Threats affecting pkg:rpm/hitachi/dynamic-link-manager

A symbolic link (symlink) following vulnerability exists in Hitachi Dynamic Link Manager for Linux versions from 8.5.3.-00 up to but not including 9.0.5-00. This vulnerability can lead to high impact on integrity and availability with low privileges and user interaction required.

A heap-based buffer overflow vulnerability exists in Hitachi Dynamic Link Manager for Linux versions from 7.5.0-00 up to but not including 9.0.5-00. This vulnerability could allow an attacker with local access and low privileges to cause a high-impact compromise, including full confidentiality, integrity, and availability loss. The vulnerability is identified as CVE-2026-91760 and has a CVSS v3.1 base score of 7.0, indicating high severity.

An out-of-bounds write vulnerability exists in Hitachi Dynamic Link Manager for Linux versions from 7.5.0-00 up to but not including 9.0.5-00. This flaw could allow an attacker with local privileges to write outside the intended memory bounds, potentially leading to complete system compromise.

CVE-2026-91758 is an out-of-bounds read and write vulnerability in Hitachi Dynamic Link Manager for Linux affecting versions from 7.5.0-00 up to but not including 9.0.5-00. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability. No patch information is provided in the source data.

CVE-2026-91763 is a UNIX Symbolic Link (Symlink) Following vulnerability in Hitachi Dynamic Link Manager for Linux versions from 8.6.2.-00 up to but not including 9.0.5-00. This flaw allows an attacker with local privileges to potentially exploit symlink following to achieve high impact on confidentiality, integrity, and availability. The vulnerability is fixed in version 9.0.5-00.