PT-2026-36055

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Description A crash in the SDP protocol dissector allows a denial of service...

CVE-2026-41677 vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

CVE-2026-41676 vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

GHSA-8C75-8MHR-P7R9 vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

CVE-2026-41681 vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

GHSA-GHM9-CR32-G9QJ vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

GHSA-XMGF-HQ76-4VX2 vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

GHSA-PQF5-4PQQ-29F5 vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

CVE-2026-41678 vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

GHSA-HPPC-G8H3-XHP3 vulnerabilities

Vulnerabilities for packages: guestproxyagent, deno, ztunnel-fips, typst, rpm-sequoia, rustls-openssl-client, bootc, vector, komodo, rustup, sccache, valkey-ldap, sentry-cli, sqlx, sdp-k8s-injector...

SUSE CVE-2026-31427

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...

CVE-2026-31427

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...

CVE-2026-31427

The CVE-2026-31427 issue in Linux kernel netfilter/nf_conntrack_sip was fixed by initializing the rtp_addr before calling nf_nat_sip SDP hooks and tracking via a have_rtp_addr flag. If SDP has no m= lines, or contains only inactive/unrecognized media, the code now avoids calling sdp_session with ...

CVE-2026-31427 netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...

PT-2026-32353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter module, the process sdp function declares a union nf inet addr named rtp addr on the stack. This variable is only initialized when a recognized media type with a non-zer...

CVE-2026-31427

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...

Linux Distros Unpatched Vulnerability : CVE-2026-31427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsi...

Linux Distros Unpatched Vulnerability : CVE-2026-33069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in...

USN-8122-1 pjproject vulnerabilities

Youngsung Kim discovered that PJSIP did not properly parse numeric header fields in SIP messages. A remote attacker could use this issue to cause PJSIP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2017-16872 Peter...

CVE-2026-33069

A flaw was found in PJSIP, a multimedia communication library. A remote attacker could exploit a vulnerability in the pjsipmultipartparse function when processing incoming Session Initiation Protocol SIP messages. This flaw, an out-of-bounds heap read, allows for the disclosure of a small amount ...