)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71585 advisory. libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflow...