Read the docs
TI-2026-03014 Aliases CVE-2026-3497GHSA-wcpp-3x59-h8vp

Use of uninitialized resource in Ubuntu openssh

Priority LOW 24CWE-908Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · Low · Low
Fix status
Partial Red Hat: 43 fixed, 3 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02375 83rd percentileScored 2026-11-07
Fix Partial openssh (Ubuntu): 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15, 1:8.9p1-3ubuntu0.14Red Hat: 29 advisoriesRed Hat: 43 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Ubuntuopenssh1:10.0p1-5ubuntu5 to before 1:10.0p1-5ubuntu5.1; 1:9.6p1-3ubuntu13 to before 1:9.6p1-3ubuntu13.15; 1:8.9p1-3 to before 1:8.9p1-3ubuntu0.141:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15, 1:8.9p1-3ubuntu0.14Patch availableCNA
  • openssh VendorUbuntu Affected 1:10.0p1-5ubuntu5 to before 1:10.0p1-5ubuntu5.1; 1:9.6p1-3ubuntu13 to before 1:9.6p1-3ubuntu13.15; 1:8.9p1-3 to before 1:8.9p1-3ubuntu0.14 Fixed in 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15, 1:8.9p1-3ubuntu0.14 Patch available CNA

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:a:canonical:ubuntu_linux:25.10:*:*:*:*:*:*:*25.10VulnerableCanonical
cpe:2.3:a:openbsd:openssh:-:*:*:*:*:*:*:*not specified by NVDVulnerableOpenBSD
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*20.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*22.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*24.04VulnerableCanonical
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*10.0VulnerableRed Hat
  • cpe:2.3:a:canonical:ubuntu_linux:25.10:*:*:*:*:*:*:* Versions 25.10 Vulnerable ·Canonical
  • cpe:2.3:a:openbsd:openssh:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·OpenBSD
  • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:* Versions 22.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:* Versions 24.04 Vulnerable ·Canonical
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat

Remediation

  • Fix · CNA openssh (Ubuntu) Fixed in 1:10.0p1-5ubuntu5.1, 1:9.6p1-3ubuntu13.15, 1:8.9p1-3ubuntu0.14

Red Hat 29 advisories

  • RHSA-2026:25096 Released 2026-06-10 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (cuda)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:21695 Released 2026-06-04 · Red Hat rating Important
    OpenShift Container Platform 4.12.91 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202605271418-0
  • RHSA-2026:21690 Released 2026-06-04 · Red Hat rating Important
    OpenShift Container Platform 4.13.67 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202605271328-0
Show 26 more Red Hat advisories
  • RHSA-2026:20087 Released 2026-05-29 · Red Hat rating Important
    OpenShift Container Platform 4.16.63 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202605200242-0, rhcos-ppc64le-416.94.202605200242-0, rhcos-s390x-416.94.202605200242-0 +1
  • RHSA-2026:20040 Released 2026-05-27 · Red Hat rating Important
    OpenShift Container Platform 4.19.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202605201155-0, rhcos-ppc64le-4.19.9.6.202605201155-0, rhcos-s390x-4.19.9.6.202605201155-0 +1
  • RHSA-2026:19725 Released 2026-05-20 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:19724 Released 2026-05-20 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:17596 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202605112123-0, rhcos-ppc64le-417.94.202605112123-0, rhcos-s390x-417.94.202605112123-0 +1
  • RHSA-2026:14773 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.15.64 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202605060220-0, rhcos-ppc64le-415.92.202605060220-0, rhcos-s390x-415.92.202605060220-0 +1
  • RHSA-2026:15087 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.14.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202605060243-0, rhcos-ppc64le-414.92.202605060243-0, rhcos-s390x-414.92.202605060243-0 +1
  • RHSA-2026:16174 Released 2026-05-12 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (Spyre)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
  • RHSA-2026:16030 Released 2026-05-11 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:16009 Released 2026-05-11 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (ROCm)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:16008 Released 2026-05-11 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.3.3 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:12071 Released 2026-05-11 · Red Hat rating Important
    OpenShift Container Platform 4.18.39 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202604240015-0, rhcos-ppc64le-418.94.202604240015-0, rhcos-s390x-418.94.202604240015-0 +1
  • RHSA-2026:15893 Released 2026-05-11 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) openssh-askpass-8.0p1-15.el8_6.4
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) openssh-askpass-8.0p1-15.el8_6.4
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) openssh-askpass-8.0p1-15.el8_6.4
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) openssh-8.0p1-15.el8_6.4, openssh-cavs-8.0p1-15.el8_6.4, openssh-clients-8.0p1-15.el8_6.4 +4
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) openssh-8.0p1-15.el8_6.4, openssh-cavs-8.0p1-15.el8_6.4, openssh-clients-8.0p1-15.el8_6.4 +4
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) openssh-8.0p1-15.el8_6.4, openssh-cavs-8.0p1-15.el8_6.4, openssh-clients-8.0p1-15.el8_6.4 +4
  • RHSA-2026:15891 Released 2026-05-11 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) openssh-askpass-8.0p1-7.el8_4.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) openssh-askpass-8.0p1-7.el8_4.1
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) openssh-8.0p1-7.el8_4.1, openssh-cavs-8.0p1-7.el8_4.1, openssh-clients-8.0p1-7.el8_4.1 +4
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) openssh-8.0p1-7.el8_4.1, openssh-cavs-8.0p1-7.el8_4.1, openssh-clients-8.0p1-7.el8_4.1 +4
  • RHSA-2026:14924 Released 2026-05-07 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) openssh-askpass-8.0p1-20.el8_8.3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) openssh-askpass-8.0p1-20.el8_8.3
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) openssh-8.0p1-20.el8_8.3, openssh-cavs-8.0p1-20.el8_8.3, openssh-clients-8.0p1-20.el8_8.3 +4
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) openssh-8.0p1-20.el8_8.3, openssh-cavs-8.0p1-20.el8_8.3, openssh-clients-8.0p1-20.el8_8.3 +4
  • RHSA-2026:13812 Released 2026-05-05 · Red Hat rating Important
    updated RHEL-8 based Middleware Containers container images
    • Middleware Containers for OpenShift rhpam-7/rhpam-businesscentral-monitoring-rhel8, rhpam-7/rhpam-businesscentral-rhel8, rhpam-7/rhpam-controller-rhel8 +4
  • RHSA-2026:13750 Released 2026-05-05 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) openssh-askpass-8.7p1-13.el9_0.2, pam_ssh_agent_auth-0.10.4-4.13.el9_0.5
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) openssh-8.7p1-13.el9_0.2, openssh-clients-8.7p1-13.el9_0.2, openssh-keycat-8.7p1-13.el9_0.2 +1
  • RHSA-2026:10714 Released 2026-04-27 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) openssh-askpass-8.7p1-30.el9_2.10, pam_ssh_agent_auth-0.10.4-5.30.el9_2.10
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) openssh-8.7p1-30.el9_2.10, openssh-clients-8.7p1-30.el9_2.10, openssh-keycat-8.7p1-30.el9_2.10 +1
  • RHSA-2026:10065 Released 2026-04-23 · Red Hat rating Important
    Red Hat Update Infrastructure 5.1 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
  • RHSA-2026:9732 Released 2026-04-22 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) openssh-askpass-8.7p1-38.el9_4.7, pam_ssh_agent_auth-0.10.4-5.38.el9_4.7
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) openssh-8.7p1-38.el9_4.7, openssh-clients-8.7p1-38.el9_4.7, openssh-keycat-8.7p1-38.el9_4.7 +1
  • RHSA-2026:9415 Released 2026-04-21 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) openssh-askpass-8.7p1-45.el9_6.2, pam_ssh_agent_auth-0.10.4-5.45.el9_6.1
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) openssh-8.7p1-45.el9_6.2, openssh-clients-8.7p1-45.el9_6.2, openssh-keycat-8.7p1-45.el9_6.2 +1
  • RHSA-2026:7107 Released 2026-04-08 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) openssh-askpass-9.9p1-7.el10_0.2, openssh-keysign-9.9p1-7.el10_0.2
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) openssh-9.9p1-7.el10_0.2, openssh-clients-9.9p1-7.el10_0.2, openssh-keycat-9.9p1-7.el10_0.2 +1
  • RHSA-2026:6461 Released 2026-04-02 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream (v. 8) openssh-askpass-8.0p1-28.el8_10
    • Red Hat Enterprise Linux BaseOS (v. 8) openssh-8.0p1-28.el8_10, openssh-cavs-8.0p1-28.el8_10, openssh-clients-8.0p1-28.el8_10 +4
  • RHSA-2026:6462 Released 2026-04-02 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream (v. 9) openssh-askpass-8.7p1-48.el9_7, pam_ssh_agent_auth-0.10.4-5.48.el9_7
    • Red Hat Enterprise Linux BaseOS (v. 9) openssh-8.7p1-48.el9_7, openssh-clients-8.7p1-48.el9_7, openssh-keycat-8.7p1-48.el9_7 +1
  • RHSA-2026:6463 Released 2026-04-02 · Red Hat rating Important
    openssh security update
    • Red Hat Enterprise Linux AppStream (v. 10) openssh-askpass-9.9p1-13.el10_1, openssh-keysign-9.9p1-13.el10_1
    • Red Hat Enterprise Linux BaseOS (v. 10) openssh-9.9p1-13.el10_1, openssh-clients-9.9p1-13.el10_1, openssh-keycat-9.9p1-13.el10_1 +1
  • RHSA-2026:5475 Released 2026-03-23 · Red Hat rating Important
    Red Hat Hardened Images RPM Release
    • Red Hat Hardened Images openssh-10.2p1-9.hum1@aarch64, openssh-10.2p1-9.hum1@src, openssh-10.2p1-9.hum1@x86_64 +12

