{"grype_matches":[{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119586","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119586","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119586","cwe":"CWE-77","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119586","date":"2026-11-12","epss":0.01545,"percentile":0.75347}],"risk":0.7725,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119586"},"relatedVulnerabilities":[{"id":"CVE-2026-119586","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119586","cwe":"CWE-77","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119586","date":"2026-11-12","epss":0.01545,"percentile":0.75347}],"urls":["https://abraxaslabs.tech/research/sqlite-cli-recover","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.54.1/ext/recover/sqlite3recover.c#L1221-L1223","https://github.com/sqlite/sqlite/blob/version-3.54.1/src/shell.c.in#L7877-L7891","https://www.vulncheck.com/advisories/sqlite-cli-through-3.54.1-command-injection-via-recover-output"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119586","description":"SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits attacker-planted dot-commands stored in sqlite_schema.sql values verbatim. Attackers can craft a database whose schema holds a valid CREATE statement followed by a .shell or .system line, executing OS commands when victims pipe .recover output into sqlite3."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.4575,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112314"},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.44999999999999996,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112321"},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.3895,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112322"},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.371,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112319"},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.3655,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112320"},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.348,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112316"},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.3305,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112315"},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.319,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112323"},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.319,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119079"},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.2885,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112317"},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.28500000000000003,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112318"},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.2605,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107708"},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"c3618aadaed719c2","cpes":["cpe:2.3:a:rustc-1.93:rustc-1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc-1.93:rustc_1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc_1.93:rustc-1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc_1.93:rustc_1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc:rustc-1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc:rustc_1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*"],"name":"rustc-1.93","purl":"pkg:deb/ubuntu/rustc-1.93@1.93.1%2Bdfsg-0ubuntu6?distro=ubuntu","type":"deb","version":"1.93.1+dfsg-0ubuntu6","language":"","licenses":[],"locations":[{"path":"/usr/lib/rust-1.93/bin/cargo","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/rust-1.93/bin/cargo","annotations":{"evidence":"primary"}},{"path":"/usr/lib/rust-1.93/bin/rustc","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/rust-1.93/bin/rustc","annotations":{"evidence":"primary"}},{"path":"/usr/lib/rust-1.93/lib/librustc_driver-eeba4a0f4def722a.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/rust-1.93/lib/librustc_driver-eeba4a0f4def722a.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/rust-1.93/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-22348dba76d46f6d.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/rust-1.93/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-22348dba76d46f6d.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-5222","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"rustc-1.93","version":"1.93.1+dfsg-0ubuntu6"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-5222","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-5222","cwe":"CWE-647","type":"Secondary","source":"986d4109-89ea-491f-99fd-a8e4803919bd"}],"epss":[{"cve":"CVE-2026-5222","date":"2026-11-12","epss":0.00478,"percentile":0.41745}],"risk":0.23900000000000002,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5222"},"relatedVulnerabilities":[{"id":"CVE-2026-5222","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"986d4109-89ea-491f-99fd-a8e4803919bd","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5222","cwe":"CWE-647","type":"Secondary","source":"986d4109-89ea-491f-99fd-a8e4803919bd"}],"epss":[{"cve":"CVE-2026-5222","date":"2026-11-12","epss":0.00478,"percentile":0.41745}],"urls":["https://blog.rust-lang.org/2026/05/25/cve-2026-5222/","https://github.com/rust-lang/cargo/pull/17031","https://groups.google.com/g/rustlang-security-announcements/c/SfUxOiIdY5s"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5222","description":"Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to publish crates in a registry could obtain the credentials of others users of the same registry. The severity of the vulnerability is **low**, due to the extremely niche requirements needed to achieve the attack."}]},{"artifact":{"id":"5ed04bd0e5f250e8","cpes":["cpe:2.3:a:krb5:krb5:1.22.1-2ubuntu4.1:*:*:*:*:*:*:*"],"name":"krb5","purl":"pkg:deb/ubuntu/krb5@1.22.1-2ubuntu4.1?distro=ubuntu","type":"deb","version":"1.22.1-2ubuntu4.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"krb5","version":"1.22.1-2ubuntu4.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.212,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107778"},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"f7834d12e322377b","cpes":["cpe:2.3:a:cyrus-sasl2:cyrus-sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus-sasl2:cyrus_sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl2:cyrus-sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus_sasl2:cyrus_sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus-sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*","cpe:2.3:a:cyrus:cyrus_sasl2:2.1.28\\+dfsg1-9ubuntu3:*:*:*:*:*:*:*"],"name":"cyrus-sasl2","purl":"pkg:deb/ubuntu/cyrus-sasl2@2.1.28%2Bdfsg1-9ubuntu3?distro=ubuntu","type":"deb","version":"2.1.28+dfsg1-9ubuntu3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107161","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"cyrus-sasl2","version":"2.1.28+dfsg1-9ubuntu3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107161","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-11-12","epss":0.00376,"percentile":0.32022}],"risk":0.188,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107161"},"relatedVulnerabilities":[{"id":"CVE-2026-107161","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107161","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-107161","date":"2026-11-12","epss":0.00376,"percentile":0.32022}],"urls":["https://access.redhat.com/security/cve/CVE-2026-107161","https://bugzilla.redhat.com/show_bug.cgi?id=2460420","http://www.openwall.com/lists/oss-security/2026/10/09/20","https://lists.debian.org/debian-lts-announce/2026/10/msg00064.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107161","description":"A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1150","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-1150","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1150","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1150","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1150","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1150","date":"2026-11-12","epss":0.00607,"percentile":0.49539}],"risk":0.18209999999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1150"},"relatedVulnerabilities":[{"id":"CVE-2025-1150","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1150","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1150","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1150","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1150","date":"2026-11-12","epss":0.00607,"percentile":0.49539}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295054","https://vuldb.com/?id.295054","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1150","description":"A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-1151","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-1151","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-1151","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1151","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1151","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1151","date":"2026-11-12","epss":0.00607,"percentile":0.49539}],"risk":0.18209999999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-1151"},"relatedVulnerabilities":[{"id":"CVE-2025-1151","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","metrics":{"baseScore":2.6,"impactScore":2.9,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-1151","cwe":"CWE-401","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1151","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2025-1151","cwe":"CWE-401","type":"Secondary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2025-1151","date":"2026-11-12","epss":0.00607,"percentile":0.49539}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=15887","https://sourceware.org/bugzilla/show_bug.cgi?id=32576","https://vuldb.com/?ctiid.295055","https://vuldb.com/?id.295055","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-1151","description":"A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\""}]},{"artifact":{"id":"c3618aadaed719c2","cpes":["cpe:2.3:a:rustc-1.93:rustc-1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc-1.93:rustc_1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc_1.93:rustc-1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc_1.93:rustc_1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc:rustc-1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*","cpe:2.3:a:rustc:rustc_1.93:1.93.1\\+dfsg-0ubuntu6:*:*:*:*:*:*:*"],"name":"rustc-1.93","purl":"pkg:deb/ubuntu/rustc-1.93@1.93.1%2Bdfsg-0ubuntu6?distro=ubuntu","type":"deb","version":"1.93.1+dfsg-0ubuntu6","language":"","licenses":[],"locations":[{"path":"/usr/lib/rust-1.93/bin/cargo","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/rust-1.93/bin/cargo","annotations":{"evidence":"primary"}},{"path":"/usr/lib/rust-1.93/bin/rustc","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/rust-1.93/bin/rustc","annotations":{"evidence":"primary"}},{"path":"/usr/lib/rust-1.93/lib/librustc_driver-eeba4a0f4def722a.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/rust-1.93/lib/librustc_driver-eeba4a0f4def722a.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/rust-1.93/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-22348dba76d46f6d.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/rust-1.93/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-22348dba76d46f6d.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-5223","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"rustc-1.93","version":"1.93.1+dfsg-0ubuntu6"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-5223","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-5223","cwe":"CWE-61","type":"Secondary","source":"986d4109-89ea-491f-99fd-a8e4803919bd"}],"epss":[{"cve":"CVE-2026-5223","date":"2026-11-12","epss":0.00294,"percentile":0.22347}],"risk":0.147,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-5223"},"relatedVulnerabilities":[{"id":"CVE-2026-5223","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"986d4109-89ea-491f-99fd-a8e4803919bd","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5223","cwe":"CWE-61","type":"Secondary","source":"986d4109-89ea-491f-99fd-a8e4803919bd"}],"epss":[{"cve":"CVE-2026-5223","date":"2026-11-12","epss":0.00294,"percentile":0.22347}],"urls":["https://blog.rust-lang.org/2026/05/25/cve-2026-5223/","https://github.com/rust-lang/cargo/pull/17031","https://groups.google.com/g/rustlang-security-announcements/c/IB74S7Yksg8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5223","description":"Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. The severity of the vulnerability is **medium** for users of third-party registries. Users of crates.io are **not affected**, as crates.io forbids uploading crates containing any symlink."