10905 matches found
CVE-2026-3832 Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...
CVE-2026-3832
CVE-2026-3832 affects the gnutls library. A logic error in processing multi-record OCSP responses during TLS handshakes can cause a client with OCSP verification enabled to incorrectly accept a revoked server certificate, potentially compromising trust. The available documents describe the vulner...
CVE-2026-3832
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...
Integer Underflow (Wrap or Wraparound)
Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound via the DTLS handshake parsing process. An attacker can cause an out-of-bounds read and potentially disclose sensitive memory or crash the application by sending specially crafted DTLS handshake...
CVE-2026-1858
A flaw was found in wget2. This vulnerability allows a remote attacker, who has compromised a server certificate, to reuse it for Transport Layer Security TLS server authentication, even if the certificate was issued for a different purpose. This improper validation enables the attacker to...
SUSE-SU-2026:21452-1 Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2026-4873: connection reuse ignores TLS requirement bsc1262631. - CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. - CVE-2026-6253: proxy credentials leak over redirect-to proxy bsc1262635. -...
JLSEC-2026-364
There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution...
JLSEC-2026-363
SDL Simple DirectMedia Layer through 2.0.12 has a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c via a crafted .BMP file...
CVE-2026-4873
A flaw was found in curl. A remote attacker could exploit this by initiating an unencrypted connection via IMAP, SMTP, or POP3 and then making a subsequent request to the same host that requires Transport Layer Security TLS. Due to incorrect connection reuse, the subsequent request would bypass t...
CVE-2026-5402
TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution...
CVE-2026-5402 Heap-based Buffer Overflow in Wireshark
TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution...
EUVD-2026-26318
TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution...
CVE-2026-5402 Heap-based Buffer Overflow in Wireshark
TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution...
CVE-2026-5402
TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution...
CVE-2026-6528
Wireshark TLS protocol dissector has an infinite loop in versions 4.6.0–4.6.4 due to an unreachable exit condition, enabling denial of service. Affected component: TLS dissector internals in Wireshark. Root cause: loop condition prevents exit when parsing certain TLS inputs. Impact: denial of ser...
CVE-2026-6528 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service...
CVE-2026-6528 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service...
CVE-2026-6528
TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service...