Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680617 advisory. A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggerin...

Unity Linux 20.1070e Security Update: iptraf-ng (UTSA-2025-634479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-634479 advisory. iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to...

PT-2025-41099

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc2-00320-g1f5abbd77e2c Description A stack overflow can occur due to the rcu irq enter check tick function being probed. Registering a kprobe on this function can lead to a kernel stack overflow when CONFI...

Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2025-2226 Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities October 7, 2025 CVE Number CVE-2025-54401,CVE-2025-54400,CVE-2025-54399,CVE-2025-54402 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd...

Unity Linux 20.1070a Security Update: libxml2 (UTSA-2025-986120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986120 advisory. A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2025-986171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986171 advisory. Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680663 advisory. A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414344 advisory. A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user t...

PT-2025-41000

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is related...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the rcuirqenterchecktick function being probed by kprobe, which could lead to a stack overflow...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: sleuthkit (UTSA-2025-986095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986095 advisory. In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414505 advisory. A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 has a stack buffer overflow vulnerability, which originates from the parameter newVersion i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987246 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hardlockup on vmap stack overflow Since the commit c118c7303ad5 powerpc/32: Fix...

Unity Linux 20.1070e Security Update: yasm (UTSA-2025-680595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680595 advisory. yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986595 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIGCPUMASKOFFSTACK=y kernel,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986695 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbfi2csmbusstarttransaction memcpy is called in a loop...

Unity Linux 20.1070e Security Update: redis (UTSA-2025-906166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-906166 advisory. Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2025-338719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-338719 advisory. Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in...

Unity Linux 20.1070e Security Update: transfig (UTSA-2025-984789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984789 advisory. In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via readobjects function. Tenable has extracte...