3778 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: Fixed the ndiscrauseropt function to initialize the nduseroptpadX fields to zero, to prevent information leakage. When processing Router Advertisements with user options, the kernel generates an RTMNEWNDUSEROPT...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: xfrmuser: The issue of information leakage in buildreport has been fixed. The struct xfrmuserreport is a u8 proto field, followed by a struct xfrmselector. This means there are three “empty” bytes of padding, but these padding...
CVE-2026-87779
Insertion of sensitive information into log file vulnerability in Apache Syncope. When AES key of non-standard length not 16/24/32 bytes is configured, Syncope will pad the provided value with random characters. The resulting key value is logged. This issue affects Apache Syncope: from 3.0.15...
CVE-2026-87779 Apache Syncope: AES Secret Key disclosure via log output
Insertion of sensitive information into log file vulnerability in Apache Syncope. When AES key of non-standard length not 16/24/32 bytes is configured, Syncope will pad the provided value with random characters. The resulting key value is logged. This issue affects Apache Syncope: from 3.0.15...
CVE-2026-87779 Apache Syncope: AES Secret Key disclosure via log output
Insertion of sensitive information into log file vulnerability in Apache Syncope. When AES key of non-standard length not 16/24/32 bytes is configured, Syncope will pad the provided value with random characters. The resulting key value is logged. This issue affects Apache Syncope: from 3.0.15...
EUVD-2026-77372
Insertion of sensitive information into log file vulnerability in Apache Syncope. When AES key of non-standard length not 16/24/32 bytes is configured, Syncope will pad the provided value with random characters. The resulting key value is logged. This issue affects Apache Syncope: from 3.0.15...
CVE-2026-87779
The Apache Syncope identity management solution is vulnerable to the insertion of sensitive information into log files . When an AES key with a non-standard length (not 16, 24, or 32 bytes) is configured, the system pads the value with random characters and subsequently logs the resulting key. Th...
EUVD-2026-77125
FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...
TencentOS Server 4: freerdp (TSSA-2026:1001)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1001 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
PT-2026-91151
Insertion of sensitive information into log file vulnerability in Apache Syncope. When AES key of non-standard length not 16/24/32 bytes is configured, Syncope will pad the provided value with random characters. The resulting key value is logged. This issue affects Apache Syncope: from 3.0.15...
CVE-2026-19499: Heap-based Buffer Overflow
Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...
Linux Distros Unpatched Vulnerability : CVE-2026-52296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. CVE-2026-52296 Note th...
Linux Distros Unpatched Vulnerability : CVE-2026-89673
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix XDR padding calculation in ffencodegetdeviceinfo nfsd4ffencodegetdeviceinfo computes the daaddrbody reservation as 16 + netidlen + addrlen, but the...
CVE-2026-52296
FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...
DEBIAN-CVE-2026-52297
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...
UBUNTU-CVE-2026-52297
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...
UBUNTU-CVE-2026-52296
FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c...
CVE-2026-52297
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in movreadiacb in libavformat/mov.c...
CVE-2026-52296
FFmpeg versions before 9.0 are vulnerable to an out-of-bounds read due to missing required padding in WMA extradata allocation paths within libavcodec/wmaenc.c. This flaw can be triggered when a specially crafted file is encoded into the WMA (Windows Media Audio) format, potentially resulting in ...