{"grype_matches":[{"artifact":{"id":"07d7c5dfe0f85e23","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:10.6p2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123158","versionConstraint":"< 1:10.6p2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123158","fix":{"state":"fixed","versions":["1:10.6p2-1"],"available":[{"date":"2026-11-07","kind":"first-observed","version":"1:10.6p2-1"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-123158","cwe":"CWE-394","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-123158","date":"2026-11-12","epss":0.189,"percentile":0.97335}],"risk":5.250000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123158","description":"sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.","knownExploited":[{"cve":"CVE-2026-123158","cwes":["CWE-394"],"urls":["https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/","https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482","https://nvd.nist.gov/vuln/detail/CVE-2026-123158"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.openssh.org/releasenotes.html; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-12","product":"OpenSSH","dateAdded":"2026-11-09","vendorProject":"OpenBSD","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2026-123158","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123158","cwe":"CWE-394","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-123158","date":"2026-11-12","epss":0.189,"percentile":0.97335}],"urls":["https://github.com/leonjza/sshhole-lab","https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482","https://github.com/predkambrij/sshhole-repro","https://hachyderm.io/@damienmiller/117563026759098135","https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2","https://news.ycombinator.com/item?id=50377976","https://news.ycombinator.com/item?id=50378228","https://www.openssh.org/releasenotes.html#10.6p2","http://www.openwall.com/lists/oss-security/2026/11/09/27","https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/","https://github.com/coollabsio/coolify/discussions/12484","https://github.com/google/goonami-scanner/pull/277","https://github.com/panubo/docker-sshd/issues/93","https://news.ycombinator.com/item?id=50379704","https://isc.sans.edu/diary.html?storyid=33498","https://sshhole.com","https://sshole.events.greynoise.io/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-123158"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123158","description":"sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.","knownExploited":[{"cve":"CVE-2026-123158","cwes":["CWE-394"],"urls":["https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/","https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482","https://nvd.nist.gov/vuln/detail/CVE-2026-123158"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.openssh.org/releasenotes.html; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-12","product":"OpenSSH","dateAdded":"2026-11-09","vendorProject":"OpenBSD","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"c48e99fc55e4e310","cpes":["cpe:2.3:a:openssh-common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-common","purl":"pkg:deb/debian/openssh-common@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.list"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:10.6p2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123158","versionConstraint":"< 1:10.6p2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123158","fix":{"state":"fixed","versions":["1:10.6p2-1"],"available":[{"date":"2026-11-07","kind":"first-observed","version":"1:10.6p2-1"}]},"cvss":[],"cwes":[{"cve":"CVE-2026-123158","cwe":"CWE-394","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-123158","date":"2026-11-12","epss":0.189,"percentile":0.97335}],"risk":5.250000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123158","description":"sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.","knownExploited":[{"cve":"CVE-2026-123158","cwes":["CWE-394"],"urls":["https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/","https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482","https://nvd.nist.gov/vuln/detail/CVE-2026-123158"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.openssh.org/releasenotes.html; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-12","product":"OpenSSH","dateAdded":"2026-11-09","vendorProject":"OpenBSD","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]},"relatedVulnerabilities":[{"id":"CVE-2026-123158","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123158","cwe":"CWE-394","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-123158","date":"2026-11-12","epss":0.189,"percentile":0.97335}],"urls":["https://github.com/leonjza/sshhole-lab","https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482","https://github.com/predkambrij/sshhole-repro","https://hachyderm.io/@damienmiller/117563026759098135","https://marc.info/?l=openssh-unix-dev&m=179388064263131&w=2","https://news.ycombinator.com/item?id=50377976","https://news.ycombinator.com/item?id=50378228","https://www.openssh.org/releasenotes.html#10.6p2","http://www.openwall.com/lists/oss-security/2026/11/09/27","https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/","https://github.com/coollabsio/coolify/discussions/12484","https://github.com/google/goonami-scanner/pull/277","https://github.com/panubo/docker-sshd/issues/93","https://news.ycombinator.com/item?id=50379704","https://isc.sans.edu/diary.html?storyid=33498","https://sshhole.com","https://sshole.events.greynoise.io/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-123158"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123158","description":"sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.","knownExploited":[{"cve":"CVE-2026-123158","cwes":["CWE-394"],"urls":["https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/","https://github.com/openssh/openssh-portable/commit/4353fdc43ef646c43a8dda7025cc1a898caf1482","https://nvd.nist.gov/vuln/detail/CVE-2026-123158"],"notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.openssh.org/releasenotes.html; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk","dueDate":"2026-11-12","product":"OpenSSH","dateAdded":"2026-11-09","vendorProject":"OpenBSD","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"unknown"}]}]},{"artifact":{"id":"91e7bb85243f738f","cpes":["cpe:2.3:a:libwmf-0.2-7:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2-7:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2_7:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2_7:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmf-0.2-7","purl":"pkg:deb/debian/libwmf-0.2-7@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmf-0.2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmf-0.2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-0.2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-0.2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2009-3546","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2009-3546","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2009-3546","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-3546","date":"2026-11-12","epss":0.10247,"percentile":0.9575}],"risk":5.1235,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2009-3546","description":"The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information."},"relatedVulnerabilities":[{"id":"CVE-2009-3546","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2009-3546","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-3546","date":"2026-11-12","epss":0.10247,"percentile":0.9575}],"urls":["http://marc.info/?l=oss-security&m=125562113503923&w=2","http://secunia.com/advisories/37069","http://secunia.com/advisories/37080","http://secunia.com/advisories/38055","http://svn.php.net/viewvc?view=revision&revision=289557","http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","http://www.openwall.com/lists/oss-security/2009/11/20/5","http://www.redhat.com/support/errata/RHSA-2010-0003.html","http://www.securityfocus.com/bid/36712","http://www.vupen.com/english/advisories/2009/2929","http://www.vupen.com/english/advisories/2009/2930","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2009-3546","description":"The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information."}]},{"artifact":{"id":"12c86211dcc39b04","cpes":["cpe:2.3:a:libwmf-dev:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-dev:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_dev:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_dev:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmf-dev","purl":"pkg:deb/debian/libwmf-dev@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmf-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmf-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.list"},{"path":"/var/lib/dpkg/info/libwmf-dev.preinst","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.preinst"}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2009-3546","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2009-3546","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2009-3546","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-3546","date":"2026-11-12","epss":0.10247,"percentile":0.9575}],"risk":5.1235,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2009-3546","description":"The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information."},"relatedVulnerabilities":[{"id":"CVE-2009-3546","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2009-3546","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-3546","date":"2026-11-12","epss":0.10247,"percentile":0.9575}],"urls":["http://marc.info/?l=oss-security&m=125562113503923&w=2","http://secunia.com/advisories/37069","http://secunia.com/advisories/37080","http://secunia.com/advisories/38055","http://svn.php.net/viewvc?view=revision&revision=289557","http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","http://www.openwall.com/lists/oss-security/2009/11/20/5","http://www.redhat.com/support/errata/RHSA-2010-0003.html","http://www.securityfocus.com/bid/36712","http://www.vupen.com/english/advisories/2009/2929","http://www.vupen.com/english/advisories/2009/2930","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2009-3546","description":"The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information."}]},{"artifact":{"id":"3743f546c9f6c76c","cpes":["cpe:2.3:a:libwmflite-0.2-7:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2-7:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2_7:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2_7:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmflite-0.2-7","purl":"pkg:deb/debian/libwmflite-0.2-7@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmflite-0.2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmflite-0.2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmflite-0.2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmflite-0.2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2009-3546","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2009-3546","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2009-3546","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-3546","date":"2026-11-12","epss":0.10247,"percentile":0.9575}],"risk":5.1235,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2009-3546","description":"The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information."},"relatedVulnerabilities":[{"id":"CVE-2009-3546","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","metrics":{"baseScore":9.3,"impactScore":10.1,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2009-3546","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2009-3546","date":"2026-11-12","epss":0.10247,"percentile":0.9575}],"urls":["http://marc.info/?l=oss-security&m=125562113503923&w=2","http://secunia.com/advisories/37069","http://secunia.com/advisories/37080","http://secunia.com/advisories/38055","http://svn.php.net/viewvc?view=revision&revision=289557","http://www.mandriva.com/security/advisories?name=MDVSA-2009:285","http://www.openwall.com/lists/oss-security/2009/11/20/5","http://www.redhat.com/support/errata/RHSA-2010-0003.html","http://www.securityfocus.com/bid/36712","http://www.vupen.com/english/advisories/2009/2929","http://www.vupen.com/english/advisories/2009/2930","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11199"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2009-3546","description":"The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information."}]},{"artifact":{"id":"bbd6af0442b792ee","cpes":["cpe:2.3:a:libgnutls-dane0t64:libgnutls-dane0t64:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls-dane0t64:libgnutls_dane0t64:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls_dane0t64:libgnutls-dane0t64:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls_dane0t64:libgnutls_dane0t64:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls:libgnutls-dane0t64:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls:libgnutls_dane0t64:3.8.13-1:*:*:*:*:*:*:*"],"name":"libgnutls-dane0t64","purl":"pkg:deb/debian/libgnutls-dane0t64@3.8.13-1?arch=amd64&distro=debian&upstream=gnutls28","type":"deb","version":"3.8.13-1","language":"","licenses":["sha256:254cf9e243b7294627dcdc33ea2e975cf9ab32fac5229f46f069759876f4584a"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls-dane0t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgnutls-dane0t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls-dane0t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgnutls-dane0t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2011-3389","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gnutls28","version":"3.8.13-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2011-3389","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2011-3389","cwe":"CWE-326","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-3389","date":"2026-11-12","epss":0.73327,"percentile":0.99469}],"risk":3.66635,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2011-3389","description":"The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."},"relatedVulnerabilities":[{"id":"CVE-2011-3389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2011-3389","cwe":"CWE-326","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-3389","date":"2026-11-12","epss":0.73327,"percentile":0.99469}],"urls":["http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/","http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx","http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx","http://curl.haxx.se/docs/adv_20120124B.html","http://downloads.asterisk.org/pub/security/AST-2016-001.html","http://ekoparty.org/2011/juliano-rizzo.php","http://eprint.iacr.org/2004/111","http://eprint.iacr.org/2006/136","http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html","http://isc.sans.edu/diary/SSL+TLS+part+3+/11635","http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html","http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html","http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html","http://lists.apple.com/archives/security-announce/2012/May/msg00001.html","http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html","http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html","http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html","http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://marc.info/?l=bugtraq&m=132750579901589&w=2","http://marc.info/?l=bugtraq&m=132872385320240&w=2","http://marc.info/?l=bugtraq&m=133365109612558&w=2","http://marc.info/?l=bugtraq&m=133728004526190&w=2","http://marc.info/?l=bugtraq&m=134254866602253&w=2","http://marc.info/?l=bugtraq&m=134254957702612&w=2","http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue","http://osvdb.org/74829","http://rhn.redhat.com/errata/RHSA-2012-0508.html","http://rhn.redhat.com/errata/RHSA-2013-1455.html","http://secunia.com/advisories/45791","http://secunia.com/advisories/47998","http://secunia.com/advisories/48256","http://secunia.com/advisories/48692","http://secunia.com/advisories/48915","http://secunia.com/advisories/48948","http://secunia.com/advisories/49198","http://secunia.com/advisories/55322","http://secunia.com/advisories/55350","http://secunia.com/advisories/55351","http://security.gentoo.org/glsa/glsa-201203-02.xml","http://security.gentoo.org/glsa/glsa-201406-32.xml","http://support.apple.com/kb/HT4999","http://support.apple.com/kb/HT5001","http://support.apple.com/kb/HT5130","http://support.apple.com/kb/HT5281","http://support.apple.com/kb/HT5501","http://support.apple.com/kb/HT6150","http://technet.microsoft.com/security/advisory/2588513","http://vnhacker.blogspot.com/2011/09/beast.html","http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf","http://www.debian.org/security/2012/dsa-2398","http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html","http://www.ibm.com/developerworks/java/jdk/alerts/","http://www.imperialviolet.org/2011/09/23/chromeandbeast.html","http://www.insecure.cl/Beast-SSL.rar","http://www.kb.cert.org/vuls/id/864643","http://www.mandriva.com/security/advisories?name=MDVSA-2012:058","http://www.opera.com/docs/changelogs/mac/1151/","http://www.opera.com/docs/changelogs/mac/1160/","http://www.opera.com/docs/changelogs/unix/1151/","http://www.opera.com/docs/changelogs/unix/1160/","http://www.opera.com/docs/changelogs/windows/1151/","http://www.opera.com/docs/changelogs/windows/1160/","http://www.opera.com/support/kb/view/1004/","http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html","http://www.redhat.com/support/errata/RHSA-2011-1384.html","http://www.redhat.com/support/errata/RHSA-2012-0006.html","http://www.securityfocus.com/bid/49388","http://www.securityfocus.com/bid/49778","http://www.securitytracker.com/id/1029190","http://www.securitytracker.com/id?1025997","http://www.securitytracker.com/id?1026103","http://www.securitytracker.com/id?1026704","http://www.ubuntu.com/usn/USN-1263-1","http://www.us-cert.gov/cas/techalerts/TA12-010A.html","https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail","https://bugzilla.novell.com/show_bug.cgi?id=719047","https://bugzilla.redhat.com/show_bug.cgi?id=737506","https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf","https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006","https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862","https://hermes.opensuse.org/messages/13154861","https://hermes.opensuse.org/messages/13155432","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2011-3389","description":"The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."}]},{"artifact":{"id":"3123ec28d5ccb5a2","cpes":["cpe:2.3:a:libgnutls28-dev:libgnutls28-dev:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls28-dev:libgnutls28_dev:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls28_dev:libgnutls28-dev:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls28_dev:libgnutls28_dev:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls28:libgnutls28-dev:3.8.13-1:*:*:*:*:*:*:*","cpe:2.3:a:libgnutls28:libgnutls28_dev:3.8.13-1:*:*:*:*:*:*:*"],"name":"libgnutls28-dev","purl":"pkg:deb/debian/libgnutls28-dev@3.8.13-1?arch=amd64&distro=debian&upstream=gnutls28","type":"deb","version":"3.8.13-1","language":"","licenses":["sha256:254cf9e243b7294627dcdc33ea2e975cf9ab32fac5229f46f069759876f4584a"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls28-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgnutls28-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls28-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgnutls28-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2011-3389","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gnutls28","version":"3.8.13-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2011-3389","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2011-3389","cwe":"CWE-326","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-3389","date":"2026-11-12","epss":0.73327,"percentile":0.99469}],"risk":3.66635,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2011-3389","description":"The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."},"relatedVulnerabilities":[{"id":"CVE-2011-3389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2011-3389","cwe":"CWE-326","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-3389","date":"2026-11-12","epss":0.73327,"percentile":0.99469}],"urls":["http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/","http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx","http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx","http://curl.haxx.se/docs/adv_20120124B.html","http://downloads.asterisk.org/pub/security/AST-2016-001.html","http://ekoparty.org/2011/juliano-rizzo.php","http://eprint.iacr.org/2004/111","http://eprint.iacr.org/2006/136","http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html","http://isc.sans.edu/diary/SSL+TLS+part+3+/11635","http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html","http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html","http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html","http://lists.apple.com/archives/security-announce/2012/May/msg00001.html","http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html","http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html","http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html","http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://marc.info/?l=bugtraq&m=132750579901589&w=2","http://marc.info/?l=bugtraq&m=132872385320240&w=2","http://marc.info/?l=bugtraq&m=133365109612558&w=2","http://marc.info/?l=bugtraq&m=133728004526190&w=2","http://marc.info/?l=bugtraq&m=134254866602253&w=2","http://marc.info/?l=bugtraq&m=134254957702612&w=2","http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue","http://osvdb.org/74829","http://rhn.redhat.com/errata/RHSA-2012-0508.html","http://rhn.redhat.com/errata/RHSA-2013-1455.html","http://secunia.com/advisories/45791","http://secunia.com/advisories/47998","http://secunia.com/advisories/48256","http://secunia.com/advisories/48692","http://secunia.com/advisories/48915","http://secunia.com/advisories/48948","http://secunia.com/advisories/49198","http://secunia.com/advisories/55322","http://secunia.com/advisories/55350","http://secunia.com/advisories/55351","http://security.gentoo.org/glsa/glsa-201203-02.xml","http://security.gentoo.org/glsa/glsa-201406-32.xml","http://support.apple.com/kb/HT4999","http://support.apple.com/kb/HT5001","http://support.apple.com/kb/HT5130","http://support.apple.com/kb/HT5281","http://support.apple.com/kb/HT5501","http://support.apple.com/kb/HT6150","http://technet.microsoft.com/security/advisory/2588513","http://vnhacker.blogspot.com/2011/09/beast.html","http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf","http://www.debian.org/security/2012/dsa-2398","http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html","http://www.ibm.com/developerworks/java/jdk/alerts/","http://www.imperialviolet.org/2011/09/23/chromeandbeast.html","http://www.insecure.cl/Beast-SSL.rar","http://www.kb.cert.org/vuls/id/864643","http://www.mandriva.com/security/advisories?name=MDVSA-2012:058","http://www.opera.com/docs/changelogs/mac/1151/","http://www.opera.com/docs/changelogs/mac/1160/","http://www.opera.com/docs/changelogs/unix/1151/","http://www.opera.com/docs/changelogs/unix/1160/","http://www.opera.com/docs/changelogs/windows/1151/","http://www.opera.com/docs/changelogs/windows/1160/","http://www.opera.com/support/kb/view/1004/","http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html","http://www.redhat.com/support/errata/RHSA-2011-1384.html","http://www.redhat.com/support/errata/RHSA-2012-0006.html","http://www.securityfocus.com/bid/49388","http://www.securityfocus.com/bid/49778","http://www.securitytracker.com/id/1029190","http://www.securitytracker.com/id?1025997","http://www.securitytracker.com/id?1026103","http://www.securitytracker.com/id?1026704","http://www.ubuntu.com/usn/USN-1263-1","http://www.us-cert.gov/cas/techalerts/TA12-010A.html","https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail","https://bugzilla.novell.com/show_bug.cgi?id=719047","https://bugzilla.redhat.com/show_bug.cgi?id=737506","https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf","https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006","https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862","https://hermes.opensuse.org/messages/13154861","https://hermes.opensuse.org/messages/13155432","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2011-3389","description":"The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."}]},{"artifact":{"id":"b7f45adf2290e0f3","cpes":["cpe:2.3:a:libgnutls30t64:libgnutls30t64:3.8.13-1:*:*:*:*:*:*:*"],"name":"libgnutls30t64","purl":"pkg:deb/debian/libgnutls30t64@3.8.13-1?arch=amd64&distro=debian&upstream=gnutls28","type":"deb","version":"3.8.13-1","language":"","licenses":["sha256:254cf9e243b7294627dcdc33ea2e975cf9ab32fac5229f46f069759876f4584a"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgnutls30t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgnutls30t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgnutls30t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgnutls30t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gnutls28"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2011-3389","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gnutls28","version":"3.8.13-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2011-3389","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2011-3389","cwe":"CWE-326","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-3389","date":"2026-11-12","epss":0.73327,"percentile":0.99469}],"risk":3.66635,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2011-3389","description":"The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."},"relatedVulnerabilities":[{"id":"CVE-2011-3389","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2011-3389","cwe":"CWE-326","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2011-3389","date":"2026-11-12","epss":0.73327,"percentile":0.99469}],"urls":["http://blog.mozilla.com/security/2011/09/27/attack-against-tls-protected-communications/","http://blogs.technet.com/b/msrc/archive/2011/09/26/microsoft-releases-security-advisory-2588513.aspx","http://blogs.technet.com/b/srd/archive/2011/09/26/is-ssl-broken-more-about-security-advisory-2588513.aspx","http://curl.haxx.se/docs/adv_20120124B.html","http://downloads.asterisk.org/pub/security/AST-2016-001.html","http://ekoparty.org/2011/juliano-rizzo.php","http://eprint.iacr.org/2004/111","http://eprint.iacr.org/2006/136","http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html","http://isc.sans.edu/diary/SSL+TLS+part+3+/11635","http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html","http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html","http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","http://lists.apple.com/archives/security-announce/2012/Jul/msg00001.html","http://lists.apple.com/archives/security-announce/2012/May/msg00001.html","http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html","http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00049.html","http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00051.html","http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00009.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html","http://marc.info/?l=bugtraq&m=132750579901589&w=2","http://marc.info/?l=bugtraq&m=132872385320240&w=2","http://marc.info/?l=bugtraq&m=133365109612558&w=2","http://marc.info/?l=bugtraq&m=133728004526190&w=2","http://marc.info/?l=bugtraq&m=134254866602253&w=2","http://marc.info/?l=bugtraq&m=134254957702612&w=2","http://my.opera.com/securitygroup/blog/2011/09/28/the-beast-ssl-tls-issue","http://osvdb.org/74829","http://rhn.redhat.com/errata/RHSA-2012-0508.html","http://rhn.redhat.com/errata/RHSA-2013-1455.html","http://secunia.com/advisories/45791","http://secunia.com/advisories/47998","http://secunia.com/advisories/48256","http://secunia.com/advisories/48692","http://secunia.com/advisories/48915","http://secunia.com/advisories/48948","http://secunia.com/advisories/49198","http://secunia.com/advisories/55322","http://secunia.com/advisories/55350","http://secunia.com/advisories/55351","http://security.gentoo.org/glsa/glsa-201203-02.xml","http://security.gentoo.org/glsa/glsa-201406-32.xml","http://support.apple.com/kb/HT4999","http://support.apple.com/kb/HT5001","http://support.apple.com/kb/HT5130","http://support.apple.com/kb/HT5281","http://support.apple.com/kb/HT5501","http://support.apple.com/kb/HT6150","http://technet.microsoft.com/security/advisory/2588513","http://vnhacker.blogspot.com/2011/09/beast.html","http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf","http://www.debian.org/security/2012/dsa-2398","http://www.educatedguesswork.org/2011/09/security_impact_of_the_rizzodu.html","http://www.ibm.com/developerworks/java/jdk/alerts/","http://www.imperialviolet.org/2011/09/23/chromeandbeast.html","http://www.insecure.cl/Beast-SSL.rar","http://www.kb.cert.org/vuls/id/864643","http://www.mandriva.com/security/advisories?name=MDVSA-2012:058","http://www.opera.com/docs/changelogs/mac/1151/","http://www.opera.com/docs/changelogs/mac/1160/","http://www.opera.com/docs/changelogs/unix/1151/","http://www.opera.com/docs/changelogs/unix/1160/","http://www.opera.com/docs/changelogs/windows/1151/","http://www.opera.com/docs/changelogs/windows/1160/","http://www.opera.com/support/kb/view/1004/","http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html","http://www.redhat.com/support/errata/RHSA-2011-1384.html","http://www.redhat.com/support/errata/RHSA-2012-0006.html","http://www.securityfocus.com/bid/49388","http://www.securityfocus.com/bid/49778","http://www.securitytracker.com/id/1029190","http://www.securitytracker.com/id?1025997","http://www.securitytracker.com/id?1026103","http://www.securitytracker.com/id?1026704","http://www.ubuntu.com/usn/USN-1263-1","http://www.us-cert.gov/cas/techalerts/TA12-010A.html","https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail","https://bugzilla.novell.com/show_bug.cgi?id=719047","https://bugzilla.redhat.com/show_bug.cgi?id=737506","https://cert-portal.siemens.com/productcert/pdf/ssa-556833.pdf","https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-006","https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862","https://hermes.opensuse.org/messages/13154861","https://hermes.opensuse.org/messages/13155432","https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14752"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2011-3389","description":"The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack."}]},{"artifact":{"id":"91e7bb85243f738f","cpes":["cpe:2.3:a:libwmf-0.2-7:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2-7:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2_7:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2_7:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmf-0.2-7","purl":"pkg:deb/debian/libwmf-0.2-7@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmf-0.2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmf-0.2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-0.2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-0.2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3996","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3996","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3996","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3996","date":"2026-11-12","epss":0.04219,"percentile":0.91128}],"risk":2.1094999999999997,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3996","description":"Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function."},"relatedVulnerabilities":[{"id":"CVE-2007-3996","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3996","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3996","date":"2026-11-12","epss":0.04219,"percentile":0.91128}],"urls":["http://bugs.gentoo.org/show_bug.cgi?id=201546","http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html","http://rhn.redhat.com/errata/RHSA-2007-0889.html","http://secunia.com/advisories/26642","http://secunia.com/advisories/26822","http://secunia.com/advisories/26838","http://secunia.com/advisories/26871","http://secunia.com/advisories/26895","http://secunia.com/advisories/26930","http://secunia.com/advisories/26967","http://secunia.com/advisories/27102","http://secunia.com/advisories/27351","http://secunia.com/advisories/27377","http://secunia.com/advisories/27545","http://secunia.com/advisories/28009","http://secunia.com/advisories/28147","http://secunia.com/advisories/28658","http://secunia.com/advisories/31168","http://security.gentoo.org/glsa/glsa-200712-13.xml","http://securityreason.com/securityalert/3103","http://secweb.se/en/advisories/php-imagecopyresized-integer-overflow/","http://secweb.se/en/advisories/php-imagecreatetruecolor-integer-overflow/","http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm","http://www.debian.org/security/2008/dsa-1613","http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml","http://www.mandriva.com/security/advisories?name=MDKSA-2007:187","http://www.php.net/ChangeLog-5.php#5.2.4","http://www.php.net/releases/5_2_4.php","http://www.redhat.com/support/errata/RHSA-2007-0888.html","http://www.redhat.com/support/errata/RHSA-2007-0890.html","http://www.redhat.com/support/errata/RHSA-2007-0891.html","http://www.trustix.org/errata/2007/0026/","http://www.ubuntu.com/usn/usn-557-1","http://www.vupen.com/english/advisories/2007/3023","https://exchange.xforce.ibmcloud.com/vulnerabilities/36382","https://exchange.xforce.ibmcloud.com/vulnerabilities/36383","https://issues.rpath.com/browse/RPL-1693","https://issues.rpath.com/browse/RPL-1702","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11147","https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3996","description":"Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function."}]},{"artifact":{"id":"12c86211dcc39b04","cpes":["cpe:2.3:a:libwmf-dev:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-dev:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_dev:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_dev:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmf-dev","purl":"pkg:deb/debian/libwmf-dev@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmf-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmf-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.list"},{"path":"/var/lib/dpkg/info/libwmf-dev.preinst","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.preinst"}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3996","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3996","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3996","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3996","date":"2026-11-12","epss":0.04219,"percentile":0.91128}],"risk":2.1094999999999997,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3996","description":"Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function."},"relatedVulnerabilities":[{"id":"CVE-2007-3996","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3996","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3996","date":"2026-11-12","epss":0.04219,"percentile":0.91128}],"urls":["http://bugs.gentoo.org/show_bug.cgi?id=201546","http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html","http://rhn.redhat.com/errata/RHSA-2007-0889.html","http://secunia.com/advisories/26642","http://secunia.com/advisories/26822","http://secunia.com/advisories/26838","http://secunia.com/advisories/26871","http://secunia.com/advisories/26895","http://secunia.com/advisories/26930","http://secunia.com/advisories/26967","http://secunia.com/advisories/27102","http://secunia.com/advisories/27351","http://secunia.com/advisories/27377","http://secunia.com/advisories/27545","http://secunia.com/advisories/28009","http://secunia.com/advisories/28147","http://secunia.com/advisories/28658","http://secunia.com/advisories/31168","http://security.gentoo.org/glsa/glsa-200712-13.xml","http://securityreason.com/securityalert/3103","http://secweb.se/en/advisories/php-imagecopyresized-integer-overflow/","http://secweb.se/en/advisories/php-imagecreatetruecolor-integer-overflow/","http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm","http://www.debian.org/security/2008/dsa-1613","http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml","http://www.mandriva.com/security/advisories?name=MDKSA-2007:187","http://www.php.net/ChangeLog-5.php#5.2.4","http://www.php.net/releases/5_2_4.php","http://www.redhat.com/support/errata/RHSA-2007-0888.html","http://www.redhat.com/support/errata/RHSA-2007-0890.html","http://www.redhat.com/support/errata/RHSA-2007-0891.html","http://www.trustix.org/errata/2007/0026/","http://www.ubuntu.com/usn/usn-557-1","http://www.vupen.com/english/advisories/2007/3023","https://exchange.xforce.ibmcloud.com/vulnerabilities/36382","https://exchange.xforce.ibmcloud.com/vulnerabilities/36383","https://issues.rpath.com/browse/RPL-1693","https://issues.rpath.com/browse/RPL-1702","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11147","https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3996","description":"Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function."}]},{"artifact":{"id":"3743f546c9f6c76c","cpes":["cpe:2.3:a:libwmflite-0.2-7:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2-7:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2_7:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2_7:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmflite-0.2-7","purl":"pkg:deb/debian/libwmflite-0.2-7@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmflite-0.2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmflite-0.2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmflite-0.2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmflite-0.2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3996","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3996","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3996","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3996","date":"2026-11-12","epss":0.04219,"percentile":0.91128}],"risk":2.1094999999999997,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3996","description":"Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function."},"relatedVulnerabilities":[{"id":"CVE-2007-3996","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3996","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3996","date":"2026-11-12","epss":0.04219,"percentile":0.91128}],"urls":["http://bugs.gentoo.org/show_bug.cgi?id=201546","http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html","http://rhn.redhat.com/errata/RHSA-2007-0889.html","http://secunia.com/advisories/26642","http://secunia.com/advisories/26822","http://secunia.com/advisories/26838","http://secunia.com/advisories/26871","http://secunia.com/advisories/26895","http://secunia.com/advisories/26930","http://secunia.com/advisories/26967","http://secunia.com/advisories/27102","http://secunia.com/advisories/27351","http://secunia.com/advisories/27377","http://secunia.com/advisories/27545","http://secunia.com/advisories/28009","http://secunia.com/advisories/28147","http://secunia.com/advisories/28658","http://secunia.com/advisories/31168","http://security.gentoo.org/glsa/glsa-200712-13.xml","http://securityreason.com/securityalert/3103","http://secweb.se/en/advisories/php-imagecopyresized-integer-overflow/","http://secweb.se/en/advisories/php-imagecreatetruecolor-integer-overflow/","http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm","http://www.debian.org/security/2008/dsa-1613","http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml","http://www.mandriva.com/security/advisories?name=MDKSA-2007:187","http://www.php.net/ChangeLog-5.php#5.2.4","http://www.php.net/releases/5_2_4.php","http://www.redhat.com/support/errata/RHSA-2007-0888.html","http://www.redhat.com/support/errata/RHSA-2007-0890.html","http://www.redhat.com/support/errata/RHSA-2007-0891.html","http://www.trustix.org/errata/2007/0026/","http://www.ubuntu.com/usn/usn-557-1","http://www.vupen.com/english/advisories/2007/3023","https://exchange.xforce.ibmcloud.com/vulnerabilities/36382","https://exchange.xforce.ibmcloud.com/vulnerabilities/36383","https://issues.rpath.com/browse/RPL-1693","https://issues.rpath.com/browse/RPL-1702","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11147","https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3996","description":"Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function."}]},{"artifact":{"id":"91e7bb85243f738f","cpes":["cpe:2.3:a:libwmf-0.2-7:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2-7:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2_7:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2_7:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmf-0.2-7","purl":"pkg:deb/debian/libwmf-0.2-7@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmf-0.2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmf-0.2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-0.2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-0.2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3477","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3477","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3477","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3477","date":"2026-11-12","epss":0.04857,"percentile":0.92155}],"risk":1.4571,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3477","description":"The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value."},"relatedVulnerabilities":[{"id":"CVE-2007-3477","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3477","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3477","date":"2026-11-12","epss":0.04857,"percentile":0.92155}],"urls":["ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz","http://bugs.libgd.org/?do=details&task_id=74","http://bugs.libgd.org/?do=details&task_id=92","http://fedoranews.org/updates/FEDORA-2007-205.shtml","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html","http://osvdb.org/42062","http://secunia.com/advisories/25860","http://secunia.com/advisories/26272","http://secunia.com/advisories/26390","http://secunia.com/advisories/26415","http://secunia.com/advisories/26467","http://secunia.com/advisories/26663","http://secunia.com/advisories/26766","http://secunia.com/advisories/26856","http://secunia.com/advisories/30168","http://secunia.com/advisories/31168","http://secunia.com/advisories/42813","http://security.gentoo.org/glsa/glsa-200708-05.xml","http://security.gentoo.org/glsa/glsa-200711-34.xml","http://security.gentoo.org/glsa/glsa-200805-13.xml","http://www.debian.org/security/2008/dsa-1613","http://www.libgd.org/ReleaseNote020035","http://www.mandriva.com/security/advisories?name=MDKSA-2007:153","http://www.mandriva.com/security/advisories?name=MDKSA-2007:164","http://www.novell.com/linux/security/advisories/2007_15_sr.html","http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html","http://www.securityfocus.com/archive/1/478796/100/0/threaded","http://www.securityfocus.com/bid/24651","http://www.trustix.org/errata/2007/0024/","http://www.vupen.com/english/advisories/2011/0022","https://bugzilla.redhat.com/show_bug.cgi?id=277421","https://issues.rpath.com/browse/RPL-1643"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3477","description":"The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value."}]},{"artifact":{"id":"12c86211dcc39b04","cpes":["cpe:2.3:a:libwmf-dev:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-dev:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_dev:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_dev:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmf-dev","purl":"pkg:deb/debian/libwmf-dev@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmf-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmf-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.list"},{"path":"/var/lib/dpkg/info/libwmf-dev.preinst","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.preinst"}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3477","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3477","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3477","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3477","date":"2026-11-12","epss":0.04857,"percentile":0.92155}],"risk":1.4571,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3477","description":"The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value."},"relatedVulnerabilities":[{"id":"CVE-2007-3477","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3477","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3477","date":"2026-11-12","epss":0.04857,"percentile":0.92155}],"urls":["ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz","http://bugs.libgd.org/?do=details&task_id=74","http://bugs.libgd.org/?do=details&task_id=92","http://fedoranews.org/updates/FEDORA-2007-205.shtml","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html","http://osvdb.org/42062","http://secunia.com/advisories/25860","http://secunia.com/advisories/26272","http://secunia.com/advisories/26390","http://secunia.com/advisories/26415","http://secunia.com/advisories/26467","http://secunia.com/advisories/26663","http://secunia.com/advisories/26766","http://secunia.com/advisories/26856","http://secunia.com/advisories/30168","http://secunia.com/advisories/31168","http://secunia.com/advisories/42813","http://security.gentoo.org/glsa/glsa-200708-05.xml","http://security.gentoo.org/glsa/glsa-200711-34.xml","http://security.gentoo.org/glsa/glsa-200805-13.xml","http://www.debian.org/security/2008/dsa-1613","http://www.libgd.org/ReleaseNote020035","http://www.mandriva.com/security/advisories?name=MDKSA-2007:153","http://www.mandriva.com/security/advisories?name=MDKSA-2007:164","http://www.novell.com/linux/security/advisories/2007_15_sr.html","http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html","http://www.securityfocus.com/archive/1/478796/100/0/threaded","http://www.securityfocus.com/bid/24651","http://www.trustix.org/errata/2007/0024/","http://www.vupen.com/english/advisories/2011/0022","https://bugzilla.redhat.com/show_bug.cgi?id=277421","https://issues.rpath.com/browse/RPL-1643"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3477","description":"The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value."}]},{"artifact":{"id":"3743f546c9f6c76c","cpes":["cpe:2.3:a:libwmflite-0.2-7:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2-7:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2_7:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2_7:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmflite-0.2-7","purl":"pkg:deb/debian/libwmflite-0.2-7@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmflite-0.2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmflite-0.2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmflite-0.2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmflite-0.2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3477","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3477","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3477","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3477","date":"2026-11-12","epss":0.04857,"percentile":0.92155}],"risk":1.4571,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3477","description":"The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value."},"relatedVulnerabilities":[{"id":"CVE-2007-3477","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3477","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3477","date":"2026-11-12","epss":0.04857,"percentile":0.92155}],"urls":["ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz","http://bugs.libgd.org/?do=details&task_id=74","http://bugs.libgd.org/?do=details&task_id=92","http://fedoranews.org/updates/FEDORA-2007-205.shtml","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html","http://osvdb.org/42062","http://secunia.com/advisories/25860","http://secunia.com/advisories/26272","http://secunia.com/advisories/26390","http://secunia.com/advisories/26415","http://secunia.com/advisories/26467","http://secunia.com/advisories/26663","http://secunia.com/advisories/26766","http://secunia.com/advisories/26856","http://secunia.com/advisories/30168","http://secunia.com/advisories/31168","http://secunia.com/advisories/42813","http://security.gentoo.org/glsa/glsa-200708-05.xml","http://security.gentoo.org/glsa/glsa-200711-34.xml","http://security.gentoo.org/glsa/glsa-200805-13.xml","http://www.debian.org/security/2008/dsa-1613","http://www.libgd.org/ReleaseNote020035","http://www.mandriva.com/security/advisories?name=MDKSA-2007:153","http://www.mandriva.com/security/advisories?name=MDKSA-2007:164","http://www.novell.com/linux/security/advisories/2007_15_sr.html","http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html","http://www.securityfocus.com/archive/1/478796/100/0/threaded","http://www.securityfocus.com/bid/24651","http://www.trustix.org/errata/2007/0024/","http://www.vupen.com/english/advisories/2011/0022","https://bugzilla.redhat.com/show_bug.cgi?id=277421","https://issues.rpath.com/browse/RPL-1643"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3477","description":"The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (CPU consumption) via a large (1) start or (2) end angle degree value."}]},{"artifact":{"id":"07d7c5dfe0f85e23","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-6110","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-6110","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-6110","date":"2026-11-12","epss":0.24901,"percentile":0.9794}],"risk":1.2450500000000002,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-6110","description":"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred."},"relatedVulnerabilities":[{"id":"CVE-2019-6110","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","metrics":{"baseScore":4,"impactScore":5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-6110","date":"2026-11-12","epss":0.24901,"percentile":0.9794}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c","https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c","https://security.gentoo.org/glsa/201903-16","https://security.netapp.com/advisory/ntap-20190213-0001/","https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt","https://www.exploit-db.com/exploits/46193/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-412672.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-6110","description":"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred."}]},{"artifact":{"id":"c48e99fc55e4e310","cpes":["cpe:2.3:a:openssh-common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-common","purl":"pkg:deb/debian/openssh-common@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.list"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-6110","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-6110","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-6110","date":"2026-11-12","epss":0.24901,"percentile":0.9794}],"risk":1.2450500000000002,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-6110","description":"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred."},"relatedVulnerabilities":[{"id":"CVE-2019-6110","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","metrics":{"baseScore":4,"impactScore":5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","metrics":{"baseScore":6.8,"impactScore":5.2,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2019-6110","cwe":"CWE-838","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2019-6110","date":"2026-11-12","epss":0.24901,"percentile":0.9794}],"urls":["https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf","https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c","https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c","https://security.gentoo.org/glsa/201903-16","https://security.netapp.com/advisory/ntap-20190213-0001/","https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt","https://www.exploit-db.com/exploits/46193/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-412672.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-6110","description":"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-92392","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92392","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"risk":1.00152,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object."},"relatedVulnerabilities":[{"id":"CVE-2026-92392","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"urls":["https://curl.se/docs/CVE-2026-92392.html","https://curl.se/docs/CVE-2026-92392.json","https://hackerone.com/reports/4030333","http://www.openwall.com/lists/oss-security/2026/10/18/5","http://www.openwall.com/lists/oss-security/2026/10/18/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92392","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92392","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"risk":1.00152,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object."},"relatedVulnerabilities":[{"id":"CVE-2026-92392","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"urls":["https://curl.se/docs/CVE-2026-92392.html","https://curl.se/docs/CVE-2026-92392.json","https://hackerone.com/reports/4030333","http://www.openwall.com/lists/oss-security/2026/10/18/5","http://www.openwall.com/lists/oss-security/2026/10/18/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92392","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92392","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"risk":1.00152,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object."},"relatedVulnerabilities":[{"id":"CVE-2026-92392","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"urls":["https://curl.se/docs/CVE-2026-92392.html","https://curl.se/docs/CVE-2026-92392.json","https://hackerone.com/reports/4030333","http://www.openwall.com/lists/oss-security/2026/10/18/5","http://www.openwall.com/lists/oss-security/2026/10/18/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92392","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92392","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"risk":1.00152,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object."},"relatedVulnerabilities":[{"id":"CVE-2026-92392","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"urls":["https://curl.se/docs/CVE-2026-92392.html","https://curl.se/docs/CVE-2026-92392.json","https://hackerone.com/reports/4030333","http://www.openwall.com/lists/oss-security/2026/10/18/5","http://www.openwall.com/lists/oss-security/2026/10/18/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92392","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92392","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"risk":1.00152,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object."},"relatedVulnerabilities":[{"id":"CVE-2026-92392","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92392","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92392","date":"2026-11-12","epss":0.01284,"percentile":0.70529}],"urls":["https://curl.se/docs/CVE-2026-92392.html","https://curl.se/docs/CVE-2026-92392.json","https://hackerone.com/reports/4030333","http://www.openwall.com/lists/oss-security/2026/10/18/5","http://www.openwall.com/lists/oss-security/2026/10/18/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92392","description":"During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after\nfree of a `struct Curl_easy` object."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-92391","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92391","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"risk":0.8744999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process."},"relatedVulnerabilities":[{"id":"CVE-2026-92391","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"urls":["https://curl.se/docs/CVE-2026-92391.html","https://curl.se/docs/CVE-2026-92391.json","https://hackerone.com/reports/4024222"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl during normal cleanup operations. An excessive\nrecursion depth within `curl_mime_free` leads to unbounded stack frame\nallocation during structure traversal, ultimately crashing the host process."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92391","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92391","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"risk":0.8744999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process."},"relatedVulnerabilities":[{"id":"CVE-2026-92391","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"urls":["https://curl.se/docs/CVE-2026-92391.html","https://curl.se/docs/CVE-2026-92391.json","https://hackerone.com/reports/4024222"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl during normal cleanup operations. An excessive\nrecursion depth within `curl_mime_free` leads to unbounded stack frame\nallocation during structure traversal, ultimately crashing the host process."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92391","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92391","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"risk":0.8744999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process."},"relatedVulnerabilities":[{"id":"CVE-2026-92391","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"urls":["https://curl.se/docs/CVE-2026-92391.html","https://curl.se/docs/CVE-2026-92391.json","https://hackerone.com/reports/4024222"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl during normal cleanup operations. An excessive\nrecursion depth within `curl_mime_free` leads to unbounded stack frame\nallocation during structure traversal, ultimately crashing the host process."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92391","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92391","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"risk":0.8744999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process."},"relatedVulnerabilities":[{"id":"CVE-2026-92391","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"urls":["https://curl.se/docs/CVE-2026-92391.html","https://curl.se/docs/CVE-2026-92391.json","https://hackerone.com/reports/4024222"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl during normal cleanup operations. An excessive\nrecursion depth within `curl_mime_free` leads to unbounded stack frame\nallocation during structure traversal, ultimately crashing the host process."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92391","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92391","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"risk":0.8744999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process."},"relatedVulnerabilities":[{"id":"CVE-2026-92391","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92391","cwe":"CWE-674","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92391","date":"2026-11-12","epss":0.01166,"percentile":0.67764}],"urls":["https://curl.se/docs/CVE-2026-92391.html","https://curl.se/docs/CVE-2026-92391.json","https://hackerone.com/reports/4024222"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92391","description":"A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl during normal cleanup operations. An excessive\nrecursion depth within `curl_mime_free` leads to unbounded stack frame\nallocation during structure traversal, ultimately crashing the host process."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-92387","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92387","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"risk":0.8151,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92387","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"urls":["https://curl.se/docs/CVE-2026-92387.html","https://curl.se/docs/CVE-2026-92387.json","https://hackerone.com/reports/4022003"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP,\nIMAP, POP3, or SMTP server can exploit libcurl and completely bypass its\nconfigured transfer timeout mechanism, indefinitely blocking all concurrent\ntransfers bound to the same multi-handle."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92387","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92387","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"risk":0.8151,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92387","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"urls":["https://curl.se/docs/CVE-2026-92387.html","https://curl.se/docs/CVE-2026-92387.json","https://hackerone.com/reports/4022003"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP,\nIMAP, POP3, or SMTP server can exploit libcurl and completely bypass its\nconfigured transfer timeout mechanism, indefinitely blocking all concurrent\ntransfers bound to the same multi-handle."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92387","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92387","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"risk":0.8151,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92387","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"urls":["https://curl.se/docs/CVE-2026-92387.html","https://curl.se/docs/CVE-2026-92387.json","https://hackerone.com/reports/4022003"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP,\nIMAP, POP3, or SMTP server can exploit libcurl and completely bypass its\nconfigured transfer timeout mechanism, indefinitely blocking all concurrent\ntransfers bound to the same multi-handle."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92387","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92387","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"risk":0.8151,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92387","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"urls":["https://curl.se/docs/CVE-2026-92387.html","https://curl.se/docs/CVE-2026-92387.json","https://hackerone.com/reports/4022003"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP,\nIMAP, POP3, or SMTP server can exploit libcurl and completely bypass its\nconfigured transfer timeout mechanism, indefinitely blocking all concurrent\ntransfers bound to the same multi-handle."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92387","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92387","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"risk":0.8151,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92387","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92387","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92387","date":"2026-11-12","epss":0.01045,"percentile":0.64615}],"urls":["https://curl.se/docs/CVE-2026-92387.html","https://curl.se/docs/CVE-2026-92387.json","https://hackerone.com/reports/4022003"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92387","description":"By permanently omitting the final control-response line, a malicious FTP,\nIMAP, POP3, or SMTP server can exploit libcurl and completely bypass its\nconfigured transfer timeout mechanism, indefinitely blocking all concurrent\ntransfers bound to the same multi-handle."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87862","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87862","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"risk":0.7761,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2026-87862","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"urls":["https://curl.se/docs/CVE-2026-87862.html","https://curl.se/docs/CVE-2026-87862.json","https://hackerone.com/reports/3972357"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child\nentry, silently drops the child. Consequently, when the parent expires, the\nchild's valid HSTS policy is lost, causing curl to issue unencrypted HTTP\nrequests rather than upgrading to HTTPS."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87862","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87862","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"risk":0.7761,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2026-87862","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"urls":["https://curl.se/docs/CVE-2026-87862.html","https://curl.se/docs/CVE-2026-87862.json","https://hackerone.com/reports/3972357"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child\nentry, silently drops the child. Consequently, when the parent expires, the\nchild's valid HSTS policy is lost, causing curl to issue unencrypted HTTP\nrequests rather than upgrading to HTTPS."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87862","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87862","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"risk":0.7761,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2026-87862","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"urls":["https://curl.se/docs/CVE-2026-87862.html","https://curl.se/docs/CVE-2026-87862.json","https://hackerone.com/reports/3972357"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child\nentry, silently drops the child. Consequently, when the parent expires, the\nchild's valid HSTS policy is lost, causing curl to issue unencrypted HTTP\nrequests rather than upgrading to HTTPS."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87862","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87862","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"risk":0.7761,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2026-87862","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"urls":["https://curl.se/docs/CVE-2026-87862.html","https://curl.se/docs/CVE-2026-87862.json","https://hackerone.com/reports/3972357"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child\nentry, silently drops the child. Consequently, when the parent expires, the\nchild's valid HSTS policy is lost, causing curl to issue unencrypted HTTP\nrequests rather than upgrading to HTTPS."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87862","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87862","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"risk":0.7761,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy is lost, causing curl to issue unencrypted HTTP requests rather than upgrading to HTTPS."},"relatedVulnerabilities":[{"id":"CVE-2026-87862","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87862","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87862","date":"2026-11-12","epss":0.00995,"percentile":0.6314}],"urls":["https://curl.se/docs/CVE-2026-87862.html","https://curl.se/docs/CVE-2026-87862.json","https://hackerone.com/reports/3972357"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87862","description":"Importing a `includeSubDomains` parent HSTS entry before a longer-lived child\nentry, silently drops the child. Consequently, when the parent expires, the\nchild's valid HSTS policy is lost, causing curl to issue unencrypted HTTP\nrequests rather than upgrading to HTTPS."}]},{"artifact":{"id":"91e7bb85243f738f","cpes":["cpe:2.3:a:libwmf-0.2-7:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2-7:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2_7:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2_7:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-0.2:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_0.2:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf_0.2_7:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmf-0.2-7","purl":"pkg:deb/debian/libwmf-0.2-7@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmf-0.2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmf-0.2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-0.2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-0.2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3476","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3476","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3476","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3476","date":"2026-11-12","epss":0.02455,"percentile":0.84638}],"risk":0.7364999999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3476","description":"Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault."},"relatedVulnerabilities":[{"id":"CVE-2007-3476","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3476","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3476","date":"2026-11-12","epss":0.02455,"percentile":0.84638}],"urls":["ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz","http://bugs.libgd.org/?do=details&task_id=87","http://fedoranews.org/updates/FEDORA-2007-205.shtml","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html","http://osvdb.org/37741","http://secunia.com/advisories/25860","http://secunia.com/advisories/26272","http://secunia.com/advisories/26390","http://secunia.com/advisories/26415","http://secunia.com/advisories/26467","http://secunia.com/advisories/26663","http://secunia.com/advisories/26766","http://secunia.com/advisories/26856","http://secunia.com/advisories/29157","http://secunia.com/advisories/30168","http://secunia.com/advisories/31168","http://secunia.com/advisories/42813","http://security.gentoo.org/glsa/glsa-200708-05.xml","http://security.gentoo.org/glsa/glsa-200711-34.xml","http://security.gentoo.org/glsa/glsa-200805-13.xml","http://www.debian.org/security/2008/dsa-1613","http://www.libgd.org/ReleaseNote020035","http://www.mandriva.com/security/advisories?name=MDKSA-2007:153","http://www.mandriva.com/security/advisories?name=MDKSA-2007:164","http://www.novell.com/linux/security/advisories/2007_15_sr.html","http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html","http://www.redhat.com/support/errata/RHSA-2008-0146.html","http://www.securityfocus.com/archive/1/478796/100/0/threaded","http://www.securityfocus.com/bid/24651","http://www.trustix.org/errata/2007/0024/","http://www.vupen.com/english/advisories/2011/0022","https://bugzilla.redhat.com/show_bug.cgi?id=277421","https://issues.rpath.com/browse/RPL-1643","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10348"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3476","description":"Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault."}]},{"artifact":{"id":"12c86211dcc39b04","cpes":["cpe:2.3:a:libwmf-dev:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf-dev:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_dev:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf_dev:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf-dev:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmf:libwmf_dev:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmf-dev","purl":"pkg:deb/debian/libwmf-dev@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmf-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmf-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmf-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.list"},{"path":"/var/lib/dpkg/info/libwmf-dev.preinst","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmf-dev.preinst"}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3476","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3476","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3476","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3476","date":"2026-11-12","epss":0.02455,"percentile":0.84638}],"risk":0.7364999999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3476","description":"Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault."},"relatedVulnerabilities":[{"id":"CVE-2007-3476","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3476","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3476","date":"2026-11-12","epss":0.02455,"percentile":0.84638}],"urls":["ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz","http://bugs.libgd.org/?do=details&task_id=87","http://fedoranews.org/updates/FEDORA-2007-205.shtml","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html","http://osvdb.org/37741","http://secunia.com/advisories/25860","http://secunia.com/advisories/26272","http://secunia.com/advisories/26390","http://secunia.com/advisories/26415","http://secunia.com/advisories/26467","http://secunia.com/advisories/26663","http://secunia.com/advisories/26766","http://secunia.com/advisories/26856","http://secunia.com/advisories/29157","http://secunia.com/advisories/30168","http://secunia.com/advisories/31168","http://secunia.com/advisories/42813","http://security.gentoo.org/glsa/glsa-200708-05.xml","http://security.gentoo.org/glsa/glsa-200711-34.xml","http://security.gentoo.org/glsa/glsa-200805-13.xml","http://www.debian.org/security/2008/dsa-1613","http://www.libgd.org/ReleaseNote020035","http://www.mandriva.com/security/advisories?name=MDKSA-2007:153","http://www.mandriva.com/security/advisories?name=MDKSA-2007:164","http://www.novell.com/linux/security/advisories/2007_15_sr.html","http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html","http://www.redhat.com/support/errata/RHSA-2008-0146.html","http://www.securityfocus.com/archive/1/478796/100/0/threaded","http://www.securityfocus.com/bid/24651","http://www.trustix.org/errata/2007/0024/","http://www.vupen.com/english/advisories/2011/0022","https://bugzilla.redhat.com/show_bug.cgi?id=277421","https://issues.rpath.com/browse/RPL-1643","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10348"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3476","description":"Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault."}]},{"artifact":{"id":"3743f546c9f6c76c","cpes":["cpe:2.3:a:libwmflite-0.2-7:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2-7:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2_7:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2_7:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite-0.2:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite_0.2:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite:libwmflite-0.2-7:0.2.14-1:*:*:*:*:*:*:*","cpe:2.3:a:libwmflite:libwmflite_0.2_7:0.2.14-1:*:*:*:*:*:*:*"],"name":"libwmflite-0.2-7","purl":"pkg:deb/debian/libwmflite-0.2-7@0.2.14-1?arch=amd64&distro=debian&upstream=libwmf","type":"deb","version":"0.2.14-1","language":"","licenses":["AGPL-3","GD","ISC","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libwmflite-0.2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libwmflite-0.2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libwmflite-0.2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libwmflite-0.2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libwmf"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-3476","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libwmf","version":"0.2.14-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-3476","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-3476","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3476","date":"2026-11-12","epss":0.02455,"percentile":0.84638}],"risk":0.7364999999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-3476","description":"Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault."},"relatedVulnerabilities":[{"id":"CVE-2007-3476","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-3476","cwe":"CWE-189","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-3476","date":"2026-11-12","epss":0.02455,"percentile":0.84638}],"urls":["ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/gd-2.0.35-i486-1_slack11.0.tgz","http://bugs.libgd.org/?do=details&task_id=87","http://fedoranews.org/updates/FEDORA-2007-205.shtml","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html","http://osvdb.org/37741","http://secunia.com/advisories/25860","http://secunia.com/advisories/26272","http://secunia.com/advisories/26390","http://secunia.com/advisories/26415","http://secunia.com/advisories/26467","http://secunia.com/advisories/26663","http://secunia.com/advisories/26766","http://secunia.com/advisories/26856","http://secunia.com/advisories/29157","http://secunia.com/advisories/30168","http://secunia.com/advisories/31168","http://secunia.com/advisories/42813","http://security.gentoo.org/glsa/glsa-200708-05.xml","http://security.gentoo.org/glsa/glsa-200711-34.xml","http://security.gentoo.org/glsa/glsa-200805-13.xml","http://www.debian.org/security/2008/dsa-1613","http://www.libgd.org/ReleaseNote020035","http://www.mandriva.com/security/advisories?name=MDKSA-2007:153","http://www.mandriva.com/security/advisories?name=MDKSA-2007:164","http://www.novell.com/linux/security/advisories/2007_15_sr.html","http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html","http://www.redhat.com/support/errata/RHSA-2008-0146.html","http://www.securityfocus.com/archive/1/478796/100/0/threaded","http://www.securityfocus.com/bid/24651","http://www.trustix.org/errata/2007/0024/","http://www.vupen.com/english/advisories/2011/0022","https://bugzilla.redhat.com/show_bug.cgi?id=277421","https://issues.rpath.com/browse/RPL-1643","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10348"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-3476","description":"Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash and heap corruption) via large color index values in crafted image data, which results in a segmentation fault."}]},{"artifact":{"id":"62a5d35d415a9784","cpes":["cpe:2.3:a:apt:apt:3.3.5:*:*:*:*:*:*:*"],"name":"apt","purl":"pkg:deb/debian/apt@3.3.5?arch=amd64&distro=debian","type":"deb","version":"3.3.5","language":"","licenses":["BSD-3-clause","Expat","GPL-2","GPL-2+","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/apt/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/apt/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/apt.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/apt.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/apt.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.list"},{"path":"/var/lib/dpkg/info/apt.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.postinst"},{"path":"/var/lib/dpkg/info/apt.postrm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.postrm"},{"path":"/var/lib/dpkg/info/apt.preinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.preinst"},{"path":"/var/lib/dpkg/info/apt.prerm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.prerm"},{"path":"/var/lib/dpkg/info/apt.shlibs","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.shlibs"},{"path":"/var/lib/dpkg/info/apt.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/apt.triggers"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.6"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-109518","versionConstraint":"< 3.3.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"apt","version":"3.3.5"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-109518","fix":{"state":"fixed","versions":["3.3.6"],"available":[{"date":"2026-11-05","kind":"first-observed","version":"3.3.6"}]},"cvss":[{"type":"Secondary","source":"security@ubuntu.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109518","cwe":"CWE-62","type":"Secondary","source":"security@ubuntu.com"},{"cve":"CVE-2026-109518","cwe":"CWE-367","type":"Secondary","source":"security@ubuntu.com"}],"epss":[{"cve":"CVE-2026-109518","date":"2026-11-12","epss":0.00928,"percentile":0.61031}],"risk":0.70528,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-109518","description":"On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.    The vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration"},"relatedVulnerabilities":[{"id":"CVE-2026-109518","cvss":[{"type":"Secondary","source":"security@ubuntu.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109518","cwe":"CWE-62","type":"Secondary","source":"security@ubuntu.com"},{"cve":"CVE-2026-109518","cwe":"CWE-367","type":"Secondary","source":"security@ubuntu.com"}],"epss":[{"cve":"CVE-2026-109518","date":"2026-11-12","epss":0.00928,"percentile":0.61031}],"urls":["https://lists.debian.org/debian-security-announce/2026/msg00526.html","https://ubuntu.com/security/notices/USN-8996-1","http://www.openwall.com/lists/oss-security/2026/11/04/12","https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-109518","description":"On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration"}]},{"artifact":{"id":"702bf01c1f6f1038","cpes":["cpe:2.3:a:libapt-pkg7.0:libapt-pkg7.0:3.3.5:*:*:*:*:*:*:*","cpe:2.3:a:libapt-pkg7.0:libapt_pkg7.0:3.3.5:*:*:*:*:*:*:*","cpe:2.3:a:libapt_pkg7.0:libapt-pkg7.0:3.3.5:*:*:*:*:*:*:*","cpe:2.3:a:libapt_pkg7.0:libapt_pkg7.0:3.3.5:*:*:*:*:*:*:*","cpe:2.3:a:libapt:libapt-pkg7.0:3.3.5:*:*:*:*:*:*:*","cpe:2.3:a:libapt:libapt_pkg7.0:3.3.5:*:*:*:*:*:*:*"],"name":"libapt-pkg7.0","purl":"pkg:deb/debian/libapt-pkg7.0@3.3.5?arch=amd64&distro=debian&upstream=apt","type":"deb","version":"3.3.5","language":"","licenses":["BSD-3-clause","Expat","GPL-2","GPL-2+","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libapt-pkg7.0/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libapt-pkg7.0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libapt-pkg7.0:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libapt-pkg7.0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"apt"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.3.6"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-109518","versionConstraint":"< 3.3.6 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"apt","version":"3.3.5"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-109518","fix":{"state":"fixed","versions":["3.3.6"],"available":[{"date":"2026-11-05","kind":"first-observed","version":"3.3.6"}]},"cvss":[{"type":"Secondary","source":"security@ubuntu.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109518","cwe":"CWE-62","type":"Secondary","source":"security@ubuntu.com"},{"cve":"CVE-2026-109518","cwe":"CWE-367","type":"Secondary","source":"security@ubuntu.com"}],"epss":[{"cve":"CVE-2026-109518","date":"2026-11-12","epss":0.00928,"percentile":0.61031}],"risk":0.70528,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-109518","description":"On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.    The vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration"},"relatedVulnerabilities":[{"id":"CVE-2026-109518","cvss":[{"type":"Secondary","source":"security@ubuntu.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-109518","cwe":"CWE-62","type":"Secondary","source":"security@ubuntu.com"},{"cve":"CVE-2026-109518","cwe":"CWE-367","type":"Secondary","source":"security@ubuntu.com"}],"epss":[{"cve":"CVE-2026-109518","date":"2026-11-12","epss":0.00928,"percentile":0.61031}],"urls":["https://lists.debian.org/debian-security-announce/2026/msg00526.html","https://ubuntu.com/security/notices/USN-8996-1","http://www.openwall.com/lists/oss-security/2026/11/04/12","https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-109518","description":"On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration"}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-94265","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94265","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"risk":0.7022800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl to send a freshly minted Kerberos ticket—generated using the ambient identity of the client process to an untrusted third-party host, effectively bypassing the domain-scoping restrictions normally enforced by the absence of `--location-trusted`."},"relatedVulnerabilities":[{"id":"CVE-2026-94265","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"urls":["https://curl.se/docs/CVE-2026-94265.html","https://curl.se/docs/CVE-2026-94265.json","https://hackerone.com/reports/4040551"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a\n`username:password` component), curl might erroneously retain and re-transmit\nthe original host's HTTP Negotiate authentication state. Consequently, a\nmalicious server can trigger a redirect containing arbitrary userinfo to force\ncurl to send a freshly minted Kerberos ticket—generated using the ambient\nidentity of the client process to an untrusted third-party host, effectively\nbypassing the domain-scoping restrictions normally enforced by the absence of\n`--location-trusted`."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94265","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94265","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"risk":0.7022800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl to send a freshly minted Kerberos ticket—generated using the ambient identity of the client process to an untrusted third-party host, effectively bypassing the domain-scoping restrictions normally enforced by the absence of `--location-trusted`."},"relatedVulnerabilities":[{"id":"CVE-2026-94265","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"urls":["https://curl.se/docs/CVE-2026-94265.html","https://curl.se/docs/CVE-2026-94265.json","https://hackerone.com/reports/4040551"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a\n`username:password` component), curl might erroneously retain and re-transmit\nthe original host's HTTP Negotiate authentication state. Consequently, a\nmalicious server can trigger a redirect containing arbitrary userinfo to force\ncurl to send a freshly minted Kerberos ticket—generated using the ambient\nidentity of the client process to an untrusted third-party host, effectively\nbypassing the domain-scoping restrictions normally enforced by the absence of\n`--location-trusted`."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94265","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94265","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"risk":0.7022800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl to send a freshly minted Kerberos ticket—generated using the ambient identity of the client process to an untrusted third-party host, effectively bypassing the domain-scoping restrictions normally enforced by the absence of `--location-trusted`."},"relatedVulnerabilities":[{"id":"CVE-2026-94265","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"urls":["https://curl.se/docs/CVE-2026-94265.html","https://curl.se/docs/CVE-2026-94265.json","https://hackerone.com/reports/4040551"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a\n`username:password` component), curl might erroneously retain and re-transmit\nthe original host's HTTP Negotiate authentication state. Consequently, a\nmalicious server can trigger a redirect containing arbitrary userinfo to force\ncurl to send a freshly minted Kerberos ticket—generated using the ambient\nidentity of the client process to an untrusted third-party host, effectively\nbypassing the domain-scoping restrictions normally enforced by the absence of\n`--location-trusted`."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94265","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94265","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"risk":0.7022800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl to send a freshly minted Kerberos ticket—generated using the ambient identity of the client process to an untrusted third-party host, effectively bypassing the domain-scoping restrictions normally enforced by the absence of `--location-trusted`."},"relatedVulnerabilities":[{"id":"CVE-2026-94265","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"urls":["https://curl.se/docs/CVE-2026-94265.html","https://curl.se/docs/CVE-2026-94265.json","https://hackerone.com/reports/4040551"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a\n`username:password` component), curl might erroneously retain and re-transmit\nthe original host's HTTP Negotiate authentication state. Consequently, a\nmalicious server can trigger a redirect containing arbitrary userinfo to force\ncurl to send a freshly minted Kerberos ticket—generated using the ambient\nidentity of the client process to an untrusted third-party host, effectively\nbypassing the domain-scoping restrictions normally enforced by the absence of\n`--location-trusted`."