63 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix for panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...
Linux Distros Unpatched Vulnerability : CVE-2026-101278
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld....
CVE-2026-101278
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
DEBIAN-CVE-2026-101278
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
UBUNTU-CVE-2026-101278
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
CVE-2026-101278 Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
CVE-2026-101278 Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
CVE-2026-101278
A weakness exists in Trusted Domain Project OpenDMARC versions up to 1.4.2 . The vulnerability specifically affects the opendmarc_get_tld function within the file libopendmarc/opendmarc_tld.c, which is part of the PSL Wildcard Handler component. An attacker can perform a remote manipulation leadi...
EUVD-2026-88593
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
CVE-2026-101278
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
CVE-2026-101278
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
PT-2026-102415
Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A weakness exists in the PSL Wildcard Handler component within the opendmarc get tld function of the libopendmarc/opendmarc tld.c file. A remote attacker can perform a manipulation that leads to an...
CVE-2026-101278: Origin Validation Error
A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...
AZL-99767 CVE-2026-82209 affecting package curl 8.11.1-11
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
CVE-2026-82209 domain-scoped PSL domain cookie
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
CVE-2026-82209 domain-scoped PSL domain cookie
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
curl: CVE-2026-82209: domain-scoped PSL domain cookie
Summary When libpsl is enabled and a response host is itself a public suffix e.g. github.io, a Set-Cookie header whose Domain attribute exactly equals that host is accepted by psliscookiedomainacceptable but stored with tailmatch = TRUE. RFC 6265 §5.3 requires this exact-match case to produce a...
curl: Cookie jar load skips public suffix check on PSL builds
On curl 8.21.0 with libpsl official curl.se 8.21.06 win64, Features: PSL, HTTP Set-Cookie: Domain=co.uk is dropped in verbose. The same cookie loaded from a Netscape jar file or a Set-Cookie: line in that file is accepted and later sent to unrelated hosts under the suffix bank.co.uk, other.co.uk...
CVE-2026-48979: Inconsistent Interpretation of HTTP Requests
PHP Standard Library PSL is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the Psl\H2\ServerConnection does not validate that the total bytes received in DATA frames match the content-length header declared in the...