ROS-20260922-73-0078

The vulnerability in Tomcat is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0041

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

ROS-20260922-73-0080

The vulnerability in Tomcat11 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0079

The vulnerability in Tomcat10 is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __sndctl_ascii_elem_id_parse() function in the library for interacting with kernel audio drivers from the Alsa-lib library allows a attacker to cause a service failure.

The vulnerability of the sndctlasciielemidparse function in the library for interacting with kernel audio drivers from the Alsa-lib library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Validated AG parameters in dbMount to prevent crashes. Validated dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. The limits are derived from...

The vulnerability of the tls_push_record() function in the net/tls/tls_sw.c module of the Linux operating system’s TLS protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the `lowpan_iphc_mcast_ctx_addr_compress()` function in the `net/6lowpan/iphc.c` module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the lowpaniphcmcastctxaddrcompress function in the net/6lowpan/iphc.c module of the Linux kernel’s networking functions is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the PCX format form file loading module in the Gimp image processing library allows a hacker to trigger a service failure.

The vulnerability of the PCX format file loading module in the Gimp image processing library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the blk_alloc_ext_minor() function in the block/genhd.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the blkallocextminor function in the block/genhd.c module, which supports the block-level kernel in the Linux operating system, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0063

The vulnerability of the rdsrecvtracklatency function in the Linux operating system’s kernel is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the Linux operating system’s kernel, related to a single-bit offset error, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of extended state codes in the Postfix mail server allows a hacker to trigger a service failure.

The vulnerability of extended state codes in the Postfix mail server is related to a single shift error. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the gnutls_pkcs12_bag_set_data() function in the GnuTLS cryptographic library allows a attacker to damage memory or cause service failures.

The vulnerability of the gnutlspkcs12bagsetdata function in the GnuTLS cryptographic library is related to a single-precision shift error. Exploiting this vulnerability could allow an attacker to corrupt memory or cause service failures...

The vulnerability of the console-based graphic editor ImageMagick, related to a shift error of one unit, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to a offset error of one unit. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260625-73-0007

The vulnerability in gnutls is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260624-73-0008

The vulnerability in freerdp3 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Docker’s plugin-based system for creating containerized systems like Moby (Docker Engine) allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of Docker’s plugin-based container creation system, Moby Docker Engine, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

CVE-2026-46101

In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nftbitwise Reject zero shift operands for nftbitwise left and right shift expressions during initialization. The carry propagation logic computes the carry from the adjacent 32-bit word using...

CVE-2026-34549

iccDEV contains an Undefined Behavior in IccUtil.cpp caused by invalid left shift on icUInt32Number when processing a crafted ICC profile. Affects versions prior to 2.3.1.6; the issue is fixed in 2.3.1.6. Public references indicate the UB is reported under UndefinedBehaviorSanitizer. There is no ...