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94265","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94265","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"risk":0.7022800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl to send a freshly minted Kerberos ticket—generated using the ambient identity of the client process to an untrusted third-party host, effectively bypassing the domain-scoping restrictions normally enforced by the absence of `--location-trusted`."},"relatedVulnerabilities":[{"id":"CVE-2026-94265","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94265","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94265","date":"2026-11-12","epss":0.00776,"percentile":0.56282}],"urls":["https://curl.se/docs/CVE-2026-94265.html","https://curl.se/docs/CVE-2026-94265.json","https://hackerone.com/reports/4040551"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94265","description":"When processing an HTTP redirect to a URL containing userinfo (a\n`username:password` component), curl might erroneously retain and re-transmit\nthe original host's HTTP Negotiate authentication state. Consequently, a\nmalicious server can trigger a redirect containing arbitrary userinfo to force\ncurl to send a freshly minted Kerberos ticket—generated using the ambient\nidentity of the client process to an untrusted third-party host, effectively\nbypassing the domain-scoping restrictions normally enforced by the absence of\n`--location-trusted`."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112314","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112314","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"risk":0.68625,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."},"relatedVulnerabilities":[{"id":"CVE-2026-112314","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112314","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112314","date":"2026-11-12","epss":0.00915,"percentile":0.60614}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112314","https://bugzilla.redhat.com/show_bug.cgi?id=2478446"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112314","description":"clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries."}]},{"artifact":{"id":"07d7c5dfe0f85e23","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-15778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2020-15778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-15778","date":"2026-11-12","epss":0.13675,"percentile":0.9654}],"risk":0.6837500000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-15778","description":"scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of \"anomalous argument transfers\" because that could \"stand a great chance of breaking existing workflows.\""},"relatedVulnerabilities":[{"id":"CVE-2020-15778","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.9,"exploitabilityScore":1.6},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-15778","date":"2026-11-12","epss":0.13675,"percentile":0.9654}],"urls":["https://access.redhat.com/errata/RHSA-2024:3166","https://github.com/cpandya2909/CVE-2020-15778/","https://news.ycombinator.com/item?id=25005567","https://security.gentoo.org/glsa/202212-06","https://security.netapp.com/advisory/ntap-20200731-0007/","https://www.openssh.com/security.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-15778","description":"scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of \"anomalous argument transfers\" because that could \"stand a great chance of breaking existing workflows.\""}]},{"artifact":{"id":"c48e99fc55e4e310","cpes":["cpe:2.3:a:openssh-common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-common","purl":"pkg:deb/debian/openssh-common@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.list"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-15778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2020-15778","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-15778","date":"2026-11-12","epss":0.13675,"percentile":0.9654}],"risk":0.6837500000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-15778","description":"scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of \"anomalous argument transfers\" because that could \"stand a great chance of breaking existing workflows.\""},"relatedVulnerabilities":[{"id":"CVE-2020-15778","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.9,"exploitabilityScore":1.6},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-15778","cwe":"CWE-78","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-15778","date":"2026-11-12","epss":0.13675,"percentile":0.9654}],"urls":["https://access.redhat.com/errata/RHSA-2024:3166","https://github.com/cpandya2909/CVE-2020-15778/","https://news.ycombinator.com/item?id=25005567","https://security.gentoo.org/glsa/202212-06","https://security.netapp.com/advisory/ntap-20200731-0007/","https://www.openssh.com/security.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-15778","description":"scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of \"anomalous argument transfers\" because that could \"stand a great chance of breaking existing workflows.\""}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112321","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112321","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"risk":0.6749999999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112321","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112321","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112321","date":"2026-11-12","epss":0.009,"percentile":0.60134}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112321","https://bugzilla.redhat.com/show_bug.cgi?id=2478448"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112321","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT requests that trigger authentication failures."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-86413","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86413","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"risk":0.661555,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there."},"relatedVulnerabilities":[{"id":"CVE-2026-86413","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"urls":["https://curl.se/docs/CVE-2026-86413.html","https://curl.se/docs/CVE-2026-86413.json","https://hackerone.com/reports/3993549"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate\nauthentication and asked to follow redirects, curl could pass on its\ncredential details to an unrelated second origin when asked to redirect there."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86413","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86413","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"risk":0.661555,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there."},"relatedVulnerabilities":[{"id":"CVE-2026-86413","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"urls":["https://curl.se/docs/CVE-2026-86413.html","https://curl.se/docs/CVE-2026-86413.json","https://hackerone.com/reports/3993549"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate\nauthentication and asked to follow redirects, curl could pass on its\ncredential details to an unrelated second origin when asked to redirect there."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86413","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86413","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"risk":0.661555,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there."},"relatedVulnerabilities":[{"id":"CVE-2026-86413","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"urls":["https://curl.se/docs/CVE-2026-86413.html","https://curl.se/docs/CVE-2026-86413.json","https://hackerone.com/reports/3993549"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate\nauthentication and asked to follow redirects, curl could pass on its\ncredential details to an unrelated second origin when asked to redirect there."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86413","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86413","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"risk":0.661555,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there."},"relatedVulnerabilities":[{"id":"CVE-2026-86413","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"urls":["https://curl.se/docs/CVE-2026-86413.html","https://curl.se/docs/CVE-2026-86413.json","https://hackerone.com/reports/3993549"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate\nauthentication and asked to follow redirects, curl could pass on its\ncredential details to an unrelated second origin when asked to redirect there."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86413","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86413","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"risk":0.661555,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there."},"relatedVulnerabilities":[{"id":"CVE-2026-86413","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86413","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86413","date":"2026-11-12","epss":0.00731,"percentile":0.54794}],"urls":["https://curl.se/docs/CVE-2026-86413.html","https://curl.se/docs/CVE-2026-86413.json","https://hackerone.com/reports/3993549"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86413","description":"When using an *ambient user* in a first transfer doing Negotiate\nauthentication and asked to follow redirects, curl could pass on its\ncredential details to an unrelated second origin when asked to redirect there."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-86412","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86412","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for `--cookie` and `--cookie-jar`, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies for unrelated domains."},"relatedVulnerabilities":[{"id":"CVE-2026-86412","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-86412.html","https://curl.se/docs/CVE-2026-86412.json","https://hackerone.com/reports/3973201"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a\nNetscape cookie jar but cannot reload. On the next invocation using the same\npath for `--cookie` and `--cookie-jar`, curl fails before connecting, then the\ncleanup procedure replaces the jar with an empty file, deleting cookies for\nunrelated domains."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87863","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87863","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache saves, the original HSTS file is truncated before writing a temporary replacement; when serialization fails, the temporary file is deleted, leaving an empty or partial cache. Because the save error is silently ignored during cleanup, curl exits successfully despite the data loss."},"relatedVulnerabilities":[{"id":"CVE-2026-87863","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-87863.html","https://curl.se/docs/CVE-2026-87863.json","https://hackerone.com/reports/3972373"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the\nparser accepts, but time serialization later fails to process. On 64-bit\nsystems, extreme max-age values compute an absolute expiry within standard\ntime integer limits that exceeds calendar time structure bounds. During cache\nsaves, the original HSTS file is truncated before writing a temporary\nreplacement; when serialization fails, the temporary file is deleted, leaving\nan empty or partial cache. Because the save error is silently ignored during\ncleanup, curl exits successfully despite the data loss."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-92386","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92386","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that same cookie jar using `--cookie` silently aborts parsing prematurely upon encountering the too long line, ignoring all subsequent valid cookies in the file."},"relatedVulnerabilities":[{"id":"CVE-2026-92386","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-92386.html","https://curl.se/docs/CVE-2026-92386.json","https://hackerone.com/reports/4021979"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write a record that exceeds its line-length\nparsing limit. Consequently, any subsequent `curl` invocation reading from\nthat same cookie jar using `--cookie` silently aborts parsing prematurely upon\nencountering the too long line, ignoring all subsequent valid cookies in the\nfile."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86412","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86412","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for `--cookie` and `--cookie-jar`, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies for unrelated domains."},"relatedVulnerabilities":[{"id":"CVE-2026-86412","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-86412.html","https://curl.se/docs/CVE-2026-86412.json","https://hackerone.com/reports/3973201"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a\nNetscape cookie jar but cannot reload. On the next invocation using the same\npath for `--cookie` and `--cookie-jar`, curl fails before connecting, then the\ncleanup procedure replaces the jar with an empty file, deleting cookies for\nunrelated domains."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87863","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87863","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache saves, the original HSTS file is truncated before writing a temporary replacement; when serialization fails, the temporary file is deleted, leaving an empty or partial cache. Because the save error is silently ignored during cleanup, curl exits successfully despite the data loss."},"relatedVulnerabilities":[{"id":"CVE-2026-87863","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-87863.html","https://curl.se/docs/CVE-2026-87863.json","https://hackerone.com/reports/3972373"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the\nparser accepts, but time serialization later fails to process. On 64-bit\nsystems, extreme max-age values compute an absolute expiry within standard\ntime integer limits that exceeds calendar time structure bounds. During cache\nsaves, the original HSTS file is truncated before writing a temporary\nreplacement; when serialization fails, the temporary file is deleted, leaving\nan empty or partial cache. Because the save error is silently ignored during\ncleanup, curl exits successfully despite the data loss."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92386","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92386","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that same cookie jar using `--cookie` silently aborts parsing prematurely upon encountering the too long line, ignoring all subsequent valid cookies in the file."},"relatedVulnerabilities":[{"id":"CVE-2026-92386","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-92386.html","https://curl.se/docs/CVE-2026-92386.json","https://hackerone.com/reports/4021979"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write a record that exceeds its line-length\nparsing limit. Consequently, any subsequent `curl` invocation reading from\nthat same cookie jar using `--cookie` silently aborts parsing prematurely upon\nencountering the too long line, ignoring all subsequent valid cookies in the\nfile."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86412","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86412","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for `--cookie` and `--cookie-jar`, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies for unrelated domains."},"relatedVulnerabilities":[{"id":"CVE-2026-86412","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-86412.html","https://curl.se/docs/CVE-2026-86412.json","https://hackerone.com/reports/3973201"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a\nNetscape cookie jar but cannot reload. On the next invocation using the same\npath for `--cookie` and `--cookie-jar`, curl fails before connecting, then the\ncleanup procedure replaces the jar with an empty file, deleting cookies for\nunrelated domains."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87863","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87863","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache saves, the original HSTS file is truncated before writing a temporary replacement; when serialization fails, the temporary file is deleted, leaving an empty or partial cache. Because the save error is silently ignored during cleanup, curl exits successfully despite the data loss."},"relatedVulnerabilities":[{"id":"CVE-2026-87863","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-87863.html","https://curl.se/docs/CVE-2026-87863.json","https://hackerone.com/reports/3972373"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the\nparser accepts, but time serialization later fails to process. On 64-bit\nsystems, extreme max-age values compute an absolute expiry within standard\ntime integer limits that exceeds calendar time structure bounds. During cache\nsaves, the original HSTS file is truncated before writing a temporary\nreplacement; when serialization fails, the temporary file is deleted, leaving\nan empty or partial cache. Because the save error is silently ignored during\ncleanup, curl exits successfully despite the data loss."