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-3442","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-3442","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-3442","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3442","date":"2026-11-12","epss":0.00291,"percentile":0.219}],"risk":0.1455,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-3442"},"relatedVulnerabilities":[{"id":"CVE-2026-3442","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3442","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3442","date":"2026-11-12","epss":0.00291,"percentile":0.219}],"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3442","https://bugzilla.redhat.com/show_bug.cgi?id=2443828"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3442","description":"A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119379","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119379","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-12","epss":0.00278,"percentile":0.20526}],"risk":0.13899999999999998,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119379"},"relatedVulnerabilities":[{"id":"CVE-2026-119379","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-12","epss":0.00278,"percentile":0.20526}],"urls":["https://abraxaslabs.tech/research/sqlite-session-ncol","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619","https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52","https://sqlite.org/bugs/info/2026-08-16T10:15:25Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/3f57024aecea0f3b","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119379","description":"SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119378","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119378","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119378","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119378","date":"2026-11-12","epss":0.00251,"percentile":0.16587}],"risk":0.1255,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119378"},"relatedVulnerabilities":[{"id":"CVE-2026-119378","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119378","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119378","date":"2026-11-12","epss":0.00251,"percentile":0.16587}],"urls":["https://abraxaslabs.tech/research/sqlite-rtree-rowid0","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/rtree/rtree.c#L905","https://github.com/sqlite/sqlite/commit/d21bd37c7cfc1b85b17a6703555f0926b6236e04","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/6a9e1415659f9e75","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-r-tree-nodewrite"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119378","description":"SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits."}]},{"artifact":{"id":"20b48d93b2092018","cpes":["cpe:2.3:a:gnutls28:gnutls28:3.8.12-2ubuntu1.1:*:*:*:*:*:*:*"],"name":"gnutls28","purl":"pkg:deb/ubuntu/gnutls28@3.8.12-2ubuntu1.1?distro=ubuntu","type":"deb","version":"3.8.12-2ubuntu1.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-88647","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnutls28","version":"3.8.12-2ubuntu1.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-88647","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-88647","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-88647","date":"2026-11-12","epss":0.0024,"percentile":0.15206}],"risk":0.12,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-88647"},"relatedVulnerabilities":[{"id":"CVE-2026-88647","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-88647","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-88647","date":"2026-11-12","epss":0.0024,"percentile":0.15206}],"urls":["https://gist.github.com/lkloliver/f98ec3de1a871fdfc02b70b8b9ba7642","https://gitlab.com/gnutls/gnutls/-/blob/e2169a87c7fb91935c2845088204b102baed4c5f/SECURITY.md","https://gitlab.com/gnutls/gnutls/-/issues/1802","https://gitlab.com/gnutls/gnutls/-/work_items/1965","https://github.com/lkloliver/poc/tree/main/CVE-2026-88647"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88647","description":"GnuTLS v3.8.13 can perhaps unexpectedly trust a certificate on the basis of Common Name when Subject Alternative Name has an SRV otherName (1.3.6.1.5.5.7.8.7) whose value is an OCTET STRING. NOTE: the Supplier does not consider this an actionable security vulnerability because of its \"threat model doesn't consider attacks only possible by modifying anything within the trust boundary (private keys, trusted certificate authorities and their issued certificates including intermediate CAs, etc.)\" policy."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119374","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119374","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119374","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119374","date":"2026-11-12","epss":0.0023,"percentile":0.13979}],"risk":0.11499999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119374"},"relatedVulnerabilities":[{"id":"CVE-2026-119374","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119374","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119374","date":"2026-11-12","epss":0.0023,"percentile":0.13979}],"urls":["https://abraxaslabs.tech/research/sqlite-fts5-securedel","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525","https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/9cd4f9e920","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119374","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-66863","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-66863","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-66863","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66863","date":"2026-11-12","epss":0.00376,"percentile":0.32053}],"risk":0.11279999999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-66863"},"relatedVulnerabilities":[{"id":"CVE-2025-66863","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66863","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66863","date":"2026-11-12","epss":0.00376,"percentile":0.32053}],"urls":["https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash2.md"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66863","description":"An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-66865","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-66865","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-66865","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66865","date":"2026-11-12","epss":0.00376,"percentile":0.32052}],"risk":0.11279999999999998,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-66865"},"relatedVulnerabilities":[{"id":"CVE-2025-66865","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66865","cwe":"CWE-121","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66865","date":"2026-11-12","epss":0.00376,"percentile":0.32052}],"urls":["https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash4.md"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66865","description":"An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file."}]},{"artifact":{"id":"6188551974e2b96d","cpes":["cpe:2.3:a:rtmpdump:rtmpdump:2.4\\+20151223.gitfa8646d.1-3:*:*:*:*:*:*:*"],"name":"rtmpdump","purl":"pkg:deb/ubuntu/rtmpdump@2.4%2B20151223.gitfa8646d.1-3?distro=ubuntu","type":"deb","version":"2.4+20151223.gitfa8646d.1-3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/librtmp.so.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/librtmp.so.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112061","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"rtmpdump","version":"2.4+20151223.gitfa8646d.1-3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112061","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112061","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-112061","date":"2026-11-12","epss":0.00221,"percentile":0.12799}],"risk":0.11050000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112061"},"relatedVulnerabilities":[{"id":"CVE-2026-112061","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112061","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-112061","date":"2026-11-12","epss":0.00221,"percentile":0.12799}],"urls":["https://git.ffmpeg.org/gitweb/rtmpdump.git/blob/138fdb258d9fc26f1843fd1b891180416c9dc575:/librtmp/amf.c","https://hackmd.io/@haindpwn/librtmp-amf3-decode-and-strict-array-oob","https://rtmpdump.mplayerhq.hu/","https://www.vulncheck.com/advisories/librtmp-rtmpdump-through-2.6-heap-out-of-bounds-read-via-amfprop-decode"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112061","description":"librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer than four trailing bytes to crash the client."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-95692","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-95692","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95692","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-95692","date":"2026-11-12","epss":0.00211,"percentile":0.11382}],"risk":0.1055,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95692"},"relatedVulnerabilities":[{"id":"CVE-2026-95692","cvss":[],"cwes":[{"cve":"CVE-2026-95692","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-95692","date":"2026-11-12","epss":0.00211,"percentile":0.11382}],"urls":["https://github.com/openssl/openssl/commit/257a3427aa0ef8d9dd2ef5b3e2d1c021a221b116","https://github.com/openssl/openssl/commit/510872388f5d145cf870868b3d288a23822cb776","https://github.com/openssl/openssl/commit/70a47ac78b6f3be1b22fb1551bd0bfcff4f29613","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95692","description":"Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce\nlength via EVP_CipherInit_ex() may trigger a heap out-of-bounds read.\nSupplying a longer IV is silently truncated instead of rejected.\n\nImpact summary: An application passing a caller-supplied IV of the wrong\nlength may crash or read beyond its buffer. Because trailing IV bytes are\nignored, an attacker who knows one message and tag may forge messages under a\ndifferent IV.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: AES-GCM-SIV copies the caller-supplied IV or nonce into its\ninternal state using a copy whose length is taken from the expected nonce size\nrather than from the length the caller actually provided. When the caller\npasses a shorter IV, the copy reads past the end of the caller's buffer;\nAddressSanitizer confirms a heap out-of-bounds read reached through\nEVP_CipherInit_ex() into ossl_aes_gcm_siv_init(). When the caller passes a\nlonger IV, the implementation silently discards the trailing bytes instead of\nrejecting the length.\n\nThe truncation breaks the binding between the IV and the computed\nauthentication tag. An attacker who has observed a message and its tag under\none IV can produce a message and tag that verify under a different IV whose\nfirst bytes match, since the surplus bytes never influence the computation.\nThe message itself is unchanged, so this is a failure of IV commitment rather\nthan a classic existential forgery.\n\nOnly applications that call EVP_CipherInit_ex() (or the equivalent provider\ncipher initialization) with an IV length other than the standard 12 bytes for\nAES-GCM-SIV are affected. The severity is limited because the out-of-bounds\nread is small and attacker-controlled only in length, and the forgery requires\nan unusual IV length choice by the application.\n\nFIPS impact: no\nThe FIPS modules are not affected by this issue, as AES-GCM-SIV is not an\napproved algorithm."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-3441","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-3441","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-3441","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3441","date":"2026-11-12","epss":0.00209,"percentile":0.1121}],"risk":0.1045,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-3441"},"relatedVulnerabilities":[{"id":"CVE-2026-3441","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3441","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3441","date":"2026-11-12","epss":0.00209,"percentile":0.1121}],"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3441","https://bugzilla.redhat.com/show_bug.cgi?id=2443826"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3441","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service."}]},{"artifact":{"id":"20b48d93b2092018","cpes":["cpe:2.3:a:gnutls28:gnutls28:3.8.12-2ubuntu1.1:*:*:*:*:*:*:*"],"name":"gnutls28","purl":"pkg:deb/ubuntu/gnutls28@3.8.12-2ubuntu1.1?distro=ubuntu","type":"deb","version":"3.8.12-2ubuntu1.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-95184","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnutls28","version":"3.8.12-2ubuntu1.