58 matches found
CVE-2026-52737 ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticated P2P peer can answer Zebra's outbound getblocks or FindBlocks request with a small two-hash inventory and then serve a syntactically valid block whose coinbase height is far above the local chain tip. In...
CVE-2026-52737 ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticated P2P peer can answer Zebra's outbound getblocks or FindBlocks request with a small two-hash inventory and then serve a syntactically valid block whose coinbase height is far above the local chain tip. In...
CVE-2026-57074
A flaw was found in perl-XML-Bare. The parsercparse function, which handles XML parsing, contains an unbounded character lookahead vulnerability. A remote attacker could exploit this by providing a specially crafted, truncated XML string. This could cause the parser to attempt to read data beyond...
[SECURITY] [DSA 6411-1] aom security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6411-1 [email protected] https://www.debian.org/security/ Aron Xu August 05, 2026 https://www.debian.org/security/faq -...
openSUSE 16 Security Update : perl-XML-Bare (openSUSE-SU-2026:21435-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21435-1 advisory. Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes bsc1271640 - CVE-2026-57074: Fixed unbounded...
Security update for perl-XML-Bare (moderate)
openSUSE security update: security update for perl-xml-bare ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21435-1 Rating: moderate References: bsc1271637 bsc1271640 Cross-References: CVE-2026-13401 CVE-2026-57074 CVSS scores: CVE-2026-13401 SUSE :...
OPENSUSE-SU-2026:21435-1 Security update for perl-XML-Bare
This update for perl-XML-Bare fixes the following issues: Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes bsc1271640 - CVE-2026-57074: Fixed unbounded character lookahead bsc1271637...
SUSE CVE-2026-57074
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...
CVE-2026-57073
HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read. Note that t...
UBUNTU-CVE-2026-57074
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...
CVE-2026-57074
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...
EUVD-2026-44966
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...
CVE-2026-57074
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...
CVE-2026-57074
XML::Bare for Perl (versions up to 0.53) is affected by an unbounded character lookahead in the parserc_parse routine. The code checks for multicharacter strings like without ensuring the buffer offsets are within bounds, allowing truncated strings such as
CVE-2026-57074 XML::Bare versions through 0.53 for Perl have an unbounded character lookahead
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...
CVE-2026-57074
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "...
CVE-2026-57074 XML::Bare versions through 0.53 for Perl have an unbounded character lookahead
XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read...
EUVD-2026-44965
HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parsercparse function attempts to check for multicharacter strings such as "" without checking that the offsets are within the buffer. Truncated strings such as "a/" can trigger an out-of-bounds read. Note that t...
CVE-2026-57073
HTML::Bare for Perl versions up to 0.04 is vulnerable to an unbounded character lookahead in parserc_parse, enabling out-of-bounds reads (truncated strings like
PT-2026-60505
Name of the Vulnerable Software and Affected Versions XML::Bare versions prior to 0.53 Description The parserc parse function contains an unbounded character lookahead. The parser attempts to verify multicharacter strings, such as "", without validating that the offsets remain within the buffer...