101531 matches found
MINI-3GX9-3686-632F
Bulletin has no description...
MINI-J3XW-VP95-M45P
Bulletin has no description...
CLSA-2026-1787141541 Fix CVE(s): CVE-2026-32327, CVE-2026-34501, CVE-2026-34502
SECURITY UPDATE: heap buffer overflow in the memcached client - debian/patches/CVE-2026-34502.patch: validate CRLF line termination and response lengths in memcache/aprmemcache.c - CVE-2026-34502 SECURITY UPDATE: heap buffer overflow in the redis client - debian/patches/CVE-2026-34501.patch: boun...
BIT-GOLANG-2026-56859 Add recursion depth guard during decode in encoding/xml
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
BIT-GOLANG-2026-33818 Enforce maximum recursion depth in encoding/asn1
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-74382
A flaw was found in the Linux kernel's clsbpf component, which handles traffic control filtering. A local attacker could exploit this vulnerability by triggering a specific sequence of failures during an offload rollback operation. This leads to an unbounded recursion, causing a stack overflow an...
SUSE-SU-2026:23301-1 Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.6 released 2026-08-13, bsc1255111. Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive structures bsc1275034. - CVE-2026-39821:...
OPENSUSE-SU-2026:21593-1 Security update for go1.26
This update for go1.26 fixes the following issues: Update to go1.26.6 released 2026-08-13, bsc1255111. Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive structures bsc1275034. - CVE-2026-39821:...
SUSE-SU-2026:23300-1 Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.13 released 2026-08-13, bsc1244485. Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead to stack exhaustion when parsing deeply-nested, recursive structures bsc1275034. - CVE-2026-39821:...
BIT-POSTGRESQL-2026-14679 PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected...
BIT-ELASTICSEARCH-2026-72686 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation...
BIT-ELASTICSEARCH-2026-72636 Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service
Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130. The matcher used to resolve wildcard patterns against names is implemented recursively and had no bound on recursion depth or on the total number of mat...
CVE-2026-58082
The ISO-2022 encoding module used a stack buffer sized to MBLENMAX 6 bytes for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv3 to...
CVE-2026-49425
The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information...
CVE-2026-49424
The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux siginfot. It did not first zero the stack struct. An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information...
CVE-2026-58084 Kernel stack disclosure via timer_settime(2)
To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...
CVE-2026-58084
The FreeBSD kernel is vulnerable to a kernel stack disclosure via the timer_settime(2) system call. The flaw exists because the kernel calls realtimer_gettime() to retrieve previous timer values; however, for timers using CLOCK_TAI , the function may fail if no TAI offset is configured. Because t...
CVE-2026-58084 Kernel stack disclosure via timer_settime(2)
To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...
CVE-2026-58082 Stack based buffer overflow in iconv(3)
The ISO-2022 encoding module used a stack buffer sized to MBLENMAX 6 bytes for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv3 to...
CVE-2026-58082 Stack based buffer overflow in iconv(3)
The ISO-2022 encoding module used a stack buffer sized to MBLENMAX 6 bytes for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv3 to...