kernel: netfilter: nf_conntrack_sip: don't use simple_strtoul

A flaw was found in the Linux kernel's netfilter SIP Session Initiation Protocol connection tracking module. This vulnerability, caused by unsafe port parsing, allows a remote attacker to send specially crafted malformed packets. Such packets could lead to excessive resource consumption,...

The vulnerability of the strtol() function in the su-exec utility allows a attacker to elevate their privileges to root and execute arbitrary code.

The vulnerability of the strtol function in the su-exec utility is related to incorrect conversion of numerical types. Exploiting this vulnerability can allow an attacker to elevate their privileges to root and execute arbitrary code...

CVE-2026-82457

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...

CVE-2026-82457

su-exec through version 0.3 contains a type-truncation vulnerability in its handling of numeric user and group identifiers. Values parsed via strtol are not validated before being assigned to uid_t and gid_t , so out-of-range identifiers truncate to zero—root 's ID. A local attacker with low priv...

CVE-2026-82457 su-exec through 0.3 Privilege Escalation via Numeric User ID

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...

CVE-2026-82457 su-exec through 0.3 Privilege Escalation via Numeric User ID

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...

EUVD-2026-68104

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...

CVE-2026-82457 su-exec through 0.3 Privilege Escalation via Numeric User ID

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...

PT-2026-83436

Name of the Vulnerable Software and Affected Versions su-exec versions prior to 0.4 Description The software fails to validate numeric user and group identifiers parsed with the strtol function before assigning them to uid t and gid t types. This allows out-of-range values to be truncated to zero...

CVE-2026-82457: Incorrect Conversion between Numeric Types

su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uidt and gidt, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target...

MGASA-2026-0292 Updated lrzip package fixes security vulnerabilities

The updated package fixes security vulnerabilities: ckolivas lrzip stream.c lzmadecompressbuf use after free. CVE-2025-15570 ckolivas lrzip strtoll.c GIstrtollinternal null pointer dereference. CVE-2025-9396...

CVE-2026-3945: Integer Overflow or Wraparound

An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service DoS. The issue occurs because chunk size values are parsed using strtol without properly validating...

EUVD-2019-13446

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2025-9396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation...

CVE-2025-9396

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

SUSE CVE-2025-9396

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

DEBIAN-CVE-2025-9396

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

CVE-2025-9396 ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

CVE-2025-9396 ckolivas lrzip strtol_l.c __GI_____strtol_l_internal null pointer dereference

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...

CVE-2025-9396

A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function GIstrtollinternal of the file strtoll.c. Performing manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been released to the public and may be...