Threats Tagged 'ubuntu-14-04-lts'

CVE-2026-33818 affects the External Secrets Operator for Red Hat OpenShift, which integrates external secret management systems into Kubernetes. The vulnerability involves the Go net/http library used by the operator, specifically in handling unencrypted HTTP/2 connections where the ReadHeaderTimeout is not properly enforced during client preface reading. This flaw can allow a remote attacker to maintain open connections indefinitely, potentially leading to denial of service (DoS) by exhausting server resources. Red Hat has released patches addressing this issue in updated versions of the affected components.

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.

CVE-2026-86219 is a critical authentication bypass vulnerability in Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100. The flaw allows an attacker to replay a captured authentication response due to the server not verifying the nonce returned by the client against the originally issued nonce. This enables authentication as a legitimate user without knowing their password.

Unidata netcdf-c versions up to 4.10.1 contain an out-of-bounds write vulnerability in the function NC4_HDF5_inq_attname(). This flaw occurs because HDF5 attribute names are copied into a fixed 256-byte buffer without validating their length. Crafted HDF5 files with oversized attribute names can trigger buffer overflow, leading to memory corruption and application crashes during attribute enumeration.

This update includes the following RPMs: libevent: * libevent-2.1.13-0.1.hum1 (aarch64, x86_64) * libevent-devel-2.1.13-0.1.hum1 (aarch64, x86_64) * libevent-doc-2.1.13-0.1.hum1 (noarch) * libevent-2.1.13-0.1.hum1.src (src) Security Fix(es): libevent: * CVE-2026-63382 * CVE-2026-63385

CVE-2026-76642 is a vulnerability affecting multiple specific versions of the util-linux package on various Ubuntu LTS releases. The vulnerability has a CVSS 3.1 base score of 7.8, indicating a medium severity level with high impact on confidentiality, integrity, and availability. No detailed description of the vulnerability or technical details are provided, and there are no known exploits in the wild. No patch or remediation information is available in the provided data.

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. sig_data signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or authority section survives that step and is signed again, so encoding re-enters sig_data with no termination condition. Decoding does not reject such a message: a TSIG that is not the last record on the wire raises "misplaced or corrupt TSIG", but the error is caught, reported as a warning, and the record is left in the packet. RFC 8945 section 5.2 requires the message to be dropped. The recursion is reached only when the decoded TSIG carries an empty MAC, since a MAC recovered from the wire short-circuits the signing step. It is reached only from code that re-encodes a message it decoded, such as a forwarder or a proxy. A decoded message that is never re-encoded is unaffected. Message direction does not matter: a query reaches the same path as a response. Each cycle re-encodes the whole message, so fewer than 100 bytes on the wire exhaust available memory and terminate the process.

This update includes the following RPMs: libevent: * libevent-2.1.12-19.1.hum1 (aarch64, x86_64) * libevent-devel-2.1.12-19.1.hum1 (aarch64, x86_64) * libevent-doc-2.1.12-19.1.hum1 (noarch) * libevent-2.1.12-19.1.hum1.src (src) Security Fix(es): libevent: * CVE-2026-63379 * CVE-2026-63381 * CVE-2026-63383 * CVE-2026-63384 * CVE-2026-63388

A heap buffer overflow vulnerability exists in the RainerScript replace() function of rsyslog. An unauthenticated remote attacker can trigger this by sending specially crafted syslog messages. The flaw is due to incorrect buffer size calculation during string replacement, leading to memory corruption. Exploitation can cause a denial of service (DoS) on the affected system. The vulnerability affects multiple specific Ubuntu package versions of rsyslog. The CVSS score is 7.5, indicating a medium severity level.

CVE-2026-50538 is a heap-based buffer overflow vulnerability in LibVNCClient versions 0.9.12 through 0.9.15. A malicious or man-in-the-middle VNC server can exploit this flaw by sending a crafted FramebufferUpdate message that causes libvncclient to write attacker-controlled data beyond the framebuffer boundary. This vulnerability requires no authentication and triggers immediately upon connection, causing unconditional client crashes (denial of service) and potentially allowing remote code execution by overwriting application callback pointers. The issue is patched in a commit identified as 540332be3e0acc566fa64da6f1b4680c72c724dd.