Suricata security vulnerabilities

Suricata is a network IDS, IPS, and NSM engine developed by the Open Information Security Foundation. Versions of Suricata prior to 8.0.0 and 8.0.3 contained security vulnerabilities; these vulnerabilities could lead to stack overflows, resulting in system crashes...

Modizer security vulnerability

Modizer is an iOS music player developed by yoyofr. Versions of Modizer prior to 4.1.1 contained security vulnerabilities, which were caused by integer overflows or circular errors...

IronOS security vulnerabilities

IronOS is a firmware system developed by Ben V. Brown individually. Versions of IronOS prior to v2.23-rc2 contained security vulnerabilities, which were caused by integer overflows or circular errors...

[SECURITY] [DLA 4449-1] zvbi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4449-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 24, 2026 https://wiki.debian.org/LTS -...

Debian dla-4449 : libzvbi-common - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4449 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4449-1 [email protected]...

RockyLinux 8 : java-17-openjdk (RLSA-2026:0927)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:0927 advisory. JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21711)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21711 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in...

Vulnerability of the clear_decompress_bands_data() function in the RDP client FreeRDP, allowing a hacker to execute arbitrary code and cause service failure

The vulnerability of the cleardecompressbandsdata function in the RDP client FreeRDP is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service interruptions...

MiracleLinux 8 : libexif-0.6.22-4.el8 (AXSA:2021-1093:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1093:01 advisory. libexif: out of bounds write in exif-data.c CVE-2019-9278 libexif: out of bounds read due to a missing bounds check in exifdatasavedataentry functio...

MiracleLinux 8 : userspace graphics, xorg-x11, and mesa, xorg-x11-server-1.20.10-1.el8 (AXSA:2021-2100:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2100:01 advisory. xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14345 xorg-x11-server: Integer underflow in the X input extension protocol...

MiracleLinux 7 : rsyslog-8.24.0-52.el7 (AXSA:2020-4536:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4536:02 advisory. rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c CVE-2019-17041 rsyslog: heap-based overflow in...

MiracleLinux 4 : spice-gtk-0.26-8.AXS4.2 (AXSA:2020-4447:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-4447:01 advisory. spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows CVE-2018-10893 Tenable has extracted the preceding description...

MiracleLinux 8 : libxml2-2.9.7-15.el8.1 (AXSA:2023-4778:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-4778:01 advisory. libxml2: integer overflows with XMLPARSEHUGE CVE-2022-40303 libxml2: dict corruption caused by entity reference cycles CVE-2022-40304 Tenable has...

MiracleLinux 3 : e2fsprogs-1.39-10.1.1AXS3 (AXBA:2008-123:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2008-123:01 advisory. - Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000753 advisory. Multiple heap-based buffer overflows in the hiddevioctlusage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 allow local users to cause a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000690 advisory. Multiple buffer overflows in the commandportreadcallback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before...

MiracleLinux 3 : mesa-6.5.1-7.11.0.1.AXS3 (AXSA:2013-539:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-539:01 advisory. Mesa Security issues fixed with this release: CVE-2013-1993 Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001940)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001940 advisory. Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of servic...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002094 advisory. Multiple stack-based buffer overflows in the Near Field Communication Controller Interface NCI in the Linux kernel before 3.4.5 allow remote attackers to cause a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001777 advisory. Multiple buffer overflows in the hfsplus filesystem implementation in the Linux kernel before 3.3.5 allow local users to gain privileges via a crafted HFS plus...