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-95184","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95184","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-95184","date":"2026-11-12","epss":0.00208,"percentile":0.10986}],"risk":0.104,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95184"},"relatedVulnerabilities":[{"id":"CVE-2026-95184","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95184","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-95184","date":"2026-11-12","epss":0.00208,"percentile":0.10986}],"urls":["https://gist.github.com/lkloliver/0c8b47fa75a0958fa88587665b82ae15","https://gitlab.com/gnutls/gnutls/-/blob/e2169a87c7fb91935c2845088204b102baed4c5f/SECURITY.md","https://gitlab.com/gnutls/gnutls/-/work_items/1965","https://www.gnutls.org","https://github.com/lkloliver/poc/tree/main/CVE-2026-95184"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95184","description":"GnuTLS v3.8.13 does not properly enforce name constraints, as demonstrated by a permitted subtree violation for \"EE O=Evil accepted although outside permitted O=Good.\" NOTE: the Supplier does not consider this an actionable security vulnerability because of its \"threat model doesn't consider attacks only possible by modifying anything within the trust boundary (private keys, trusted certificate authorities and their issued certificates including intermediate CAs, etc.)\" policy."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-90801","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90801","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90801","cwe":"CWE-119","type":"Primary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90801","cwe":"CWE-120","type":"Primary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90801","date":"2026-11-12","epss":0.00208,"percentile":0.10973}],"risk":0.104,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90801"},"relatedVulnerabilities":[{"id":"CVE-2026-90801","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90801","cwe":"CWE-119","type":"Primary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90801","cwe":"CWE-120","type":"Primary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90801","date":"2026-11-12","epss":0.00208,"percentile":0.10973}],"urls":["https://github.com/r1ck9-2q/cve_summit/blob/main/Heap-buffer-overflow%20in%20%60cache_bwrite%60%20(bfdcache.c436)%20via%20malformed%20ELF%20with%20%60--gc-sections%20-w%60.md","https://sourceware.org/bugzilla/show_bug.cgi?id=34442","https://vuldb.com/cve/CVE-2026-90801","https://vuldb.com/submit/920276","https://vuldb.com/vuln/403303","https://vuldb.com/vuln/403303/cti","https://www.gnu.org/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90801","description":"A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"20b48d93b2092018","cpes":["cpe:2.3:a:gnutls28:gnutls28:3.8.12-2ubuntu1.1:*:*:*:*:*:*:*"],"name":"gnutls28","purl":"pkg:deb/ubuntu/gnutls28@3.8.12-2ubuntu1.1?distro=ubuntu","type":"deb","version":"3.8.12-2ubuntu1.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-88648","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnutls28","version":"3.8.12-2ubuntu1.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-88648","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-88648","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-88648","date":"2026-11-12","epss":0.00202,"percentile":0.103}],"risk":0.101,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-88648"},"relatedVulnerabilities":[{"id":"CVE-2026-88648","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-88648","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-88648","date":"2026-11-12","epss":0.00202,"percentile":0.103}],"urls":["https://gist.github.com/lkloliver/1f2a97cb8d0b31aa27b6bd0354358d7d","https://gitlab.com/gnutls/gnutls/-/blob/e2169a87c7fb91935c2845088204b102baed4c5f/SECURITY.md","https://gitlab.com/gnutls/gnutls/-/work_items/1965","https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10","https://www.rfc-editor.org/rfc/rfc5280#section-6.1.4","https://github.com/lkloliver/poc/tree/main/CVE-2026-88648"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88648","description":"In GnuTLS v3.8.13, an excluded msUPN/SRV otherName is never checked. NOTE: the Supplier does not consider this an actionable security vulnerability because of its \"threat model doesn't consider attacks only possible by modifying anything within the trust boundary (private keys, trusted certificate authorities and their issued certificates including intermediate CAs, etc.)\" policy."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-90803","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90803","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90803","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90803","cwe":"CWE-120","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90803","date":"2026-11-12","epss":0.00201,"percentile":0.10071}],"risk":0.1005,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90803"},"relatedVulnerabilities":[{"id":"CVE-2026-90803","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H","metrics":{"baseScore":6.8,"impactScore":5.5,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90803","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90803","cwe":"CWE-120","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90803","date":"2026-11-12","epss":0.00201,"percentile":0.10071}],"urls":["https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20readwrite%20and%20SEGV%20in%20%60elf_x86_64_relocate_section%60%20(bfdelf64-x86-64.c4530%20%204835)%20via%20malformed%20relocation.md","https://sourceware.org/bugzilla/show_bug.cgi?id=34444","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=471130b39c03623ec6d78ece377ff4da3f6bfe7b","https://vuldb.com/cve/CVE-2026-90803","https://vuldb.com/submit/920280","https://vuldb.com/vuln/403305","https://vuldb.com/vuln/403305/cti","https://www.gnu.org/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90803","description":"A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 addresses this issue. The name of the patch is 471130b39c03623ec6d78ece377ff4da3f6bfe7b. It is recommended to upgrade the affected component."}]},{"artifact":{"id":"20b48d93b2092018","cpes":["cpe:2.3:a:gnutls28:gnutls28:3.8.12-2ubuntu1.1:*:*:*:*:*:*:*"],"name":"gnutls28","purl":"pkg:deb/ubuntu/gnutls28@3.8.12-2ubuntu1.1?distro=ubuntu","type":"deb","version":"3.8.12-2ubuntu1.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-95210","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnutls28","version":"3.8.12-2ubuntu1.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-95210","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95210","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-95210","date":"2026-11-12","epss":0.002,"percentile":0.10021}],"risk":0.1,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95210"},"relatedVulnerabilities":[{"id":"CVE-2026-95210","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95210","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-95210","date":"2026-11-12","epss":0.002,"percentile":0.10021}],"urls":["http://gnutls.com","https://gist.github.com/lkloliver/4aad23689202720c4068f43b3c6069c7","https://gitlab.com/gnutls/gnutls/-/blob/e2169a87c7fb91935c2845088204b102baed4c5f/SECURITY.md","https://gitlab.com/gnutls/gnutls/-/work_items/1965","https://github.com/lkloliver/poc/tree/main/CVE-2026-95210"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95210","description":"GnuTLS v3.8.13 does not reject a critical keyUsage extension when it cannot be processed, such as when extnValue is an ASN.1 NULL (05 00) instead of a BIT STRING. NOTE: the Supplier does not consider this an actionable security vulnerability because of its \"threat model doesn't consider attacks only possible by modifying anything within the trust boundary (private keys, trusted certificate authorities and their issued certificates including intermediate CAs, etc.)\" policy."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-90804","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90804","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90804","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90804","cwe":"CWE-120","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90804","date":"2026-11-12","epss":0.00197,"percentile":0.09508}],"risk":0.0985,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90804"},"relatedVulnerabilities":[{"id":"CVE-2026-90804","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.8,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":0.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":3.4,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90804","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90804","cwe":"CWE-120","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90804","date":"2026-11-12","epss":0.00197,"percentile":0.09508}],"urls":["https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20write%20%20negative-size%20%60memmove%60%20%20SEGV%20in%20%60_bfd_elf_write_section_eh_frame%60%20(bfdelf-eh-frame.c2064%20%202083%20%202193)%20via%20malformed%20%60.eh_frame%60.md","https://sourceware.org/bugzilla/show_bug.cgi?id=34445","https://vuldb.com/cve/CVE-2026-90804","https://vuldb.com/submit/920281","https://vuldb.com/vuln/403306","https://vuldb.com/vuln/403306/cti","https://www.gnu.org/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90804","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119375","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119375","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119375","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119375","date":"2026-11-12","epss":0.00195,"percentile":0.09266}],"risk":0.09749999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119375"},"relatedVulnerabilities":[{"id":"CVE-2026-119375","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119375","cwe":"CWE-908","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119375","date":"2026-11-12","epss":0.00195,"percentile":0.09266}],"urls":["https://abraxaslabs.tech/research/sqlite-wal-pagesize","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/wal.c#L3672","https://github.com/sqlite/sqlite/commit/e5bf119821f25be1d7f10ef0a2edbe175289166e","https://sqlite.org/bugs/info/2026-08-17T15:54:41Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/f9b4ee369557c36c","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-information-disclosure-via-wal-page-size-mismatch"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119375","description":"SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized page-cache memory by supplying a WAL file with an undersized page size. Attackers can craft a database and WAL file whose oversized record payload makes queries like substr() return stale bytes, disclosing other table rows and internal pointers."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119371","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119371","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119371","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119371","date":"2026-11-12","epss":0.00191,"percentile":0.08871}],"risk":0.0955,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119371"},"relatedVulnerabilities":[{"id":"CVE-2026-119371","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119371","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119371","date":"2026-11-12","epss":0.00191,"percentile":0.08871}],"urls":["https://abraxaslabs.tech/research/sqlite-cte-nest","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c#L5754","https://github.com/sqlite/sqlite/commit/e6ff280c839fdfc7418fd5add12e8f32702a17fb","https://sqlite.org/bugs/info/2026-10-04T04:58:58Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/f54730871303e655","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-cte-chain-in-selectexpander"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119371","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH nesting limit because common table expressions are not counted against it. Attackers can supply a WITH clause chaining tens of thousands of CTEs, via plain SQL or a view in an untrusted database file, causing unbounded selectExpander() recursion that crashes the process."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-88822","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-88822","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-88822","cwe":"CWE-457","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-88822","date":"2026-11-12","epss":0.0019,"percentile":0.08744}],"risk":0.095,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-88822"},"relatedVulnerabilities":[{"id":"CVE-2026-88822","cvss":[],"cwes":[{"cve":"CVE-2026-88822","cwe":"CWE-457","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-88822","date":"2026-11-12","epss":0.0019,"percentile":0.08744}],"urls":["https://github.com/openssl/openssl/commit/1a73dc590cbad62d6f0329ea4779eadaa8d8fd75","https://github.com/openssl/openssl/commit/7b4f5344aa0401e7b777640050b5257ed2a70e88","https://github.com/openssl/openssl/commit/911eee8eb7550b95a206f1ad8cbdb986098982f3","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88822","description":"Issue summary: QUIC, when performing automated peer detection, may allow\nuninitialized stack data to leak into the received address which is then used\nas the destination for outgoing packets.\n\nImpact summary: Applications using QUIC's automated peer detection mechanism\nmay receive an invalid address, leading to connection loss and disclosure of\nuninitialized stack data to an attacker observing the outgoing network traffic.\n\nCWE: CWE-457 (Use of Uninitialized Variable)\n\nDescription: The OpenSSL QUIC stack contains a feature in which, when using an\nalready connected socket, it will auto-detect the peer address during the SSL\nhandshake.  This feature uses the getpeername() function, passing a buffer of\nsufficient length to hold any supported address family, but passes a buffer\nlength that is only sized such that larger addresses, such as IPv6, cannot be\nretrieved. The getpeername() function however, still returns the full address\nlength, which is accepted as the valid input buffer length, leading to the\naddress buffer containing uninitialized stack data instead of the actual peer\naddress. The invalid peer address is then used as destination for the outgoing\npackets which leads to a connectivity breakage and a leakage of the\nuninitialized stack data to passive network observers.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE as\nthe affected protocol is not implemented in the FIPS module."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-95691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-95691","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-95691","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-95691","date":"2026-11-12","epss":0.0019,"percentile":0.08743}],"risk":0.095,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-95691"},"relatedVulnerabilities":[{"id":"CVE-2026-95691","cvss":[],"cwes":[{"cve":"CVE-2026-95691","cwe":"CWE-416","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-95691","date":"2026-11-12","epss":0.0019,"percentile":0.08743}],"urls":["https://github.com/openssl/openssl/commit/dd90ceb99a3c2ddba336bb4a00be9ebabd84c2a1","https://github.com/openssl/openssl/commit/ec9d4de9d03989b29db5a3d7efdb4c285deaf386","https://github.com/openssl/openssl/commit/f6244675833e097c2429a40d1b206d95385bd42f","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95691","description":"Issue summary: A retransmitted QUIC CRYPTO frame can release packet storage\nwhile the TLS record layer retains a direct pointer into that storage causing\nuse after free.\n\nImpact summary: A malicious QUIC server can cause a heap-use-after-free read\nin the OpenSSL QUIC client. The server can also identify one allocator-adjacent\nbyte through the client's protected Handshake response.\n\nCWE: CWE-416: Use After Free\n\nDescription: During CRYPTO stream processing, a pointer into the first frame's\nmemory on the stream is lent to the TLS handshake processing. The memory\nmust remain stable until it is processed and released. However the processing\nof retransmitted CRYPTO frames could release the memory if the retransmitted\nframe fully overlapped the existing frame. This then causes use-after-free read\nwhen the TLS handshake processing continues.\n\nThe use-after-free read can lead to a Denial-of-Service of the client\napplication or a minor leak of information about the heap memory contents\nthat might be overwritten with other data, subsequently allocated by\nthe application, to the peer.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-66866","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-66866","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-66866","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66866","date":"2026-11-12","epss":0.00311,"percentile":0.24313}],"risk":0.0933,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-66866"},"relatedVulnerabilities":[{"id":"CVE-2025-66866","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66866","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66866","date":"2026-11-12","epss":0.00311,"percentile":0.24313}],"urls":["https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash6.md"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66866","description":"An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-90802","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90802","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90802","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90802","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90802","date":"2026-11-12","epss":0.00183,"percentile":0.07952}],"risk":0.0915,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90802"},"relatedVulnerabilities":[{"id":"CVE-2026-90802","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:N/I:P/A:P","metrics":{"baseScore":3.2,"impactScore":5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90802","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90802","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90802","date":"2026-11-12","epss":0.00183,"percentile":0.07952}],"urls":["https://github.com/r1ck9-2q/cve_summit/blob/main/SEGV%20in%20%60bfd_putl64%60%20(bfdlibbfd.c989)%20during%20relocation%20output%20via%20malformed%20ELF.md","https://sourceware.org/bugzilla/show_bug.cgi?id=34443","https://vuldb.com/cve/CVE-2026-90802","https://vuldb.com/submit/920277","https://vuldb.com/vuln/403304","https://vuldb.com/vuln/403304/cti","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90802","description":"A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119376","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119376","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119376","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119376","date":"2026-11-12","epss":0.00183,"percentile":0.07943}],"risk":0.0915,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119376"},"relatedVulnerabilities":[{"id":"CVE-2026-119376","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119376","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119376","date":"2026-11-12","epss":0.00183,"percentile":0.07943}],"urls":["https://abraxaslabs.tech/research/sqlite-collate-depth","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/expr.c#L175","https://github.com/sqlite/sqlite/commit/d54522a5b832422ab893a1e9fa7a99ab314ea4e2","https://sqlite.org/bugs/info/2026-10-04T04:50:56Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/252c0b7bf5a727d2","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-collate-operator-chain"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119376","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMIT_EXPR_DEPTH limit by chaining COLLATE postfix operators. Attackers can supply roughly 175,000 chained COLLATE operators in SQL or an untrusted database view to trigger unbounded recursion in sqlite3WalkExprNN() and crash the process."}]},{"artifact":{"id":"6188551974e2b96d","cpes":["cpe:2.3:a:rtmpdump:rtmpdump:2.4\\+20151223.gitfa8646d.1-3:*:*:*:*:*:*:*"],"name":"rtmpdump","purl":"pkg:deb/ubuntu/rtmpdump@2.4%2B20151223.gitfa8646d.1-3?distro=ubuntu","type":"deb","version":"2.4+20151223.gitfa8646d.1-3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/librtmp.so.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/librtmp.so.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-112060","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"rtmpdump","version":"2.4+20151223.gitfa8646d.1-3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-112060","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-112060","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-112060","date":"2026-11-12","epss":0.00177,"percentile":0.07347}],"risk":0.08850000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-112060"},"relatedVulnerabilities":[{"id":"CVE-2026-112060","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.4,"impactScore":4.8,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112060","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-112060","date":"2026-11-12","epss":0.00177,"percentile":0.07347}],"urls":["https://git.ffmpeg.org/gitweb/rtmpdump.git/blob/138fdb258d9fc26f1843fd1b891180416c9dc575:/librtmp/amf.c","https://hackmd.io/@haindpwn/librtmp-amf3-decode-and-strict-array-oob","https://rtmpdump.mplayerhq.hu/","https://www.vulncheck.com/advisories/librtmp-rtmpdump-through-2.6-heap-out-of-bounds-write-via-amf3-decode"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112060","description":"librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP servers or man-in-the-middle attackers can send oversized AMF3 string lengths, and with the token option DecodeTEA corrupts heap memory and leaks heap bytes."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91782","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91782","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91782","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-91782","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-91782","date":"2026-11-12","epss":0.00177,"percentile":0.07256}],"risk":0.08850000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91782"},"relatedVulnerabilities":[{"id":"CVE-2026-91782","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"impactScore":2.9,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91782","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-91782","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-91782","date":"2026-11-12","epss":0.00177,"percentile":0.07256}],"urls":["https://github.com/Ech06/CVE_submit/tree/main/bugzilla/pocs/34448","https://sourceware.org/bugzilla/show_bug.cgi?id=34448","https://vuldb.com/cve/CVE-2026-91782","https://vuldb.com/submit/933335","https://vuldb.com/vuln/404053","https://vuldb.com/vuln/404053/cti","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91782","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.48 addresses this issue. The patch is identified as d1268210b6f6/471130b39c0/283d3198bed/0a84e560216/a692a633d40. Upgrading the affected component is recommended."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91781","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91781","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91781","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-91781","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-91781","date":"2026-11-12","epss":0.00176,"percentile":0.0718}],"risk":0.08800000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91781"},"relatedVulnerabilities":[{"id":"CVE-2026-91781","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"impactScore":2.9,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91781","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-91781","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-91781","date":"2026-11-12","epss":0.00176,"percentile":0.0718}],"urls":["https://github.com/Ech06/CVE_submit/tree/main/bugzilla/pocs/34449","https://sourceware.org/bugzilla/show_bug.cgi?id=34449","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7322e9bc30cb282575a701c307851fd3d66fee68","https://vuldb.com/cve/CVE-2026-91781","https://vuldb.com/submit/933336","https://vuldb.com/vuln/404052","https://vuldb.com/vuln/404052/cti","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91781","description":"A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 is able to address this issue. The identifier of the patch is 7322e9bc30cb282575a701c307851fd3d66fee68. It is suggested to upgrade the affected component."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-4647","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-4647","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-4647","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-4647","date":"2026-11-12","epss":0.00175,"percentile":0.07025}],"risk":0.08750000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-4647"},"relatedVulnerabilities":[{"id":"CVE-2026-4647","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4647","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-4647","date":"2026-11-12","epss":0.00175,"percentile":0.07025}],"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-4647","https://bugzilla.redhat.com/show_bug.cgi?id=2450302","https://sourceware.org/bugzilla/show_bug.cgi?id=33919"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4647","description":"A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91780","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91780","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91780","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-91780","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-91780","date":"2026-11-12","epss":0.00174,"percentile":0.06925}],"risk":0.087,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91780"},"relatedVulnerabilities":[{"id":"CVE-2026-91780","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"impactScore":2.9,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91780","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-91780","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-91780","date":"2026-11-12","epss":0.00174,"percentile":0.06925}],"urls":["https://github.com/Ech06/CVE_submit/tree/main/bugzilla/pocs/34447","https://sourceware.org/bugzilla/show_bug.cgi?id=34447","https://vuldb.com/cve/CVE-2026-91780","https://vuldb.com/submit/933334","https://vuldb.com/vuln/404051","https://vuldb.com/vuln/404051/cti","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91780","description":"A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119591","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119591","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119591","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119591","date":"2026-11-12","epss":0.00171,"percentile":0.06577}],"risk":0.08549999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119591"},"relatedVulnerabilities":[{"id":"CVE-2026-119591","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119591","cwe":"CWE-674","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119591","date":"2026-11-12","epss":0.00171,"percentile":0.06577}],"urls":["https://abraxaslabs.tech/research/sqlite-values-union","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/select.c#L7199","https://github.com/sqlite/sqlite/commit/eff50a067c55f972909e7780e506e91382d08de2","https://sqlite.org/bugs/info/2026-10-04T05:34:47Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/ab621a3e11ee4acc","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-stack-exhaustion-via-countofviewoptimization-in-values-clause"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119591","description":"SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to crash the host process via count(*) over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TK_PLUS expressions whose recursive freeing in sqlite3ExprDeleteNN() exhausts the C stack, causing denial of service."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6846","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6846","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6846","date":"2026-11-12","epss":0.00171,"percentile":0.06554}],"risk":0.08549999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6846"},"relatedVulnerabilities":[{"id":"CVE-2026-6846","cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6846","date":"2026-11-12","epss":0.00171,"percentile":0.06554}],"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6846","https://bugzilla.redhat.com/show_bug.cgi?id=2460006","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6846.json"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6846","description":"A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable."}]},{"artifact":{"id":"f19767660d7ddb63","cpes":["cpe:2.3:a:golang:go:1.27.3:-:*:*:*:*:*:*"],"name":"stdlib","purl":"pkg:golang/stdlib@1.27.3","type":"go-module","version":"go1.27.3","language":"go","licenses":["BSD-3-Clause"],"metadata":{"architecture":"","goCompiledVersion":"go1.27.3"},"locations":[{"path":"/usr/bin/pebble","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/pebble","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"GolangBinMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.27.4"},"type":"exact-direct-match","found":{"vulnerabilityID":"GO-2026-6859","versionConstraint":"<1.26.11||>=1.27.0-0,<1.27.4 (go)"},"matcher":"go-module-matcher","searchedBy":{"package":{"name":"stdlib","version":"go1.27.3"},"language":"go","namespace":"govulndb:language:go"}}],"vulnerability":{"id":"GO-2026-6859","fix":{"state":"fixed","versions":["1.26.11","1.27.4"],"available":[{"date":"2026-11-10","kind":"release","version":"1.26.11"},{"date":"2026-11-10","kind":"release","version":"1.27.4"}]},"cvss":[],"epss":[{"cve":"CVE-2026-97054","date":"2026-11-12","epss":0.00171,"percentile":0.0656}],"risk":0.08549999999999999,"urls":["https://go.dev/issue/82563","https://groups.google.com/g/golang-announce/c/iY8TY0wWgbM"],"severity":"Unknown","namespace":"govulndb:language:go","advisories":[],"dataSource":"https://go.dev/cl/862185","description":"For HTTP/1 servers, when MaxBytesReader's limit is exceeded, \"Connection: close\" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header."},"relatedVulnerabilities":[{"id":"CVE-2026-97054","cvss":[],"epss":[{"cve":"CVE-2026-97054","date":"2026-11-12","epss":0.00171,"percentile":0.0656}],"urls":["https://go.dev/cl/862185","https://go.dev/issue/82563","https://groups.google.com/g/golang-announce/c/iY8TY0wWgbM","https://pkg.go.dev/vuln/GO-2026-6859"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-97054","description":"For HTTP/1 servers, when MaxBytesReader's limit is exceeded, \"Connection: close\" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes MaxBytesReader or MaxBytesHandler can crash due to runtime panic if its handler reads the request body concurrently with writing the response header."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-90828","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90828","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90828","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90828","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90828","date":"2026-11-12","epss":0.0017,"percentile":0.06467}],"risk":0.08499999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90828"},"relatedVulnerabilities":[{"id":"CVE-2026-90828","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":6.6,"impactScore":4.8,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90828","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90828","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90828","date":"2026-11-12","epss":0.0017,"percentile":0.06467}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=16882","https://sourceware.org/bugzilla/show_bug.cgi?id=34450","https://vuldb.com/cve/CVE-2026-90828","https://vuldb.com/submit/925227","https://vuldb.com/vuln/403330","https://vuldb.com/vuln/403330/cti","https://www.gnu.org/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90828","description":"A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91779","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-91779","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-91779","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-91779","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-91779","date":"2026-11-12","epss":0.0017,"percentile":0.06402}],"risk":0.08499999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-91779"},"relatedVulnerabilities":[{"id":"CVE-2026-91779","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"impactScore":2.9,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91779","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-91779","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-91779","date":"2026-11-12","epss":0.0017,"percentile":0.06402}],"urls":["https://github.com/Ech06/CVE_submit/blob/main/bugzilla/issues/34446.md","https://sourceware.org/bugzilla/show_bug.cgi?id=34446","https://vuldb.com/cve/CVE-2026-91779","https://vuldb.com/submit/933333","https://vuldb.com/vuln/404050","https://vuldb.com/vuln/404050/cti","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91779","description":"A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-90831","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90831","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90831","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90831","date":"2026-11-12","epss":0.00168,"percentile":0.0623}],"risk":0.084,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90831"},"relatedVulnerabilities":[{"id":"CVE-2026-90831","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90831","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90831","date":"2026-11-12","epss":0.00168,"percentile":0.0623}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=16886","https://sourceware.org/bugzilla/show_bug.cgi?id=34454","https://vuldb.com/cve/CVE-2026-90831","https://vuldb.com/submit/925230","https://vuldb.com/vuln/403333","https://vuldb.com/vuln/403333/cti","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90831","description":"A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-19548","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-19548","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-19548","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-19548","date":"2026-11-12","epss":0.00167,"percentile":0.0607}],"risk":0.0835,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-19548"},"relatedVulnerabilities":[{"id":"CVE-2026-19548","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19548","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-19548","date":"2026-11-12","epss":0.00167,"percentile":0.0607}],"urls":["https://access.redhat.com/errata/RHSA-2026:82359","https://access.redhat.com/security/cve/CVE-2026-19548","https://bugzilla.redhat.com/show_bug.cgi?id=2507832"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19548","description":"Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that plugin_maybe_claim() in ld/plugin.c frees the original BFD object via bfd_close/_bfd_delete_bfd when entry->the_bfd->my_archive == NULL, but the caller retains both the original abfd parameter and a shallow copy (orig_input.the_bfd) as dangling pointers. These dangling pointers are subsequently dereferenced at three distinct locations in add_archive_element:\n\n1. Line ~1442: accessing abfd->my_archive via bfd_usrdata(abfd->my_archive)\n2. Line ~1493: multiple accesses to abfd and abfd->my_archive in a conditional check and bfd_get_filename call\n3. Line ~1525: dereferencing the shallow copy orig_input.the_bfd->my_archive in trace/verbose logging\n\nThe vulnerability is triggered when LTO plugins are active (link_info.lto_plugin_active is true) and the input object has abfd->my_archive == NULL, which is a valid state for standalone object files. Red Hat builds binutils with --enable-plugins and --enable-lto, confirming the vulnerable code path is compiled in and reachable.\n\nAn attacker who can supply a crafted object or archive file to a build process using LTO-enabled linking could exploit this flaw to cause a denial of service (linker crash via segmentation fault). Arbitrary code execution is theoretically possible through heap manipulation but is substantially mitigated by hardening measures including stack protector, FORTIFY_SOURCE, ASLR, and PIE.\n\nThe attack surface is limited to build-time environments — the linker is a development tool not exposed in production runtime. The most realistic exploitation scenario is a supply chain attack introducing a crafted object file as a build dependency in CI/CD pipelines or development environments."}]},{"artifact":{"id":"20b48d93b2092018","cpes":["cpe:2.3:a:gnutls28:gnutls28:3.8.12-2ubuntu1.1:*:*:*:*:*:*:*"],"name":"gnutls28","purl":"pkg:deb/ubuntu/gnutls28@3.8.12-2ubuntu1.1?distro=ubuntu","type":"deb","version":"3.8.12-2ubuntu1.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libgnutls.so.30.41.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-67693","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnutls28","version":"3.8.12-2ubuntu1.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-67693","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-67693","cwe":"CWE-367","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-67693","date":"2026-11-12","epss":0.00167,"percentile":0.06004}],"risk":0.0835,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-67693"},"relatedVulnerabilities":[{"id":"CVE-2026-67693","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-67693","cwe":"CWE-367","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-67693","date":"2026-11-12","epss":0.00167,"percentile":0.06004}],"urls":["https://gist.github.com/lkloliver/6fbfc191bc6163942c8017551ac3f238","https://gitlab.com/gnutls/gnutls/-/blob/3.8.13/lib/x509/verify.c#L1119-1178","https://gitlab.com/gnutls/gnutls/-/blob/e2169a87c7fb91935c2845088204b102baed4c5f/SECURITY.md","https://gitlab.com/gnutls/gnutls/-/work_items/1642","https://gitlab.com/gnutls/gnutls/-/work_items/1965","https://github.com/lkloliver/poc/tree/main/CVE-2026-67693"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-67693","description":"GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU). NOTE: the Supplier does not consider this an actionable security vulnerability because of its \"threat model doesn't consider attacks only possible by modifying anything within the trust boundary (private keys, trusted certificate authorities and their issued certificates including intermediate CAs, etc.)