Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680617 advisory. A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggerin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: icu (UTSA-2025-984781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984781 advisory. A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag...

Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2025-2226 Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities October 7, 2025 CVE Number CVE-2025-54401,CVE-2025-54400,CVE-2025-54399,CVE-2025-54402 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the rcuirqenterchecktick function being probed by kprobe, which could lead to a stack overflow...

PT-2025-41000

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is related...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414505 advisory. A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2025-986171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986171 advisory. Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680663 advisory. A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: sleuthkit (UTSA-2025-986095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986095 advisory. In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414344 advisory. A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user t...

PT-2025-41140

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Data Replication VSAM for z/OS Remote Source version 11.4 Description The software contains a stack-based buffer overflow due to improper bounds checking. A local user with access to files storing CECSUB or CECRM on the containe...

Planet WGR-500 安全漏洞

The Planet WGR-500 is a WiFi router from Planet in Taiwan, China. A security vulnerability exists in the Planet WGR-500 v1.3411b190912 version, which stems from a stack buffer overflow in the submit-url and ipaddr request parameters, which could lead to the execution of arbitrary code...

Unity Linux 20.1070e Security Update: opensc (UTSA-2025-680621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680621 advisory. Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library. Tenable has...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 has a stack buffer overflow vulnerability, which originates from the parameter newVersion i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987246 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hardlockup on vmap stack overflow Since the commit c118c7303ad5 powerpc/32: Fix...

Unity Linux 20.1070e Security Update: redis (UTSA-2025-906166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-906166 advisory. Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2025-338719)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-338719 advisory. Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in...

Unity Linux 20.1070e Security Update: yasm (UTSA-2025-680595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680595 advisory. yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986595 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIGCPUMASKOFFSTACK=y kernel,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986904)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986904 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipcmonrcv allows a node ...