5760 matches found
DEBIAN-CVE-2026-45838
In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroupstoragegetnextkey listnextentry never returns NULL -- when the current element is the last entry it wraps to the list head via containerof. The subsequent NULL check is therefore dead code...
DEBIAN-CVE-2026-48962
IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. parseOutputGlob wraps the caller-supplied output glob string in double quotes and stores it in the parser state; getFiles then runs the stored expression through eval...
DEBIAN-CVE-2026-5260
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
DEBIAN-CVE-2026-45835
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsocknewconnectioncb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...
BELL-CVE-2026-44168
Bulletin has no description...
BELL-CVE-2026-46597
Bulletin has no description...
BELL-CVE-2026-39828
Bulletin has no description...
BELL-CVE-2026-39830
Bulletin has no description...
BELL-CVE-2026-43503
Bulletin has no description...
BELL-CVE-2026-9256
Bulletin has no description...
ECHO-966C-4616-ACC0 CPU-consumption DoS in gdImageArc/gdImageFilledArc (libgd before 2.0.35) via a very large start/end angle, which drove the unbounded arc loop. The libgd 2.0.35 fix — normalizing the angles and clamping the sweep to <= 360 before the drawing loop — is already present in this trixie source: gdImageFilledArc in src/extra/gd/gd.c reduces s/e modulo 360 and rewinds e to s (the block preceding "for (i = s; (i <= e); i++)"), so the loop runs at most ~720 iterations regardless of the requested angle. There is nothing to backport; the vulnerability does not reproduce against 0.2.13. Debian rates trixie "unimportant".
Bulletin has no description...
DEBIAN-CVE-2026-9365
A vulnerability has been found in Ettercap up to 0.8.3. The affected element is the function FUNCDECODER of the file src/dissectors/ecgg.c of the component GG Dissector. The manipulation of the argument gg leads to heap-based buffer overflow. The attack is possible to be carried out remotely. The...
DEBIAN-CVE-2026-43503
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers pskbcopyfclone and skbshift fail to propagate the SKBFLSHAREDFRAG bit in skbshinfo-flags when moving frags from source to...
DEBIAN-CVE-2026-46300
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skbtrycoalesce can attach paged frags from @from to @to. If @from has SKBFLSHAREDFRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backe...
MINI-G839-RJM6-MHCG
Bulletin has no description...
BELL-CVE-2026-46680
Bulletin has no description...
BELL-CVE-2026-44283
Bulletin has no description...
BELL-CVE-2026-32741
Bulletin has no description...
DEBIAN-CVE-2026-39827
An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for...