52 matches found
CVE-2026-107364
In all released versions of MIT krb5, an unauthenticated attacker can cause a KDC process to perform a large read overrun, likely causing the process to terminate. Mitigation Restrict network access to the Kerberos Key Distribution Center KDC ports 88 UDP/TCP to trusted client networks, or disabl...
openmagic
openmagic openmagic can assist you in the automating testing and exploiting of systems vulnerable to the OpenSSL TLS heartbeat read overrun CVE-2014-0160. The base module wraps a modified version of the "ssltest.py" program by Jared Stafford and provides the following additional features: Save th...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147018)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147018 advisory. A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or...
Rocky Linux 9.6 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778003374)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778003374 advisory. - A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling...
Oracle Linux 10 : coreutils (ELSA-2026-67886)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67886 advisory. - uniq: fix CVE-2026-56391 RHEL-216794 - fix read overrun with -w Tenable has extracted the preceding description block directly from the Oracle Linu...
Fedora 45 : coreutils (2026-217bb52eb2)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-217bb52eb2 advisory. Automatic update for coreutils-9.11-6.fc45. Changelog Mon Aug 3 2026 Luk Zaoral - 9.11-6 - CVE-2026-56391 - uniq: fix read overrun with -w rhbz2507449 - tee:...
CLSA-2026-1782979178 krb5: Fix of 2 CVEs
CVE-2026-40355: fix null pointer dereference in NegoEx parsenegomessage - CVE-2026-40356: fix read overrun in NegoEx parsemessage via short headerlen...
CLSA-2026-1781081364 tigervnc: Fix of 3 CVEs
CVE-2026-33999: fix buffer re-use in XkbSetCompatMap in the bundled xorg-x11-server source to prevent a buffer read overrun - CVE-2026-34001: fix use-after-free in miSyncTriggerFence in the bundled xorg-x11-server source - CVE-2026-34003: add additional bound checking in CheckKeyTypes in the...
xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
xorg: xwayland: X.Org X server: Denial of Service via integer underflow in XKB compatibility map handling
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
AZL-84630 CVE-2026-33999 affecting package xorg-x11-server 1.20.10-6
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
ALPINE-CVE-2026-33999
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
AZL-84839 CVE-2026-33999 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-4
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
CVE-2026-33999
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
CVE-2026-33999
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
Rocky Linux: CVE-2026-33999: xorg-x11-server-Xwayland (Multiple Advisories)
A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...
CVE-2026-28386
A flaw was found in openssl. Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support may experience a Denial of Service DoS. This occurs when processing partial cipher blocks, specifically if the input buffer ends at a memory page boundary and the subsequen...
Shelly Pro 3EM buffer error vulnerability
Shelly Pro 3EM is a three-phase energy meter from Shelly USA. A buffer error vulnerability exists in Shelly Pro 3EM versions prior to 1.4.4, which stems from an out-of-bounds read that could result in an over-read of the buffer...