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Multicluster Engine for KubernetesAffected—
OpenShift PipelinesAffected—
Red Hat Advanced Cluster Management for Kubernetes 2Affected—
Middleware Containers for OpenShiftFixed RHSA-2026:13812
Red Hat AI Inference Server 3.2Fixed RHSA-2026:19724, RHSA-2026:19725, RHSA-2026:25096
Red Hat AI Inference Server 3.3Fixed RHSA-2026:16008, RHSA-2026:16009, RHSA-2026:16030, RHSA-2026:16174
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:6463
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:6461
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:6462
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:15891
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:15893
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2026:15893
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:14924
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:13750
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:10714
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:7107
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:9732
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:9415
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:15891
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2026:15893
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:14924
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:6463
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:6461
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:6462
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:15891
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:15893
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2026:15893
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:14924
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2026:13750
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:10714
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:7107
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2026:9732
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:9415
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:15891
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2026:15893
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:14924
Red Hat Hardened ImagesFixed RHSA-2026:5475
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:21695
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:21690
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:15087
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:14773
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:20087
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:17596
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:12071
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:20040
Red Hat Update Infrastructure 5Fixed RHSA-2026:10065
Not affected: 28 products
  • Middleware Containers for OpenShift
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux AppStream AUS (v.8.4)
  • Red Hat Enterprise Linux AppStream AUS (v.8.6)
  • Red Hat Enterprise Linux AppStream E4S (v.8.6)
  • Red Hat Enterprise Linux AppStream E4S (v.8.8)
  • Red Hat Enterprise Linux AppStream E4S (v.9.0)
  • Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)
  • Red Hat Enterprise Linux AppStream TUS (v.8.6)
  • Red Hat Enterprise Linux AppStream TUS (v.8.8)
  • Red Hat Enterprise Linux BaseOS AUS (v.8.4)
  • Red Hat Enterprise Linux BaseOS AUS (v.8.6)
  • Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.0)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)
  • Red Hat Enterprise Linux BaseOS TUS (v.8.6)
  • Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • Red Hat Update Infrastructure 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-3497
  2. 2026-10-03 Alias added: GHSA-wcpp-3x59-h8vp
  3. 2026-10-16 Affected versions changed · Red Hat

References

Advisory 10

  • TI-2021-02452 Incorrect authorization in Ubuntu linux kernel KEVCVSS 3.1HIGH 8.8
  • TI-2007-05153 Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD… CVSS 2.0HIGH 7.2
  • TI-2004-01032 Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and… CVSS 2.0HIGH 10.0
  • TI-2004-00896 Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other… CVSS 2.0HIGH 10.0
  • TI-2004-00800 Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may… CVSS 2.0HIGH 10.0
  • TI-2004-00962 Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to… CVSS 2.0HIGH 10.0
See all 129 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences