Lucene search
+L

33 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-90141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without...

7.3CVSS5.9AI score0.00445EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/09/17 5:17 p.m.•12 views

AZL-102327 CVE-2026-90141 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without checking for overflow. A crafted FTP PASV/EPSV response with an over-lo...

7.3CVSS5.9AI score0.00445EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 4:06 p.m.•34 views

CVE-2026-90141

CVE-2026-90141 is an integer overflow in the Linux kernel IPVS FTP helper (ip_vs_ftp_get_addrport()). Decimal digits from a crafted FTP PASV/EPSV response are accumulated into a __u16 port variable and unsigned char address octets without overflow checks, causing the value to wrap and the helper ...

7.3CVSS5.9AI score0.00445EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/09/17 4:06 p.m.•20 views

EUVD-2026-81734

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without checking for overflow. A crafted FTP PASV/EPSV response with an over-lo...

5.9AI score0.00445EPSS
SaveExploits0References8
NVD
NVD
•added 2026/07/29 10:16 a.m.•17 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS0.00584EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/29 10:16 a.m.•11 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/07/29 10:16 a.m.•20 views

UBUNTU-CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/29 8:26 a.m.•24 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/07/29 8:26 a.m.•50 views

CVE-2026-58158 Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS0.00584EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/07/29 8:26 a.m.•18 views

CVE-2026-58158 Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/07/29 8:26 a.m.•26 views

EUVD-2026-50211

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/29 8:26 a.m.•46 views

CVE-2026-58158

Apache Traffic Server vulnerable to PROXY protocol parsing issues causing port truncation and a stack overflow. Affected under_versions: 8.0.0–8.1.9, 9.0.0–9.2.14, and 10.0.0–10.1.3. Upgrading to 9.2.15 or 10.1.4 mitigates the issue. CVSS metrics are provided by Apache: CVSS 3.1 base score 5.9 (N...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/29 8:26 a.m.•18 views

CVE-2026-58158 Apache Traffic Server: PROXY protocol parsing has port truncation and a stack overflow

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/07/29 8:26 a.m.•24 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/07/29 8:26 a.m.•20 views

CVE-2026-58158

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/29 12:00 a.m.•28 views

PT-2026-65746

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 8.0.0 through 8.1.9 Apache Traffic Server versions 9.0.0 through 9.2.14 Apache Traffic Server versions 10.0.0 through 10.1.3 Description Apache Traffic Server mishandles PROXY protocol input, which leads to the...

10CVSS5.9AI score0.00664EPSS
SaveExploits0References53
Tenable Nessus
Tenable Nessus
•added 2026/07/29 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-58158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•6 views

CVE-2026-58158: Stack-based Buffer Overflow

Apache Traffic Server mishandles PROXY protocol input, truncating ports and overflowing the stack. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix th...

8.2CVSS5.8AI score0.00584EPSS
SaveExploits0References3
osv_mgasa
osv_mgasa
•added 2026/06/18 9:28 p.m.•36 views

MGASA-2026-0223 Updated libupnp packages fix security vulnerability

Port truncation via atoi cast in parseuri allows SSRF port confusion. CVE-2026-41682...

6.9CVSS5.8AI score0.0048EPSS
SaveExploits0References4
Mageia
Mageia
•added 2026/06/18 9:28 p.m.•43 views

Updated libupnp packages fix security vulnerability

Port truncation via atoi cast in parseuri allows SSRF port confusion. CVE-2026-41682...

6.9CVSS5.9AI score0.0048EPSS
SaveExploits0References3
Rows per page
Query Builder