CVE-2026-42494

The Xen hypervisor is vulnerable to a buffer overrun in the libfsimage ISO9660 driver. Specifically, the directory loop assumes a good record length, deriving lengths directly from attacker-controlled on-disk fields without validation. Exploiting this vulnerability may allow an attacker to increa...

CVE-2026-42495 buffer overruns in libfsimage iso9660 handling

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

EUVD-2026-49772

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-62424

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-62424

The Xen hypervisor is vulnerable to a buffer overrun in libfsimage iso9660 handling. Specifically, the Rock Ridge NM record processing fails to validate the entry length from attacker-controlled on-disk fields, leading to potential exploitation. This issue impacts various distributions including ...

CVE-2026-62423 buffer overruns in libfsimage iso9660 handling

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42494 buffer overruns in libfsimage iso9660 handling

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

buffer overruns in libfsimage iso9660 handling

ISSUE DESCRIPTION The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them: The directory loop itself assumes a good record length. This is CVE-2026-42494. The calculation of the System...

PT-2026-65462

Name of the Vulnerable Software and Affected Versions Xen hypervisor libfsimage affected versions not specified Description A memory out-of-bounds read issue exists in the iso9660 driver of the libfsimage library. An attacker could exploit this flaw to achieve privilege escalation. Recommendation...

CVE-2026-62424: Improper Handling of Length Parameter Inconsistency

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42495: Integer Underflow (Wrap or Wraparound)

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-62423: Improper Handling of Length Parameter Inconsistency

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-42494: Out-of-bounds Read

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

CVE-2026-62425: Improper Input Validation

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

PT-2026-65467

This update for xen fixes the following issues: Update to version 4.20.3 jscPED-8907. Security issues fixed: - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling...

EUVD-2023-38406

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-34325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code...

The vulnerability of the libfsimage component of the cross-platform Xen hypervisor for Linux operating systems, related to writing beyond the memory boundaries, allows attackers to influence the confidentiality, integrity, and accessibility of data.

The vulnerability of the libfsimage component in the cross-platform kernel hypervisor for Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of data...

SUSE CVE-2023-34325

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the...

openSUSE: Security Advisory for xen (SUSE-SU-2023:4476-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...