Security update for libarchive

This update for libarchive fixes the following issues: CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 CVE-2025-5916:...

Security update for libarchive

This update for libarchive fixes the following issues: CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 CVE-2025-5916:...

CVE-2025-55589

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice...

PT-2025-34113

Name of the Vulnerable Software and Affected Versions: Cryostat HTTP API affected versions not specified Description: Cryostat’s HTTP API binds to all network interfaces, potentially allowing external visibility and access to the API port if Network Policies are disabled. This could allow an...

Linux Distros Unpatched Vulnerability : CVE-2020-16093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LemonLDAP::NG aka lemonldap-ng through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because th...

Linux Distros Unpatched Vulnerability : CVE-2025-52891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML ta...

Linux Distros Unpatched Vulnerability : CVE-2025-54349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow. CVE-2025-54349 Note that Nessus relies on t...

SUSE CVE-2025-38600

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan The ssid-ssids and sreq-ssids arrays have MT7925RNRSCANMAXBSSIDS elements so this = needs to be to prevent an out of bounds access...

CVE-2025-38600

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan The ssid-ssids and sreq-ssids arrays have MT7925RNRSCANMAXBSSIDS elements so this = needs to be to prevent an out of bounds access...

DEBIAN-CVE-2025-38591

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to pointer ctx fields The following BPF program, simplified from a syzkaller repro, causes a kernel warning: r0 = u8 r1 + 169; exit; With pointer field sk being at offset 168 in skbuff. This access is...

CVE-2025-38600 wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan The ssid-ssids and sreq-ssids arrays have MT7925RNRSCANMAXBSSIDS elements so this = needs to be to prevent an out of bounds access...

CVE-2025-38600

The CVE-2025-38600 entry concerns the Linux kernel driver for Mediatek MT7925 (mt76 mt7925) where an off-by-one in mt7925_mcu_hw_scan() could trigger an out-of-bounds access. The bug arises from ssid->ssids[] and sreq->ssids[] sized with MT7925_RNR_SCAN_MAX_BSSIDS, with a comparison that mu...

CVE-2025-38600 wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan The ssid-ssids and sreq-ssids arrays have MT7925RNRSCANMAXBSSIDS elements so this = needs to be to prevent an out of bounds access...

CVE-2025-38600

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan The ssid-ssids and sreq-ssids arrays have MT7925RNRSCANMAXBSSIDS elements so this = needs to be to prevent an out of bounds access...

Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

A new exploit combining two critical, now-patched security flaws in SAP NetWeaver has emerged in the wild, putting organizations at risk of system compromise and data theft. The exploit in question chains together CVE-2025-31324 and CVE-2025-42999 to bypass authentication and achieve remote code...

Medium: mod_security

Issue Overview: ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xm...

CVE-2025-38600: Off-by-one Error

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925mcuhwscan The ssid-ssids and sreq-ssids arrays have MT7925RNRSCANMAXBSSIDS elements so this = needs to be to prevent an out of bounds access...

Linux Distros Unpatched Vulnerability : CVE-2014-9683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the ecryptfsdecodefromfilename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local use...

PT-2025-33798 · Mt76 +1 · Mt76 +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The mt7925 mcu hw scan function in the mt76 module contains an off-by-one error. This occurs because the comparison operator used to check array bounds is incorrect, potentially leadin...

Medium: gnutls

Issue Overview: A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory...