Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

...

CVE-2026-34032

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

UBUNTU-CVE-2026-34032

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

CVE-2026-34032 Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

The vulnerability of the lustre_msg_string() function in the ptlrpc module of the Lustre file system, related to writing beyond buffer boundaries, allows a attacker to cause a service failure.

The vulnerability of the lustremsgstring function in the ptlrpc module of the Lustre file system is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

OPENSUSE-SU-2020:1270-1 Security update for gettext-runtime

This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch bsc941629 - Added msgfmt-double-free.patch to fix a double free error CVE-2018-18751 bsc1113719 - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of...

SUSE SLED15 / SLES15 Security Update : gettext-runtime (SUSE-SU-2020:2296-1)

This update for gettext-runtime fixes the following issues : Fix boo941629-unnessary-rpath-on-standard-path.patch bsc941629 Added msgfmt-double-free.patch to fix a double free error CVE-2018-18751 bsc1113719 Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of messa...

CVE-2019-20425

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. In the function lustremsgstring, there is no validation of a certain length value derived from lustremsgbuflenv2...

ALPINE-CVE-2018-19935

ext/imap/phpimap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via an empty string in the message argument to the imapmail function...

CVE-2012-0242: Use of Externally-Controlled Format String

Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string...