\" policy."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-90829","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90829","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90829","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90829","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90829","date":"2026-11-12","epss":0.00166,"percentile":0.05905}],"risk":0.083,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90829"},"relatedVulnerabilities":[{"id":"CVE-2026-90829","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90829","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90829","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90829","date":"2026-11-12","epss":0.00166,"percentile":0.05905}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=16883","https://sourceware.org/bugzilla/show_bug.cgi?id=34451","https://vuldb.com/cve/CVE-2026-90829","https://vuldb.com/submit/925228","https://vuldb.com/vuln/403331","https://vuldb.com/vuln/403331/cti","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90829","description":"A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-90830","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-90830","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-90830","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90830","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90830","date":"2026-11-12","epss":0.00165,"percentile":0.05761}],"risk":0.0825,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-90830"},"relatedVulnerabilities":[{"id":"CVE-2026-90830","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.3,"impactScore":3.4,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":4.3,"impactScore":6.5,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90830","cwe":"CWE-404","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-90830","cwe":"CWE-476","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-90830","date":"2026-11-12","epss":0.00165,"percentile":0.05761}],"urls":["https://sourceware.org/bugzilla/attachment.cgi?id=16884","https://sourceware.org/bugzilla/show_bug.cgi?id=34452","https://vuldb.com/cve/CVE-2026-90830","https://vuldb.com/submit/925229","https://vuldb.com/vuln/403332","https://vuldb.com/vuln/403332/cti","https://www.gnu.org/"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90830","description":"A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119373","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119373","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119373","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119373","date":"2026-11-12","epss":0.00162,"percentile":0.05485}],"risk":0.08099999999999999,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119373"},"relatedVulnerabilities":[{"id":"CVE-2026-119373","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119373","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119373","date":"2026-11-12","epss":0.00162,"percentile":0.05485}],"urls":["https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107","https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80","https://sqlite.org/bugs/info/2026-08-04T08:49:27Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/a7f8c92f62","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119373","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process."}]},{"artifact":{"id":"d1aa66e349df32d8","cpes":["cpe:2.3:a:p11-kit:p11-kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11-kit:p11_kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit:p11-kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit:p11_kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11:p11-kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11:p11_kit:0.26.2-2:*:*:*:*:*:*:*"],"name":"p11-kit","purl":"pkg:deb/ubuntu/p11-kit@0.26.2-2?distro=ubuntu","type":"deb","version":"0.26.2-2","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.4.8","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.4.8","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-13757","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"p11-kit","version":"0.26.2-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-13757","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-13757","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-13757","date":"2026-11-12","epss":0.00154,"percentile":0.04562}],"risk":0.077,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-13757"},"relatedVulnerabilities":[{"id":"CVE-2026-13757","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13757","cwe":"CWE-674","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-13757","date":"2026-11-12","epss":0.00154,"percentile":0.04562}],"urls":["https://access.redhat.com/errata/RHSA-2026:37469","https://access.redhat.com/errata/RHSA-2026:38342","https://access.redhat.com/errata/RHSA-2026:49667","https://access.redhat.com/errata/RHSA-2026:49668","https://access.redhat.com/errata/RHSA-2026:53371","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:54760","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:72394","https://access.redhat.com/errata/RHSA-2026:72395","https://access.redhat.com/errata/RHSA-2026:72399","https://access.redhat.com/errata/RHSA-2026:72470","https://access.redhat.com/errata/RHSA-2026:72475","https://access.redhat.com/errata/RHSA-2026:72476","https://access.redhat.com/errata/RHSA-2026:72502","https://access.redhat.com/errata/RHSA-2026:81201","https://access.redhat.com/errata/RHSA-2026:82304","https://access.redhat.com/errata/RHSA-2026:82322","https://access.redhat.com/errata/RHSA-2026:82336","https://access.redhat.com/errata/RHSA-2026:82347","https://access.redhat.com/errata/RHSA-2026:82354","https://access.redhat.com/errata/RHSA-2026:82372","https://access.redhat.com/errata/RHSA-2026:82857","https://access.redhat.com/errata/RHSA-2026:82888","https://access.redhat.com/security/cve/CVE-2026-13757","https://bugzilla.redhat.com/show_bug.cgi?id=2494556","https://github.com/advisories/GHSA-p2wm-69qx-x25w"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13757","description":"A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-15003","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-15003","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-15003","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15003","date":"2026-11-12","epss":0.00151,"percentile":0.04291}],"risk":0.0755,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-15003"},"relatedVulnerabilities":[{"id":"CVE-2026-15003","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":5.6,"impactScore":4.3,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-15003","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-15003","date":"2026-11-12","epss":0.00151,"percentile":0.04291}],"urls":["https://access.redhat.com/errata/RHSA-2026:47171","https://access.redhat.com/security/cve/CVE-2026-15003","https://bugzilla.redhat.com/show_bug.cgi?id=2497805","https://sourceware.org/bugzilla/show_bug.cgi?id=34053"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-15003","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119372","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119372","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119372","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119372","date":"2026-11-12","epss":0.00147,"percentile":0.04011}],"risk":0.0735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119372"},"relatedVulnerabilities":[{"id":"CVE-2026-119372","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119372","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119372","date":"2026-11-12","epss":0.00147,"percentile":0.04011}],"urls":["https://abraxaslabs.tech/research/sqlite-fts3-snippet","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts3/fts3_snippet.c#L561","https://github.com/sqlite/sqlite/commit/a87bd2471a9c0606e78d3c3678bcd9cecaa0e731","https://sqlite.org/bugs/info/2026-08-17T09:18:24Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/e4635c4153","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-fts3-fts3bestsnippet-via-snippet"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119372","description":"SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnerability in fts3BestSnippet() caused by dangling cached position-list pointers. Attackers can run a full-text MATCH query combining OR and NEAR operators with snippet() to read freed heap memory and crash the process."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6845","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6845","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6845","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6845","date":"2026-11-12","epss":0.00147,"percentile":0.03962}],"risk":0.0735,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6845"},"relatedVulnerabilities":[{"id":"CVE-2026-6845","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6845","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6845","date":"2026-11-12","epss":0.00147,"percentile":0.03962}],"urls":["https://access.redhat.com/errata/RHSA-2026:34924","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6845","https://bugzilla.redhat.com/show_bug.cgi?id=2460012"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6845","description":"A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-88823","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-88823","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-88823","cwe":"CWE-325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-88823","date":"2026-11-12","epss":0.00142,"percentile":0.03614}],"risk":0.07100000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-88823"},"relatedVulnerabilities":[{"id":"CVE-2026-88823","cvss":[],"cwes":[{"cve":"CVE-2026-88823","cwe":"CWE-325","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-88823","date":"2026-11-12","epss":0.00142,"percentile":0.03614}],"urls":["https://github.com/openssl/openssl/commit/159e1de0c448d7b9f09ad768c8e141def4aa1eb4","https://github.com/openssl/openssl/commit/2f5fc833ff9b5bfe00b32f8b5c74f73c5773c682","https://github.com/openssl/openssl/commit/6747b1a278816dd7db46438040a70b0b5e5e0a90","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-88823","description":"Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional\nAuthenticated Data (AAD) update as a reset of all the AAD supplied so far,\ninstead of leaving the AAD unchanged. An application that supplies its AAD in\nseveral fragments, one of which is empty, therefore produces or verifies\nmessages whose authentication tag does not cover the AAD supplied before\nthe empty fragment.\n\nImpact summary: Data an application intended to authenticate alongside a\nmessage is silently left unauthenticated. An attacker can forge the AAD of such\na message.\n\nCWE: CWE-325: Missing Cryptographic Step\n\nDescription: An application passing AAD in multiple chunks of which some have\nzero length will have the previous AAD chunks effectively unauthenticated. Also,\non context re-initialisation, the AAD was not reset, which meant that any AAD\naccumulated from the previous context usage were also included in the AAD of the\nnew message.\n\nThe fix makes a zero-length AAD update a no-op and clears any accumulated AAD\nwhenever the context is re-initialised with a key or a nonce.\nA re-initialisation that only changes parameters keeps the AAD.\n\nFIPS impact: no\nThe FIPS modules are not affected, as AES-GCM-SIV is not a FIPS approved\nalgorithm and is implemented only in the default provider, outside the\nOpenSSL FIPS module boundary."}]},{"artifact":{"id":"a68feceb66c1a4cc","cpes":["cpe:2.3:a:tar:tar:1.35\\+dfsg-4ubuntu0.4:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:deb/ubuntu/tar@1.35%2Bdfsg-4ubuntu0.4?distro=ubuntu","type":"deb","version":"1.35+dfsg-4ubuntu0.4","language":"","licenses":[],"locations":[{"path":"/usr/bin/tar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/tar","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-18508","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"tar","version":"1.35+dfsg-4ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-18508","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18508","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18508","date":"2026-11-12","epss":0.00141,"percentile":0.03484}],"risk":0.07050000000000001,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18508"},"relatedVulnerabilities":[{"id":"CVE-2026-18508","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18508","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18508","date":"2026-11-12","epss":0.00141,"percentile":0.03484}],"urls":["https://access.redhat.com/errata/RHSA-2026:50807","https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-18508","https://bugzilla.redhat.com/show_bug.cgi?id=2509843"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18508","description":"A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction."