Lucene search
+L

32 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-90141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without...

7.3CVSS5.9AI score0.00452EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/17 5:17 p.m.•5 views

AZL-102327 CVE-2026-90141 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without checking for overflow. A crafted FTP PASV/EPSV response with an over-lo...

7.3CVSS5.9AI score0.00452EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 4:06 p.m.•11 views

EUVD-2026-81734

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without checking for overflow. A crafted FTP PASV/EPSV response with an over-lo...

5.9AI score0.00452EPSS
SaveExploits0References8
CVE
CVE
•added 2026/09/17 4:06 p.m.•18 views

CVE-2026-90141

CVE-2026-90141 is an integer overflow in the Linux kernel IPVS FTP helper (ip_vs_ftp_get_addrport()). Decimal digits from a crafted FTP PASV/EPSV response are accumulated into a __u16 port variable and unsigned char address octets without overflow checks, causing the value to wrap and the helper ...

7.3CVSS5.9AI score0.00452EPSS
SaveExploits0References8
NVD
NVD
•added 2026/07/29 10:16 a.m.•13 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS0.00584EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/29 10:16 a.m.•11 views

UBUNTU-CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/07/29 10:16 a.m.•10 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.3AI score0.00584EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/29 8:26 a.m.•14 views

CVE-2026-58158 Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/07/29 8:26 a.m.•15 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.4AI score0.00584EPSS
SaveExploits0
OSV
OSV
•added 2026/07/29 8:26 a.m.•15 views

CVE-2026-58158 Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.4AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/07/29 8:26 a.m.•19 views

EUVD-2026-50211

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/29 8:26 a.m.•36 views

CVE-2026-58158 Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS0.00584EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/29 8:26 a.m.•14 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/07/29 8:26 a.m.•39 views

CVE-2026-58158

Apache Traffic Server vulnerable to PROXY protocol parsing issues causing port truncation and a stack overflow. Affected under_versions: 8.0.0–8.1.9, 9.0.0–9.2.14, and 10.0.0–10.1.3. Upgrading to 9.2.15 or 10.1.4 mitigates the issue. CVSS metrics are provided by Apache: CVSS 3.1 base score 5.9 (N...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2026/07/29 8:26 a.m.•16 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/07/29 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-58158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•24 views

PT-2026-65746

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•2 views

CVE-2026-58158: Stack-based Buffer Overflow

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/18 9:28 p.m.•24 views

MGASA-2026-0223 Updated libupnp packages fix security vulnerability

Port truncation via atoi cast in parseuri allows SSRF port confusion. CVE-2026-41682...

6.9CVSS5.2AI score0.0048EPSS
SaveExploits0References4
Mageia
Mageia
•added 2026/06/18 9:28 p.m.•35 views

Updated libupnp packages fix security vulnerability

Port truncation via atoi cast in parseuri allows SSRF port confusion. CVE-2026-41682...

6.9CVSS5.2AI score0.0048EPSS
SaveExploits0References3
Rows per page
Query Builder