CVE-2026-63888

The CVE concerns the Linux kernel iSCSI target: two related Text-phase bugs in iscsit_handle_text_cmd() were fixed. First, a CRC32C DataDigest overread occurs because rx_size includes the CRC length when calling iscsit_crc_buf(), reading 4 bytes past the allocated text_in. The patch fixes this by...

CVE-2026-63888 scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd Two latent bugs in the Text-phase handler, both present since the original LIO integration in commit e48354ce078c "iscsi-target: Add iSCSI fabric suppor...

CVE-2026-63888 scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd Two latent bugs in the Text-phase handler, both present since the original LIO integration in commit e48354ce078c "iscsi-target: Add iSCSI fabric suppor...

OESA-2026-3015 libssh2 security update

libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...

OESA-2026-3014 libssh2 security update

libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...

OESA-2026-3016 libssh2 security update

libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10. Security Fixes: libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds he...

CVE-2026-63888: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd Two latent bugs in the Text-phase handler, both present since the original LIO integration in commit e48354ce078c "iscsi-target: Add iSCSI fabric suppor...

Fedora 44 : python-django5 (2026-595d35a4d1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-595d35a4d1 advisory. Update python-django5 to version 5.2.16 Fixes three low-severity CVEs - CVE-2026-48588: Potential exposure of private data via cached Set-Cookie...

Oracle Linux 10 : wireshark (ELSA-2026-20600)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-20600 advisory. - Resolves: RHEL-173221 - CVE-2026-5656 Improper Limitation of a Pathname to a Restricted Directory - Resolves: RHEL-173218 - CVE-2026-5405 Heap-base...

Oracle Linux 10 : post (ELSA-2026-25930)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25930 advisory. 2:3.8.5-10 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176554 Tenable has extracted the preceding descriptio...

ROS-20260717-73-0028

The vulnerability of the Metrics component in Google Chrome browser relates to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260717-73-0010

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted HTML page...

httpd security update

2.4.63-13.0.1.el102.4 - Replace index.html with Oracle's index page oracleindex.html. 2.4.63-13.4 - Resolves: RHEL-186221 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers CVE-2026-34356 - Resolves: RHEL-186195 - httpd: Apache HTTP Server: Heap-based Buffer...

The vulnerability of the console-based graphic editor ImageMagick, related to reading beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the console-based graphic editor ImageMagick, related to reading beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the freerdp_certificate_data_hash_() function in the RDP client FreeRDP allows a hacker to trigger a service failure.

The vulnerability of the freerdpcertificatedatahash function in the RDP client FreeRDP is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

UBUNTU-CVE-2026-57077

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newlinelen. In the bundled libsyck newlinelen and isnewline dereference the scan pointer, and the following byte for a "\r\n" pair, with no NUL-terminator or bounds check. During block-scalar...