741 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-75893
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths. CVE-2026-75893 No...
CVE-2026-75893
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
DEBIAN-CVE-2026-75893
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
UBUNTU-CVE-2026-75893
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
CVE-2026-75893
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
CVE-2026-75893 Heap based buffer overflow at ipaccess_proxy_read_msg()
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
CVE-2026-75893 Heap based buffer overflow at ipaccess_proxy_read_msg()
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
EUVD-2026-83272
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
CVE-2026-75893
The osmo-bsc software, versions 1.0.1 through 1.14.1 , is vulnerable to a heap-based buffer overflow issue. The flaw exists in the ipaccess_proxy_read_msg() function and is triggered via IPA frame lengths . While the vulnerability is documented across multiple security advisories, the provided do...
CVE-2026-75893
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
EUVD-2026-83032
IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially execute arbitrary code due to improper validation of cluster command message lengths...
CVE-2026-75893: Heap-based Buffer Overflow
In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths...
AZL-102626 CVE-2026-90230 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmetauthnegotiate nvmetexecuteauthsend allocates the DH-HMAC-CHAP message buffer with the host-supplied transfer length tl and hands it to nvmetauthnegotiate without passing tl along...
EUVD-2026-80937
Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 incomplete fix of CVE-2026-45799...
CVE-2026-25275
Transient DOS when processing authentication frames with invalid FILS information element header lengths...
ROS-20260916-73-0002
The vulnerability of the net/ipv6/ip6output.c component in the Linux operating system is related to errors in processing parameter lengths. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-91945
FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed inline arrays. Authenticated RDP clients can send oversized ATR lengths in PAKIDCOREDEVICEIOCOMPLETION responses to trigger reads past...
AZL-100100 CVE-2026-89495 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlmmigraterequesthandler Patch series "ocfs2/dlm: bound peer-controlled lengths in the o2dlm". The o2dlm receive handlers trust u8 length and count fields from the wire without bounding them, so a node in ...
CVE-2026-89533
CVE-2026-89533 affects the svcrdma component of the Linux kernel. Two arithmetic defects in svc_rdma_read_chunk_range() produce wrong DMA lengths and a u32 underflow when walking a Read chunk's segment list. The underflow propagates a near-UINT_MAX value into svc_rdma_build_read_segment(), trigge...
CVE-2026-88290
GeoVision GV-LPC2211 V1.14 260903 allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources...