29356 matches found
Important: Red Hat Security Advisory: gdb security update
An update for gdb is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
thunderbird: One byte overflow read in mail parser
A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed mail header. This could lead to a one-byte read past the end of a buffer, potentially resulting in information disclosure or other unpredictable behavior...
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: HTML Parser component...
thunderbird: Out-of-bounds read in IMAP response parser
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is...
Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base
This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformat-xml, jackson-dataformats-binary, jackson-modules-base fixes the following issues: CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues...
CVE-2026-96420
A flaw was found in Wireshark. An attacker could exploit this vulnerability by enticing a user to open a specially crafted Toshiba capture file, triggering a buffer over-read in the Toshiba file parser. This issue causes the application to crash, leading to a Denial of Service DoS. Mitigation...
CVE-2026-95386
A flaw was found in Wireshark. By tricking a user into opening a specially crafted TTL file, an attacker can trigger an infinite loop in the file parser. This issue causes the application to hang or become unresponsive, resulting in a Denial of Service DoS. Mitigation Mitigation for this issue is...
CVE-2026-95390
A flaw was found in Wireshark. By convincing a user to open a specially crafted PEAK CAN TRC trace file, an attacker can trigger an invalid memory access in the file parser. This issue causes the application to crash, resulting in a Denial of Service DoS. Mitigation Mitigation for this issue is...
CVE-2026-88358
A flaw was found in simdjson. An attacker can cause a Denial of Service DoS by providing a specially crafted, truncated JSON document to an application using the library. During processing, the parser accesses memory beyond the input buffer, causing the application to crash unexpectedly...
AZL-105000 CVE-2026-96420 affecting package wireshark 4.4.7-2
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
DEBIAN-CVE-2026-96420
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-96420
Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
DEBIAN-CVE-2026-95390
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...
AZL-104997 CVE-2026-95394 affecting package wireshark 4.4.7-2
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
DEBIAN-CVE-2026-95394
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-95390
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...
CVE-2026-95394
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
DEBIAN-CVE-2026-95386
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service...