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92386","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92386","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that same cookie jar using `--cookie` silently aborts parsing prematurely upon encountering the too long line, ignoring all subsequent valid cookies in the file."},"relatedVulnerabilities":[{"id":"CVE-2026-92386","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-92386.html","https://curl.se/docs/CVE-2026-92386.json","https://hackerone.com/reports/4021979"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write a record that exceeds its line-length\nparsing limit. Consequently, any subsequent `curl` invocation reading from\nthat same cookie jar using `--cookie` silently aborts parsing prematurely upon\nencountering the too long line, ignoring all subsequent valid cookies in the\nfile."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86412","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86412","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for `--cookie` and `--cookie-jar`, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies for unrelated domains."},"relatedVulnerabilities":[{"id":"CVE-2026-86412","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-86412.html","https://curl.se/docs/CVE-2026-86412.json","https://hackerone.com/reports/3973201"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a\nNetscape cookie jar but cannot reload. On the next invocation using the same\npath for `--cookie` and `--cookie-jar`, curl fails before connecting, then the\ncleanup procedure replaces the jar with an empty file, deleting cookies for\nunrelated domains."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87863","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87863","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache saves, the original HSTS file is truncated before writing a temporary replacement; when serialization fails, the temporary file is deleted, leaving an empty or partial cache. Because the save error is silently ignored during cleanup, curl exits successfully despite the data loss."},"relatedVulnerabilities":[{"id":"CVE-2026-87863","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-87863.html","https://curl.se/docs/CVE-2026-87863.json","https://hackerone.com/reports/3972373"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the\nparser accepts, but time serialization later fails to process. On 64-bit\nsystems, extreme max-age values compute an absolute expiry within standard\ntime integer limits that exceeds calendar time structure bounds. During cache\nsaves, the original HSTS file is truncated before writing a temporary\nreplacement; when serialization fails, the temporary file is deleted, leaving\nan empty or partial cache. Because the save error is silently ignored during\ncleanup, curl exits successfully despite the data loss."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92386","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92386","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that same cookie jar using `--cookie` silently aborts parsing prematurely upon encountering the too long line, ignoring all subsequent valid cookies in the file."},"relatedVulnerabilities":[{"id":"CVE-2026-92386","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-92386.html","https://curl.se/docs/CVE-2026-92386.json","https://hackerone.com/reports/4021979"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write a record that exceeds its line-length\nparsing limit. Consequently, any subsequent `curl` invocation reading from\nthat same cookie jar using `--cookie` silently aborts parsing prematurely upon\nencountering the too long line, ignoring all subsequent valid cookies in the\nfile."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86412","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86412","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for `--cookie` and `--cookie-jar`, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies for unrelated domains."},"relatedVulnerabilities":[{"id":"CVE-2026-86412","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86412","cwe":"CWE-754","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86412","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-86412.html","https://curl.se/docs/CVE-2026-86412.json","https://hackerone.com/reports/3973201"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86412","description":"A remote HTTP server can set a cookie that curl accepts and writes to a\nNetscape cookie jar but cannot reload. On the next invocation using the same\npath for `--cookie` and `--cookie-jar`, curl fails before connecting, then the\ncleanup procedure replaces the jar with an empty file, deleting cookies for\nunrelated domains."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87863","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87863","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache saves, the original HSTS file is truncated before writing a temporary replacement; when serialization fails, the temporary file is deleted, leaving an empty or partial cache. Because the save error is silently ignored during cleanup, curl exits successfully despite the data loss."},"relatedVulnerabilities":[{"id":"CVE-2026-87863","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87863","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87863","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-87863.html","https://curl.se/docs/CVE-2026-87863.json","https://hackerone.com/reports/3972373"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87863","description":"An authenticated HTTPS origin can supply an HSTS `max-age` value that the\nparser accepts, but time serialization later fails to process. On 64-bit\nsystems, extreme max-age values compute an absolute expiry within standard\ntime integer limits that exceeds calendar time structure bounds. During cache\nsaves, the original HSTS file is truncated before writing a temporary\nreplacement; when serialization fails, the temporary file is deleted, leaving\nan empty or partial cache. Because the save error is silently ignored during\ncleanup, curl exits successfully despite the data loss."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92386","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92386","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"risk":0.64584,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that same cookie jar using `--cookie` silently aborts parsing prematurely upon encountering the too long line, ignoring all subsequent valid cookies in the file."},"relatedVulnerabilities":[{"id":"CVE-2026-92386","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92386","cwe":"CWE-1284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92386","date":"2026-11-12","epss":0.00828,"percentile":0.57988}],"urls":["https://curl.se/docs/CVE-2026-92386.html","https://curl.se/docs/CVE-2026-92386.json","https://hackerone.com/reports/4021979"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92386","description":"When writing a long cookie name and value to a Netscape cookie jar, a remote\nHTTP server can make `curl` write a record that exceeds its line-length\nparsing limit. Consequently, any subsequent `curl` invocation reading from\nthat same cookie jar using `--cookie` silently aborts parsing prematurely upon\nencountering the too long line, ignoring all subsequent valid cookies in the\nfile."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-92388","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92388","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"risk":0.632595,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash, and cloning it via `curl_easy_duphandle()` copies this corrupted state into the duplicate. If the original handle is subsequently freed, executing a transfer on the cloned handle causes a heap use-after-free read against the dangling handle reference; alternatively, reusing the original or cloned handle while changing only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`) results in type confusion, forcing the internal parser to interpret incoming server response bytes into memory at the application-supplied write data pointer."},"relatedVulnerabilities":[{"id":"CVE-2026-92388","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"urls":["https://curl.se/docs/CVE-2026-92388.html","https://curl.se/docs/CVE-2026-92388.json","https://hackerone.com/reports/4022070"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration\npath meant for successful listings, leaving the write callback set to the\ninternal listing parser and the write callback data pointing directly to the\neasy handle. Subsequent reuse of this handle triggers an immediate crash, and\ncloning it via `curl_easy_duphandle()` copies this corrupted state into the\nduplicate. If the original handle is subsequently freed, executing a transfer\non the cloned handle causes a heap use-after-free read against the dangling\nhandle reference; alternatively, reusing the original or cloned handle while\nchanging only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`)\nresults in type confusion, forcing the internal parser to interpret incoming\nserver response bytes into memory at the application-supplied write data\npointer."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92388","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92388","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"risk":0.632595,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash, and cloning it via `curl_easy_duphandle()` copies this corrupted state into the duplicate. If the original handle is subsequently freed, executing a transfer on the cloned handle causes a heap use-after-free read against the dangling handle reference; alternatively, reusing the original or cloned handle while changing only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`) results in type confusion, forcing the internal parser to interpret incoming server response bytes into memory at the application-supplied write data pointer."},"relatedVulnerabilities":[{"id":"CVE-2026-92388","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"urls":["https://curl.se/docs/CVE-2026-92388.html","https://curl.se/docs/CVE-2026-92388.json","https://hackerone.com/reports/4022070"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration\npath meant for successful listings, leaving the write callback set to the\ninternal listing parser and the write callback data pointing directly to the\neasy handle. Subsequent reuse of this handle triggers an immediate crash, and\ncloning it via `curl_easy_duphandle()` copies this corrupted state into the\nduplicate. If the original handle is subsequently freed, executing a transfer\non the cloned handle causes a heap use-after-free read against the dangling\nhandle reference; alternatively, reusing the original or cloned handle while\nchanging only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`)\nresults in type confusion, forcing the internal parser to interpret incoming\nserver response bytes into memory at the application-supplied write data\npointer."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92388","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92388","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"risk":0.632595,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash, and cloning it via `curl_easy_duphandle()` copies this corrupted state into the duplicate. If the original handle is subsequently freed, executing a transfer on the cloned handle causes a heap use-after-free read against the dangling handle reference; alternatively, reusing the original or cloned handle while changing only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`) results in type confusion, forcing the internal parser to interpret incoming server response bytes into memory at the application-supplied write data pointer."},"relatedVulnerabilities":[{"id":"CVE-2026-92388","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"urls":["https://curl.se/docs/CVE-2026-92388.html","https://curl.se/docs/CVE-2026-92388.json","https://hackerone.com/reports/4022070"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration\npath meant for successful listings, leaving the write callback set to the\ninternal listing parser and the write callback data pointing directly to the\neasy handle. Subsequent reuse of this handle triggers an immediate crash, and\ncloning it via `curl_easy_duphandle()` copies this corrupted state into the\nduplicate. If the original handle is subsequently freed, executing a transfer\non the cloned handle causes a heap use-after-free read against the dangling\nhandle reference; alternatively, reusing the original or cloned handle while\nchanging only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`)\nresults in type confusion, forcing the internal parser to interpret incoming\nserver response bytes into memory at the application-supplied write data\npointer."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92388","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92388","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"risk":0.632595,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash, and cloning it via `curl_easy_duphandle()` copies this corrupted state into the duplicate. If the original handle is subsequently freed, executing a transfer on the cloned handle causes a heap use-after-free read against the dangling handle reference; alternatively, reusing the original or cloned handle while changing only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`) results in type confusion, forcing the internal parser to interpret incoming server response bytes into memory at the application-supplied write data pointer."},"relatedVulnerabilities":[{"id":"CVE-2026-92388","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"urls":["https://curl.se/docs/CVE-2026-92388.html","https://curl.se/docs/CVE-2026-92388.json","https://hackerone.com/reports/4022070"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration\npath meant for successful listings, leaving the write callback set to the\ninternal listing parser and the write callback data pointing directly to the\neasy handle. Subsequent reuse of this handle triggers an immediate crash, and\ncloning it via `curl_easy_duphandle()` copies this corrupted state into the\nduplicate. If the original handle is subsequently freed, executing a transfer\non the cloned handle causes a heap use-after-free read against the dangling\nhandle reference; alternatively, reusing the original or cloned handle while\nchanging only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`)\nresults in type confusion, forcing the internal parser to interpret incoming\nserver response bytes into memory at the application-supplied write data\npointer."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92388","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92388","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"risk":0.632595,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash, and cloning it via `curl_easy_duphandle()` copies this corrupted state into the duplicate. If the original handle is subsequently freed, executing a transfer on the cloned handle causes a heap use-after-free read against the dangling handle reference; alternatively, reusing the original or cloned handle while changing only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`) results in type confusion, forcing the internal parser to interpret incoming server response bytes into memory at the application-supplied write data pointer."},"relatedVulnerabilities":[{"id":"CVE-2026-92388","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92388","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92388","date":"2026-11-12","epss":0.00699,"percentile":0.53631}],"urls":["https://curl.se/docs/CVE-2026-92388.html","https://curl.se/docs/CVE-2026-92388.json","https://hackerone.com/reports/4022070"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92388","description":"When an FTP wildcard `LIST` operation fails, libcurl omits the restoration\npath meant for successful listings, leaving the write callback set to the\ninternal listing parser and the write callback data pointing directly to the\neasy handle. Subsequent reuse of this handle triggers an immediate crash, and\ncloning it via `curl_easy_duphandle()` copies this corrupted state into the\nduplicate. If the original handle is subsequently freed, executing a transfer\non the cloned handle causes a heap use-after-free read against the dangling\nhandle reference; alternatively, reusing the original or cloned handle while\nchanging only  `CURLOPT_WRITEDATA` (and omitting `CURLOPT_WRITEFUNCTION`)\nresults in type confusion, forcing the internal parser to interpret incoming\nserver response bytes into memory at the application-supplied write data\npointer."}]},{"artifact":{"id":"368ecc2a14e64339","cpes":["cpe:2.3:a:wget:wget:1.25.0-3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/debian/wget@1.25.0-3?arch=amd64&distro=debian","type":"deb","version":"1.25.0-3","language":"","licenses":["sha256:289d796794edf8c547691e415ddd7ba3396e6e6d8de03397bd69ce9515914bf8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2021-31879","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"wget","version":"1.25.