AZL-85328 CVE-2026-5404 affecting package wireshark 4.4.7-2

K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85325 CVE-2026-5405 affecting package wireshark 4.4.7-2

RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution...

AZL-85322 CVE-2026-5403 affecting package wireshark 4.4.7-2

SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution...

AZL-85332 CVE-2026-28532 affecting package frr for versions less than 10.5.0-3

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16t accumulator variable truncates uint32t values returned by the TLVSIZE macro, causing the loop termination condition to fail while pointer...

AZL-85986 CVE-2026-3832 affecting package gnutls for versions less than 3.8.3-11

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabl...

AZL-85983 CVE-2026-33845 affecting package gnutls for versions less than 3.8.3-11

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service...

AZL-86910 CVE-2026-7246 affecting package python-click for versions less than 8.1.7-3

This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit function,...

AZL-85115 CVE-2026-31692 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlinknscapable check for peer netns rtnlnewlink lacks a CAPNETADMIN capability check on the peer network namespace when creating paired devices veth, vxcan, netkit. This allows an unprivileged user with a...

AZL-85139 CVE-2026-6869 affecting package wireshark 4.4.7-2

WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85178 CVE-2026-6867 affecting package wireshark 4.4.7-2

SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85211 CVE-2026-6870 affecting package wireshark 4.4.7-2

GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85130 CVE-2026-6537 affecting package wireshark 4.4.7-2

ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85172 CVE-2026-6538 affecting package wireshark 4.4.7-2

BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85142 CVE-2026-6532 affecting package wireshark 4.4.7-2

Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85166 CVE-2026-6530 affecting package wireshark 4.4.7-2

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85455 CVE-2026-6533 affecting package wireshark 4.4.7-2

Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85151 CVE-2026-6534 affecting package wireshark 4.4.7-2

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85187 CVE-2026-6535 affecting package wireshark 4.4.7-2

Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85214 CVE-2026-6529 affecting package wireshark 4.4.7-2

iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85127 CVE-2026-6531 affecting package wireshark 4.4.7-2

SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85196 CVE-2026-6524 affecting package wireshark 4.4.7-2

MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85205 CVE-2026-6519 affecting package wireshark 4.4.7-2

MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85154 CVE-2026-6520 affecting package wireshark 4.4.7-2

OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85208 CVE-2026-6521 affecting package wireshark 4.4.7-2

OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85160 CVE-2026-6523 affecting package wireshark 4.4.7-2

GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85217 CVE-2026-6527 affecting package wireshark 4.4.7-2

ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85175 CVE-2026-6522 affecting package wireshark 4.4.7-2

RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85202 CVE-2026-5408 affecting package wireshark 4.4.7-2

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85193 CVE-2026-5407 affecting package wireshark 4.4.7-2

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85163 CVE-2026-5653 affecting package wireshark 4.4.7-2

DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85145 CVE-2026-5409 affecting package wireshark 4.4.7-2

Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85136 CVE-2026-5657 affecting package wireshark 4.4.7-2

iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85169 CVE-2026-5654 affecting package wireshark 4.4.7-2

AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85157 CVE-2026-5406 affecting package wireshark 4.4.7-2

FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85124 CVE-2026-5299 affecting package wireshark 4.4.7-2

ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85190 CVE-2026-5401 affecting package wireshark 4.4.7-2

AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85148 CVE-2026-7379 affecting package wireshark 4.4.7-2

Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85133 CVE-2026-7378 affecting package wireshark 4.4.7-2

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85181 CVE-2026-7376 affecting package wireshark 4.4.7-2

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85199 CVE-2026-6868 affecting package wireshark 4.4.7-2

HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85184 CVE-2026-7375 affecting package wireshark 4.4.7-2

UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

AZL-85457 CVE-2026-37555 affecting package libsndfile for versions less than 1.2.2-5

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path line 241 was fixed with sfcountt cast, but the WAV code path line 235 and close path line 167 were not. When samplesperblock int blocks int exceeds INTMAX, the 32-bit multiplication overflows before being assigned to...

AZL-85922 CVE-2026-7111 affecting package perl-Text-CSV_XS 1.60-1

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

AZL-85004 CVE-2026-6238 affecting package glibc 2.38-21

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

AZL-84599 CVE-2026-5435 affecting package glibc 2.38-21

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records...

AZL-85292 CVE-2026-41602 affecting package telegraf for versions less than 1.31.0-22

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

AZL-85026 CVE-2026-41605 affecting package thrift for versions less than 0.15.0-6

Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

AZL-85223 CVE-2026-41602 affecting package influxdb for versions less than 2.7.5-17

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

AZL-85220 CVE-2026-41602 affecting package kata-containers-preview 3.27.0~preview2-2

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

AZL-85226 CVE-2026-41602 affecting package kata-containers for versions less than 3.19.1.kata3-4

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...