}]},{"artifact":{"id":"8c82f42c9d9b35a4","cpes":["cpe:2.3:a:sqlite3:sqlite3:3.46.1-9ubuntu0.3:*:*:*:*:*:*:*"],"name":"sqlite3","purl":"pkg:deb/ubuntu/sqlite3@3.46.1-9ubuntu0.3?distro=ubuntu","type":"deb","version":"3.46.1-9ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119377","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"sqlite3","version":"3.46.1-9ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-119377","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-119377","cwe":"CWE-863","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119377","date":"2026-11-12","epss":0.00129,"percentile":0.02546}],"risk":0.0645,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-119377"},"relatedVulnerabilities":[{"id":"CVE-2026-119377","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.5,"impactScore":1.5,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119377","cwe":"CWE-863","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119377","date":"2026-11-12","epss":0.00129,"percentile":0.02546}],"urls":["https://abraxaslabs.tech/research/sqlite-fj-using-auth","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/src/resolve.c#L775","https://github.com/sqlite/sqlite/commit/5694c3bb2a6a40770ecd2f65910eea756734dfd8","https://github.com/sqlite/sqlite/commit/7ff247c5b9ead3ad8a69c26d3fd264878e127237","https://sqlite.org/bugs/info/2026-07-05T08:15:45Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/2cb22877683680c1","https://sqlite.org/src/info/bbd69ce274620008","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-authorizer-bypass-via-right-or-full-join-using"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119377","description":"SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3_set_authorizer() SQLITE_READ restrictions."}]},{"artifact":{"id":"5c2c4db26d4ad61c","cpes":["cpe:2.3:a:openssl:openssl:3.5.5-1ubuntu3.7:*:*:*:*:*:*:*"],"name":"openssl","purl":"pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.7?distro=ubuntu","type":"deb","version":"3.5.5-1ubuntu3.7","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/afalg.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libcrypto.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libssl.so.3","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libssl.so.3","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107496","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"openssl","version":"3.5.5-1ubuntu3.7"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-107496","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-107496","cwe":"CWE-835","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-107496","date":"2026-11-12","epss":0.00127,"percentile":0.02392}],"risk":0.0635,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-107496"},"relatedVulnerabilities":[{"id":"CVE-2026-107496","cvss":[],"cwes":[{"cve":"CVE-2026-107496","cwe":"CWE-835","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-107496","date":"2026-11-12","epss":0.00127,"percentile":0.02392}],"urls":["https://github.com/openssl/openssl/commit/36e15b618decdff1b116eead6747718e6e729ad2","https://github.com/openssl/openssl/commit/a0051cfe699bf5a047bc1c4faef65f80f7987366","https://github.com/openssl/openssl/commit/a8531368ddb1f86d2a2782a8b693926bb67b59e7","https://openssl-library.org/news/secadv/20261110.txt"],"severity":"Unknown","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107496","description":"Issue summary: Encrypting a CMS message to an EC certificate whose group order\nis 1 may cause CMS_encrypt() or CMS_encrypt_ex() to loop indefinitely.\n\nImpact summary: An attacker able to supply the recipient certificate to an\napplication performing CMS encryption can cause that application to loop\nindefinitely, consuming CPU and resulting in Denial of Service.\n\nCWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')\n\nDescription: CMS_encrypt() and CMS_encrypt_ex() encrypt a message to one or\nmore recipient certificates and, for an EC recipient, generate an ephemeral\nkey in the recipient's group. If the certificate declares a group order of 1,\nrandom scalar generation can only produce zero. The key generation routine\nthen retries without limit while waiting for a nonzero private scalar, so the\ncall never returns.\n\nThe OpenSSL TLS and QUIC implementations do not use this path. An application\nis exposed only if it calls CMS_encrypt() or CMS_encrypt_ex() with a recipient\ncertificate whose EC parameters are attacker-controlled. Certificates with\nnormal EC group orders do not trigger the loop.\n\nOpenSSL 4.0 and later reject unknown explicit EC groups in default builds.\nThese versions are affected only when configured with the\nenable-ec_explicit_curves option.\n\nThe result is a hang that consumes a CPU core until the process is\ninterrupted, a Denial of Service. The severity is Low because the attacker\nmust supply the recipient certificate and the application must choose to\nencrypt to it; ordinary CMS encryption to trusted recipients is unaffected.\n\nThe fix makes EC key generation fail when the group has no valid nonzero\nprivate scalar, instead of retrying indefinitely.\n\nFIPS impact: no\nThe FIPS modules in 4.1, 4.0, 3.5 and 3.0 are not affected. The FIPS provider\ndoes not support arbitrary explicit EC domain parameters, so an order-1 group\nis rejected during key import before the vulnerable key generation path is\nreached."}]},{"artifact":{"id":"76fd0e2a62dc2c93","cpes":["cpe:2.3:a:dash:dash:0.5.12-12ubuntu3:*:*:*:*:*:*:*"],"name":"dash","purl":"pkg:deb/ubuntu/dash@0.5.12-12ubuntu3?distro=ubuntu","type":"deb","version":"0.5.12-12ubuntu3","language":"","licenses":[],"locations":[{"path":"/usr/bin/dash","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/dash","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-102474","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"dash","version":"0.5.12-12ubuntu3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-102474","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-102474","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102474","date":"2026-11-12","epss":0.00113,"percentile":0.01429}],"risk":0.056499999999999995,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-102474"},"relatedVulnerabilities":[{"id":"CVE-2026-102474","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102474","cwe":"CWE-787","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102474","date":"2026-11-12","epss":0.00113,"percentile":0.01429}],"urls":["https://access.redhat.com/security/cve/CVE-2026-102474","https://bugzilla.redhat.com/show_bug.cgi?id=2543004"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102474","description":"A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \\u or \\U escape, but the multi-byte token can need five or six bytes. A local user who can supply such an escape to dash printf or echo %b, including through dash -c and a positional argument, can write one or two bytes past that reservation."}]},{"artifact":{"id":"f9b51c35d531f0cf","cpes":["cpe:2.3:a:systemd:systemd:259.9-0ubuntu0.1:*:*:*:*:*:*:*"],"name":"systemd","purl":"pkg:deb/ubuntu/systemd@259.9-0ubuntu0.1?distro=ubuntu","type":"deb","version":"259.9-0ubuntu0.1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libsystemd.so.0.42.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsystemd.so.0.42.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libudev.so.1.7.12","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libudev.so.1.7.12","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-40228","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"systemd","version":"259.9-0ubuntu0.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-40228","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-40228","cwe":"CWE-669","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40228","date":"2026-11-12","epss":0.0018,"percentile":0.07631}],"risk":0.054,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-40228"},"relatedVulnerabilities":[{"id":"CVE-2026-40228","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":2.9,"impactScore":1.5,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-40228","cwe":"CWE-669","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-40228","date":"2026-11-12","epss":0.0018,"percentile":0.07631}],"urls":["https://www.openwall.com/lists/oss-security/2026/04/08/1","http://www.openwall.com/lists/oss-security/2026/05/05/1"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-40228","description":"In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a \"logger -p emerg\" command is executed, if ForwardToWall=yes is set."}]},{"artifact":{"id":"d1aa66e349df32d8","cpes":["cpe:2.3:a:p11-kit:p11-kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11-kit:p11_kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit:p11-kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11_kit:p11_kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11:p11-kit:0.26.2-2:*:*:*:*:*:*:*","cpe:2.3:a:p11:p11_kit:0.26.2-2:*:*:*:*:*:*:*"],"name":"p11-kit","purl":"pkg:deb/ubuntu/p11-kit@0.26.2-2?distro=ubuntu","type":"deb","version":"0.26.2-2","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.4.8","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libp11-kit.so.0.4.8","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-18938","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"p11-kit","version":"0.26.2-2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-18938","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18938","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18938","date":"2026-11-12","epss":0.00107,"percentile":0.0114}],"risk":0.0535,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18938"},"relatedVulnerabilities":[{"id":"CVE-2026-18938","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18938","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18938","date":"2026-11-12","epss":0.00107,"percentile":0.0114}],"urls":["https://access.redhat.com/security/cve/CVE-2026-18938","https://bugzilla.redhat.com/show_bug.cgi?id=2478995"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18938","description":"A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems."}]},{"artifact":{"id":"cc73e73ae84e47e9","cpes":["cpe:2.3:a:llvm-toolchain-21:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm-toolchain-21:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm_toolchain_21:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm_toolchain_21:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm-toolchain:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm-toolchain:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm_toolchain:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm_toolchain:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*"],"name":"llvm-toolchain-21","purl":"pkg:deb/ubuntu/llvm-toolchain-21@1%3A21.1.8-6ubuntu1?distro=ubuntu","type":"deb","version":"1:21.1.8-6ubuntu1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libLLVM.so.21.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libLLVM.so.21.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-13574","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"llvm-toolchain-21","version":"1:21.1.8-6ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-13574","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-13574","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-13574","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-13574","date":"2026-11-12","epss":0.00177,"percentile":0.07395}],"risk":0.0531,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-13574"},"relatedVulnerabilities":[{"id":"CVE-2026-13574","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"impactScore":2.9,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13574","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-13574","cwe":"CWE-122","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-13574","date":"2026-11-12","epss":0.00177,"percentile":0.07395}],"urls":["https://github.com/llvm/llvm-project/","https://github.com/llvm/llvm-project/issues/199191","https://github.com/user-attachments/files/28142619/poc.zip","https://vuldb.com/cve/CVE-2026-13574","https://vuldb.com/submit/844468","https://vuldb.com/vuln/374582","https://vuldb.com/vuln/374582/cti"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13574","description":"A vulnerability was determined in llvm llvm-project up to 22.1.6. This impacts the function GCRelocateInst::getBasePtr in the library llvm/lib/IR/IntrinsicInst.cpp of the component Bitcode File Handler. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. There are still doubts about whether this vulnerability truly exists. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6844","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-6844","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-6844","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6844","date":"2026-11-12","epss":0.00104,"percentile":0.0102}],"risk":0.052,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-6844"},"relatedVulnerabilities":[{"id":"CVE-2026-6844","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6844","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6844","date":"2026-11-12","epss":0.00104,"percentile":0.0102}],"urls":["https://access.redhat.com/security/cve/CVE-2026-6844","https://bugzilla.redhat.com/show_bug.cgi?id=2460016"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6844","description":"A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service."}]},{"artifact":{"id":"a68feceb66c1a4cc","cpes":["cpe:2.3:a:tar:tar:1.35\\+dfsg-4ubuntu0.4:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:deb/ubuntu/tar@1.35%2Bdfsg-4ubuntu0.4?distro=ubuntu","type":"deb","version":"1.35+dfsg-4ubuntu0.4","language":"","licenses":[],"locations":[{"path":"/usr/bin/tar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/tar","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-18477","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"tar","version":"1.35+dfsg-4ubuntu0.4"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-18477","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-18477","cwe":"CWE-367","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18477","date":"2026-11-12","epss":0.00104,"percentile":0.01005}],"risk":0.052,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-18477"},"relatedVulnerabilities":[{"id":"CVE-2026-18477","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.4,"impactScore":3.6,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18477","cwe":"CWE-367","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18477","date":"2026-11-12","epss":0.00104,"percentile":0.01005}],"urls":["https://access.redhat.com/errata/RHSA-2026:49361","https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-18477","https://bugzilla.redhat.com/show_bug.cgi?id=2509735"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18477","description":"A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue."}]},{"artifact":{"id":"cc73e73ae84e47e9","cpes":["cpe:2.3:a:llvm-toolchain-21:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm-toolchain-21:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm_toolchain_21:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm_toolchain_21:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm-toolchain:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm-toolchain:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm_toolchain:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm_toolchain:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm:llvm-toolchain-21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*","cpe:2.3:a:llvm:llvm_toolchain_21:1\\:21.1.8-6ubuntu1:*:*:*:*:*:*:*"],"name":"llvm-toolchain-21","purl":"pkg:deb/ubuntu/llvm-toolchain-21@1%3A21.1.8-6ubuntu1?distro=ubuntu","type":"deb","version":"1:21.1.8-6ubuntu1","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libLLVM.so.21.1","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libLLVM.so.21.1","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-13573","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"llvm-toolchain-21","version":"1:21.1.8-6ubuntu1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-13573","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-13573","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-13573","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-13573","date":"2026-11-12","epss":0.00173,"percentile":0.06797}],"risk":0.051899999999999995,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-13573"},"relatedVulnerabilities":[{"id":"CVE-2026-13573","cvss":[{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cna@vuldb.com","vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":1.7,"impactScore":2.9,"exploitabilityScore":3.2},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13573","cwe":"CWE-119","type":"Secondary","source":"cna@vuldb.com"},{"cve":"CVE-2026-13573","cwe":"CWE-121","type":"Secondary","source":"cna@vuldb.com"}],"epss":[{"cve":"CVE-2026-13573","date":"2026-11-12","epss":0.00173,"percentile":0.06797}],"urls":["https://github.com/llvm/llvm-project/","https://github.com/llvm/llvm-project/issues/199187","https://github.com/user-attachments/files/28141697/poc.zip","https://vuldb.com/cve/CVE-2026-13573","https://vuldb.com/submit/844457","https://vuldb.com/vuln/374581","https://vuldb.com/vuln/374581/cti"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13573","description":"A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. The manipulation results in stack-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The presence of this vulnerability remains uncertain at this time. The LLVM project explains, that the reported behavior is outside its documented security scope and therefore not considered a security vulnerability."}]},{"artifact":{"id":"76fd0e2a62dc2c93","cpes":["cpe:2.3:a:dash:dash:0.5.12-12ubuntu3:*:*:*:*:*:*:*"],"name":"dash","purl":"pkg:deb/ubuntu/dash@0.5.12-12ubuntu3?distro=ubuntu","type":"deb","version":"0.5.12-12ubuntu3","language":"","licenses":[],"locations":[{"path":"/usr/bin/dash","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/dash","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-102473","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"dash","version":"0.5.12-12ubuntu3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-102473","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-102473","cwe":"CWE-1333","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102473","date":"2026-11-12","epss":0.00102,"percentile":0.00931}],"risk":0.051000000000000004,"urls":[],"severity":"Medium","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-102473"},"relatedVulnerabilities":[{"id":"CVE-2026-102473","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102473","cwe":"CWE-1333","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102473","date":"2026-11-12","epss":0.00102,"percentile":0.00931}],"urls":["https://access.redhat.com/security/cve/CVE-2026-102473","https://bugzilla.redhat.com/show_bug.cgi?id=2543005"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102473","description":"A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as *.*.*.*.*.tar.gz consume excessive CPU."}]},{"artifact":{"id":"8380e5efcb0d92d4","cpes":["cpe:2.3:a:binutils:binutils:2.46-3ubuntu2:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/ubuntu/binutils@2.46-3ubuntu2?distro=ubuntu","type":"deb","version":"2.46-3ubuntu2","language":"","licenses":[],"locations":[{"path":"/usr/bin/x86_64-linux-gnu-ar","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ar","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-as","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-as","annotations":{"evidence":"primary"}},{"path":"/usr/bin/x86_64-linux-gnu-ld.bfd","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/x86_64-linux-gnu-ld.bfd","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libbfd-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libopcodes-2.46-system.so","annotations":{"evidence":"primary"}},{"path":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libsframe.so.3.0.0","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-66861","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"binutils","version":"2.46-3ubuntu2"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2025-66861","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2025-66861","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66861","date":"2026-11-12","epss":0.00146,"percentile":0.03922}],"risk":0.0438,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2025-66861"},"relatedVulnerabilities":[{"id":"CVE-2025-66861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":2.5,"impactScore":1.5,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-66861","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-66861","date":"2026-11-12","epss":0.00146,"percentile":0.03922}],"urls":["https://github.com/caozhzh/CRGF-Vul/blob/main/cxxfilt/crash1.md"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-66861","description":"An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file."}]},{"artifact":{"id":"9ea677cc5cad86eb","cpes":["cpe:2.3:a:gnupg2:gnupg2:2.4.8-4ubuntu3.1:*:*:*:*:*:*:*"],"name":"gnupg2","purl":"pkg:deb/ubuntu/gnupg2@2.4.8-4ubuntu3.1?distro=ubuntu","type":"deb","version":"2.4.8-4ubuntu3.1","language":"","licenses":[],"locations":[{"path":"/usr/bin/gpgv","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/bin/gpgv","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-105712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"gnupg2","version":"2.4.8-4ubuntu3.1"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-105712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-105712","cwe":"CWE-61","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-105712","date":"2026-11-12","epss":0.00128,"percentile":0.02518}],"risk":0.038400000000000004,"urls":[],"severity":"Low","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-105712"},"relatedVulnerabilities":[{"id":"CVE-2026-105712","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-105712","cwe":"CWE-61","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-105712","date":"2026-11-12","epss":0.00128,"percentile":0.02518}],"urls":["https://github.com/gpg/gnupg/commit/7a2692fe5e580ae3bbb2a47abc4baaf1af65aa88","https://lists.gnupg.org/pipermail/gnupg-announce/2026q2/000504.html","https://static.dev.gnupg.org/T8159.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-105712","description":"gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user's filesystem permissions. An archive extracted into a fresh empty directory does not have this risk."}]},{"artifact":{"id":"36b88414fd82f8f2","cpes":["cpe:2.3:a:libxml2:libxml2:2.15.2\\+dfsg-0.1ubuntu0.3:*:*:*:*:*:*:*"],"name":"libxml2","purl":"pkg:deb/ubuntu/libxml2@2.15.2%2Bdfsg-0.1ubuntu0.3?distro=ubuntu","type":"deb","version":"2.15.2+dfsg-0.1ubuntu0.3","language":"","licenses":[],"locations":[{"path":"/usr/lib/x86_64-linux-gnu/libxml2.so.16.1.2","layerID":"sha256:8a5f41455867ce81bacccf2096a481677a685e0d259742f1ab861e38d1191610","accessPath":"/usr/lib/x86_64-linux-gnu/libxml2.so.16.1.2","annotations":{"evidence":"primary"}}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-11979","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"ubuntu","version":"26.04"},"package":{"name":"libxml2","version":"2.15.2+dfsg-0.1ubuntu0.3"},"namespace":"ubuntu:distro:ubuntu:26.04"}}],"vulnerability":{"id":"CVE-2026-11979","fix":{"state":"wont-fix","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2026-11979","cwe":"CWE-121","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-11979","date":"2026-11-12","epss":0.00148,"percentile":0.04091}],"risk":0.007400000000000001,"urls":[],"severity":"Negligible","namespace":"ubuntu:distro:ubuntu:26.04","advisories":[],"dataSource":"https://ubuntu.com/security/CVE-2026-11979"},"relatedVulnerabilities":[{"id":"CVE-2026-11979","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-11979","cwe":"CWE-121","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-11979","date":"2026-11-12","epss":0.00148,"percentile":0.04091}],"urls":["https://cert.pl/en/posts/2026/06/CVE-2026-11979","https://gitlab.gnome.org/GNOME/libxml2/-/commit/c2e233fc1b341685fc99621b2768b503f777a72e"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-11979","description":"libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell() function processes user input using fixed-size stack buffers without proper bounds checking.\nBy supplying an overly long input line, an attacker can overflow internal buffers (command, arg, and argv) during input parsing. This results in memory corruption within the stack frame.\nSuccessful exploitation may cause a crash or potentially allow arbitrary code execution in the context of the xmlcatalog process.\n\nThis issue has been fixed in the commit c2e233fc.\n\nNOTE:\nThe maintainers of this project did not agree that this issue is a vulnerability and considered it a bug."}]}],"grade":"D","score":"50.00","as_of":"2026-11-14T07:56:55.093Z","grype_db_version":"2026-11-13T15:40:34.000Z"}