3466 matches found
OESA-2026-3980 util-linux security update
The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: CVE-2026-53612 has no publicly disclosed vulnerability details yet. It is only indexed by the Snyk data source. Details are pending disclosure.CVE-2026-53612 When an...
OESA-2026-3979 util-linux security update
The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: When an /etc/fstab entry is configured with the user or users option, mount8 validates the target path before performing the mount syscall, creating a...
OESA-2026-3978 util-linux security update
The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: When an /etc/fstab entry is configured with the user or users option, mount8 validates the target path before performing the mount syscall, creating a...
CVE-2026-57228
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...
DEBIAN-CVE-2026-57228
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...
CVE-2026-57226
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...
CVE-2026-57228
Suricata versions 7.0.13 through 7.0.17 are vulnerable to a heap out-of-bounds read in the SMTP MIME quoted-printable decoder located in src/util-decode-mime.c. This flaw occurs when a quoted-printable escape sequence is split across traffic chunks and the subsequent chunk contains exactly one by...
CVE-2026-57228 Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...
CVE-2026-57228 Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...
EUVD-2026-83383
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...
CVE-2026-57226
Suricata (versions prior to 7.0.17 and 8.0.6 ) is vulnerable to an integer-related heap buffer overflow during HTTP SWF decompression. The flaw exists in src/util-file-decompression.c, where the software may use a configured decompress-depth for memory allocation instead of limiting the allocatio...
CVE-2026-57226 Suricata swf: heap buffer overflow in SWF decompression depth handling
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...
EUVD-2026-83381
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...
CVE-2026-57226 Suricata swf: heap buffer overflow in SWF decompression depth handling
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...
CVE-2026-76642 affecting package util-linux for versions less than 2.40.2-6
CVE-2026-76642 affecting package util-linux for versions less than 2.40.2-6. A patched version of the package is available...
CVE-2026-78408 affecting package util-linux for versions less than 2.40.2-6
CVE-2026-78408 affecting package util-linux for versions less than 2.40.2-6. A patched version of the package is available...
CVE-2026-78410 affecting package util-linux for versions less than 2.40.2-6
CVE-2026-78410 affecting package util-linux for versions less than 2.40.2-6. A patched version of the package is available...
CVE-2026-57226: Heap-based Buffer Overflow
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and an unsafe decompress-depth can use the configured depth when allocating in...
EulerOS Virtualization 2.12.1 : util-linux (EulerOS-SA-2026-3624)
According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and...
CVE-2026-57228: Out-of-bounds Read
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...