Search: 18.8.3.2

A vulnerability in NSD allows attackers to overwrite the stack with up to 64K of attacker-controlled data when base64 data is split into pieces of 3 characters or less, causing incorrect token calculation. This issue affects zone files fed directly to NSD, such as those from operator-controlled provisioning systems, but not zone files written out by NSD itself for secondary zones.

A heap out-of-bounds write vulnerability exists in the GStreamer multimedia framework's ASF muxer plugin (asfmux) when processing string metadata tags containing Unicode characters outside the Basic Multilingual Plane. The plugin miscalculates the buffer size needed for UTF-16LE encoding, leading to memory corruption. Exploitation requires processing crafted media with such metadata through an ASF muxing pipeline, potentially causing denial of service or limited memory corruption. The flaw affects specific versions of gst-plugins-bad1.0 and has a medium severity rating with a CVSS score of 6.1. Mitigations include disabling the asfmux plugin or sanitizing metadata to remove non-BMP characters until a patch is released.

The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to developers working within your Kubernetes cluster.

A vulnerability in libcurl's FTP wildcard LIST operation causes improper handling when the operation fails. This leads to a corrupted internal state where the write callback and its data point incorrectly, causing crashes or heap use-after-free reads upon reuse or cloning of the affected handle. Additionally, reusing handles with certain options can cause type confusion, potentially leading to memory corruption.

A vulnerability in Docker Distribution prior to version 3.1.2 allows an attacker to substitute malicious manifest content despite the Docker-Content-Digest verification. This occurs because the manifest body is not hashed against the requested digest, enabling a malicious or intercepted registry response to deliver attacker-chosen content. The issue also affects the bundled pull-through proxy, which can cache and re-serve the substituted manifest. The flaw is fixed in version 3.1.2.

Adobe FrameMaker 2026 contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution when a user opens a specially crafted malicious file. This vulnerability requires user interaction and affects versions up to 18.0.0.206 and 17.0.9.866. The issue has a high severity rating with a CVSS score of 7.8.

Adobe FrameMaker 2026 contains an out-of-bounds read vulnerability (CWE-125) that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 base score is 5.5, indicating a medium severity. There is no information about an available patch or vendor advisory confirming remediation status.

Adobe FrameMaker 2026 contains a NULL Pointer Dereference vulnerability that can cause the application to crash, resulting in a denial-of-service condition. Exploitation requires a user to open a specially crafted malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS score is 5.5, indicating medium severity.

Adobe FrameMaker 2026 contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects multiple versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe FrameMaker 2026 contains a Use After Free vulnerability (CWE-416) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 base score is 7.8, indicating high severity.

Adobe FrameMaker 2026 contains a heap-based buffer overflow vulnerability that can lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation requires user interaction by opening a malicious file. The vulnerability affects multiple versions up to 18.0.0.206 and 17.0.9.866. No patch information is provided.

Adobe FrameMaker 2026 contains an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS 3.1 score is 7.8, indicating high severity.

Adobe FrameMaker 2026 contains an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 18.0.0.206 and 17.0.9.866. The CVSS score is 5.5, indicating a medium severity level.

A vulnerability in BusyBox's mount utility allows a non-root user to bypass mount security restrictions set in /etc/fstab by using clearing-mask options on the command line. These options can override protections such as nosuid, nodev, and noexec that administrators intended to enforce. Exploitation requires BusyBox mount installed setuid root and user-mountable fstab entries. The flaw impacts integrity but not confidentiality or availability.

A vulnerability in BusyBox's httpd web server allows username enumeration when system password authentication is configured in certain non-default build configurations. The flaw enables an attacker to distinguish existing usernames from non-existing ones by observing authentication failure behavior. Default BusyBox builds with shadow password support are not affected, limiting the impact to uncommon configurations.

A vulnerability in BusyBox's udhcpc DHCP client allows an attacker on the same network segment to send specially crafted DHCP packets that cause an integer underflow during packet length processing. This leads to a memory copy operation with an oversized length, crashing the DHCP client and causing denial of service and loss of network connectivity.

A vulnerability in Xen hypervisor causes a fatal VMEntry failure to guest virtual machines when certain processor states coincide, specifically when debug exceptions (#DB) are intercepted, single stepping is active, and STI/MovSS blocking is enabled. An additional sub-case involving branch tracing also triggers this failure. This issue results in guest crashes but does not impact confidentiality or integrity.