Lucene search
+L

7876 matches found

Cvelist
Cvelist
•added 2026/10/16 11:06 p.m.•43 views

CVE-2026-89096 Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

5.9CVSS0.0031EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/10/16 11:06 p.m.•15 views

CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

5.9CVSS5.8AI score0.0031EPSS
SaveExploits0
CVE
CVE
•added 2026/10/16 11:06 p.m.•30 views

CVE-2026-89096

A flaw exists in nfs-utils where an unauthenticated remote attacker can trigger a Denial of Service (DoS) . By sending repeated state notification requests to an exposed rpc.statd service, an attacker can exploit a memory leak caused by the service's failure to properly release memory allocated d...

5.9CVSS5.8AI score0.0031EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/10/16 11:06 p.m.•15 views

CVE-2026-89096

A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory...

5.9CVSS5.8AI score0.0031EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/16 6:19 p.m.•6 views

DEBIAN-CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/10/16 6:19 p.m.•11 views

AZL-109794 CVE-2026-89098 affecting package nfs-utils 2.6.4-4

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/16 6:19 p.m.•15 views

CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

5.5CVSS0.00147EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/16 5:43 p.m.•4 views

CVE-2026-89098 Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/16 5:43 p.m.•10 views

EUVD-2026-103016

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/16 5:43 p.m.•10 views

CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

6.8CVSS5.8AI score0.00147EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/16 5:43 p.m.•28 views

CVE-2026-89098 Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

5.5CVSS0.00147EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/16 5:43 p.m.•65 views

CVE-2026-89098

A flaw exists in the nfs-utils package where the fsidd daemon improperly handles input received over its local domain socket. The daemon relies on program assertions to verify command arguments; consequently, a local user can trigger an assertion failure by sending a malformed request lacking req...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/10/16 5:43 p.m.•13 views

CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/10/16 5:43 p.m.•13 views

CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...

5.5CVSS5.8AI score0.00147EPSS
SaveExploits0References3
Debian
Debian
•added 2026/10/16 8:44 a.m.•17 views

[SECURITY] [DSA 6567-1] cifs-utils security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6567-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 16, 2026 https://www.debian.org/security/faq -...

7.8CVSS7.2AI score0.00265EPSS
SaveExploits1
osv_debian
osv_debian
•added 2026/10/16 7:17 a.m.•18 views

DEBIAN-CVE-2026-104715

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

7.8CVSS7.1AI score0.00265EPSS
SaveExploits1References1
NVD
NVD
•added 2026/10/16 7:17 a.m.•11 views

CVE-2026-104715

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

7.8CVSS0.00265EPSS
SaveExploits1References3
CVE
CVE
•added 2026/10/16 6:47 a.m.•51 views

CVE-2026-104715

A flaw in cifs-utils (versions 7.0 through 7.6) allows an unprivileged local user to achieve privilege escalation to root. The vulnerability exists because the open_cred_file() function in mount.cifs.c fails to sanitize the username= value in a credentials file, allowing an attacker to inject una...

7.8CVSS7.1AI score0.00265EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/10/16 6:47 a.m.•45 views

CVE-2026-104715 Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

7.8CVSS0.00265EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/10/16 6:47 a.m.•12 views

EUVD-2026-102803

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file, input values are not properly sanitized before being assembled into moun...

7.8CVSS7.2AI score0.00265EPSS
SaveExploits1References2
Rows per page
Query Builder