Oracle-mysql-CVE-2012-2122

MySQL Authentication Bypass Vulnerability CVE-2012-2122 When connecting to MariaDB/MySQL, the entered password is compared with the expected correct password. Due to improper handling, even if memcmp returns a non-zero value, MySQL may still consider the two passwords as identical. That is, as lo...

CVE-2026-55606

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHCPv6 self-loop detection at dhcpv6.c:720 uses a network-byte-order DUID length value directly as the memcmp size parameter. On little-endian hosts, this causes memcmp to read far...

CVE-2026-55606

The odhcpd server, used by OpenWrt in versions 25.12 and prior , is vulnerable to a stack buffer overread due to a DUID length endianness mismatch in dhcpv6.c:720. On little-endian hosts , the software uses a network-byte-order DUID length value directly as a memcmp() size parameter, allowing a s...

CVE-2026-55606 odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHCPv6 self-loop detection at dhcpv6.c:720 uses a network-byte-order DUID length value directly as the memcmp size parameter. On little-endian hosts, this causes memcmp to read far...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crashes in the RedBoot partition table parser Given the CONFIGFORTIFYSOURCE=y configuration and a recent compiler version, the commit 439a1bcac648 “fortify: Use builtindynamicobjectsize when available” results in...

Astra Linux – Vulnerability in Heimdal

The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...

BIT-PHP-MIN-2026-91768 IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

BIT-LIBPHP-2026-91768 IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

CVE-2012-2122

CVE-2012-2122 - MySQL Authentication Bypass Proof of Concept PoC for CVE-2012-2122, a critical authentication bypass vulnerability affecting vulnerable MySQL and MariaDB servers. Disclaimer This project is intended for educational purposes, security research, and authorized penetration testing...

CVE-2026-91768 IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

CVE-2026-91768 IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...

glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-105459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105459 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2xattrfindentry xattr in ocfs2 maybe 'non-indexed'...

JLSEC-2026-1369

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

PT-2026-84067

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verify server cert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GEN IPAD...

AZL-96971 CVE-2026-53583 affecting package libgit2 for versions less than 1.7.2-3

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verifyservercert in src/libgit2/streams/openssl.c uses an inverted !!memcmp result in the GENIPADD...

CVE-2026-53583

In libgit2 before 1.8.6 and 1.9.5, verify_server_cert in src/libgit2/streams/openssl.c uses an inverted !!memcmp in the GEN_IPADD branch, so OpenSSL builds accept mismatched IP SubjectAltName certificates and reject matching ones, enabling a network attacker to intercept IP-literal HTTPS connecti...

glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...

ROS-20260818-73-0014

The vulnerability of the memcmp function in the Node.js software platform is related to insufficient comparison. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...