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2021-31879","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-31879","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-31879","date":"2026-11-12","epss":0.01104,"percentile":0.66225}],"risk":0.6127199999999999,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2021-31879","description":"GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007."},"relatedVulnerabilities":[{"id":"CVE-2021-31879","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":6.1,"impactScore":2.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2021-31879","cwe":"CWE-601","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2021-31879","date":"2026-11-12","epss":0.01104,"percentile":0.66225}],"urls":["https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html","https://security.netapp.com/advisory/ntap-20210618-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2021-31879","description":"GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-86414","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86414","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the expected 407 `Proxy-Authenticate:`."},"relatedVulnerabilities":[{"id":"CVE-2026-86414","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-86414.html","https://curl.se/docs/CVE-2026-86414.json","https://hackerone.com/reports/3993566"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic\npassword, or a Negotiate/Kerberos ticket) to the proxy itself, by answering\nthe `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the\nexpected 407 `Proxy-Authenticate:`."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87861","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87861","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused."},"relatedVulnerabilities":[{"id":"CVE-2026-87861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-87861.html","https://curl.se/docs/CVE-2026-87861.json","https://hackerone.com/reports/3972094"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin\nmay be dispatched over a connection previously authenticated via Negotiate for\na different origin, leaving the request's intended credentials unused."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86414","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86414","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the expected 407 `Proxy-Authenticate:`."},"relatedVulnerabilities":[{"id":"CVE-2026-86414","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-86414.html","https://curl.se/docs/CVE-2026-86414.json","https://hackerone.com/reports/3993566"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic\npassword, or a Negotiate/Kerberos ticket) to the proxy itself, by answering\nthe `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the\nexpected 407 `Proxy-Authenticate:`."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87861","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87861","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused."},"relatedVulnerabilities":[{"id":"CVE-2026-87861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-87861.html","https://curl.se/docs/CVE-2026-87861.json","https://hackerone.com/reports/3972094"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin\nmay be dispatched over a connection previously authenticated via Negotiate for\na different origin, leaving the request's intended credentials unused."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86414","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86414","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the expected 407 `Proxy-Authenticate:`."},"relatedVulnerabilities":[{"id":"CVE-2026-86414","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-86414.html","https://curl.se/docs/CVE-2026-86414.json","https://hackerone.com/reports/3993566"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic\npassword, or a Negotiate/Kerberos ticket) to the proxy itself, by answering\nthe `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the\nexpected 407 `Proxy-Authenticate:`."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87861","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87861","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused."},"relatedVulnerabilities":[{"id":"CVE-2026-87861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-87861.html","https://curl.se/docs/CVE-2026-87861.json","https://hackerone.com/reports/3972094"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin\nmay be dispatched over a connection previously authenticated via Negotiate for\na different origin, leaving the request's intended credentials unused."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86414","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86414","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the expected 407 `Proxy-Authenticate:`."},"relatedVulnerabilities":[{"id":"CVE-2026-86414","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-86414.html","https://curl.se/docs/CVE-2026-86414.json","https://hackerone.com/reports/3993566"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic\npassword, or a Negotiate/Kerberos ticket) to the proxy itself, by answering\nthe `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the\nexpected 407 `Proxy-Authenticate:`."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87861","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87861","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused."},"relatedVulnerabilities":[{"id":"CVE-2026-87861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-87861.html","https://curl.se/docs/CVE-2026-87861.json","https://hackerone.com/reports/3972094"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin\nmay be dispatched over a connection previously authenticated via Negotiate for\na different origin, leaving the request's intended credentials unused."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86414","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86414","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the expected 407 `Proxy-Authenticate:`."},"relatedVulnerabilities":[{"id":"CVE-2026-86414","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86414","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86414","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-86414.html","https://curl.se/docs/CVE-2026-86414.json","https://hackerone.com/reports/3993566"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86414","description":"An HTTP proxy can trick libcurl into sending the origin's credentials (Basic\npassword, or a Negotiate/Kerberos ticket) to the proxy itself, by answering\nthe `CONNECT` tunnel request with 401 `WWW-Authenticate:` instead of the\nexpected 407 `Proxy-Authenticate:`."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87861","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87861","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"risk":0.6117800000000001,"urls":[],"severity":"Critical","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused."},"relatedVulnerabilities":[{"id":"CVE-2026-87861","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87861","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87861","date":"2026-11-12","epss":0.00676,"percentile":0.52745}],"urls":["https://curl.se/docs/CVE-2026-87861.html","https://curl.se/docs/CVE-2026-87861.json","https://hackerone.com/reports/3972094"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87861","description":"When using ambient user credentials, an HTTP request directed to one origin\nmay be dispatched over a connection previously authenticated via Negotiate for\na different origin, leaving the request's intended credentials unused."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-86410","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86410","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"risk":0.59748,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect."},"relatedVulnerabilities":[{"id":"CVE-2026-86410","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"urls":["https://curl.se/docs/CVE-2026-86410.html","https://curl.se/docs/CVE-2026-86410.json","https://hackerone.com/reports/3973176"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86410","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86410","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"risk":0.59748,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect."},"relatedVulnerabilities":[{"id":"CVE-2026-86410","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"urls":["https://curl.se/docs/CVE-2026-86410.html","https://curl.se/docs/CVE-2026-86410.json","https://hackerone.com/reports/3973176"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86410","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86410","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"risk":0.59748,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect."},"relatedVulnerabilities":[{"id":"CVE-2026-86410","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"urls":["https://curl.se/docs/CVE-2026-86410.html","https://curl.se/docs/CVE-2026-86410.json","https://hackerone.com/reports/3973176"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86410","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86410","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"risk":0.59748,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect."},"relatedVulnerabilities":[{"id":"CVE-2026-86410","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"urls":["https://curl.se/docs/CVE-2026-86410.html","https://curl.se/docs/CVE-2026-86410.json","https://hackerone.com/reports/3973176"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86410","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86410","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"risk":0.59748,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect."},"relatedVulnerabilities":[{"id":"CVE-2026-86410","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86410","cwe":"CWE-297","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86410","date":"2026-11-12","epss":0.00766,"percentile":0.55977}],"urls":["https://curl.se/docs/CVE-2026-86410.html","https://curl.se/docs/CVE-2026-86410.json","https://hackerone.com/reports/3973176"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86410","description":"A flaw in the curl command line tool's logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112322","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112322","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"risk":0.58425,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."},"relatedVulnerabilities":[{"id":"CVE-2026-112322","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112322","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112322","date":"2026-11-12","epss":0.00779,"percentile":0.56383}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112322","https://bugzilla.redhat.com/show_bug.cgi?id=2478445"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112322","description":"clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. Remote attackers can cause a denial of service (CPU consumption in kadmind) by accumulating a large number of AUTH_GSSAPI client entries."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-92389","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92389","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"risk":0.56238,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode, prompting libcurl to consume and transmit data from the handle's persistent `CURLOPT_READDATA` pointer - including data remaining from unrelated prior operations, such as an HTTP POST request executed on a reused handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92389","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"urls":["https://curl.se/docs/CVE-2026-92389.html","https://curl.se/docs/CVE-2026-92389.json","https://hackerone.com/reports/4022568"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the\nrequested transfer direction, accepting opening server responses for both\nreads and writes interchangeably. A malicious TFTP server can respond to a\ndownload request in a way that forces the client into transmit mode, prompting\nlibcurl to consume and transmit data from the handle's persistent\n`CURLOPT_READDATA` pointer - including data remaining from unrelated prior\noperations, such as an HTTP POST request executed on a reused handle."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92389","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92389","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"risk":0.56238,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode, prompting libcurl to consume and transmit data from the handle's persistent `CURLOPT_READDATA` pointer - including data remaining from unrelated prior operations, such as an HTTP POST request executed on a reused handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92389","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"urls":["https://curl.se/docs/CVE-2026-92389.html","https://curl.se/docs/CVE-2026-92389.json","https://hackerone.com/reports/4022568"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the\nrequested transfer direction, accepting opening server responses for both\nreads and writes interchangeably. A malicious TFTP server can respond to a\ndownload request in a way that forces the client into transmit mode, prompting\nlibcurl to consume and transmit data from the handle's persistent\n`CURLOPT_READDATA` pointer - including data remaining from unrelated prior\noperations, such as an HTTP POST request executed on a reused handle."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92389","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92389","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"risk":0.56238,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode, prompting libcurl to consume and transmit data from the handle's persistent `CURLOPT_READDATA` pointer - including data remaining from unrelated prior operations, such as an HTTP POST request executed on a reused handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92389","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"urls":["https://curl.se/docs/CVE-2026-92389.html","https://curl.se/docs/CVE-2026-92389.json","https://hackerone.com/reports/4022568"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the\nrequested transfer direction, accepting opening server responses for both\nreads and writes interchangeably. A malicious TFTP server can respond to a\ndownload request in a way that forces the client into transmit mode, prompting\nlibcurl to consume and transmit data from the handle's persistent\n`CURLOPT_READDATA` pointer - including data remaining from unrelated prior\noperations, such as an HTTP POST request executed on a reused handle."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92389","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92389","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"risk":0.56238,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode, prompting libcurl to consume and transmit data from the handle's persistent `CURLOPT_READDATA` pointer - including data remaining from unrelated prior operations, such as an HTTP POST request executed on a reused handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92389","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"urls":["https://curl.se/docs/CVE-2026-92389.html","https://curl.se/docs/CVE-2026-92389.json","https://hackerone.com/reports/4022568"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the\nrequested transfer direction, accepting opening server responses for both\nreads and writes interchangeably. A malicious TFTP server can respond to a\ndownload request in a way that forces the client into transmit mode, prompting\nlibcurl to consume and transmit data from the handle's persistent\n`CURLOPT_READDATA` pointer - including data remaining from unrelated prior\noperations, such as an HTTP POST request executed on a reused handle."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92389","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92389","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"risk":0.56238,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode, prompting libcurl to consume and transmit data from the handle's persistent `CURLOPT_READDATA` pointer - including data remaining from unrelated prior operations, such as an HTTP POST request executed on a reused handle."},"relatedVulnerabilities":[{"id":"CVE-2026-92389","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92389","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92389","date":"2026-11-12","epss":0.00721,"percentile":0.54439}],"urls":["https://curl.se/docs/CVE-2026-92389.html","https://curl.se/docs/CVE-2026-92389.json","https://hackerone.com/reports/4022568"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92389","description":"libcurl's TFTP state machine fails to validate state transitions against the\nrequested transfer direction, accepting opening server responses for both\nreads and writes interchangeably. A malicious TFTP server can respond to a\ndownload request in a way that forces the client into transmit mode, prompting\nlibcurl to consume and transmit data from the handle's persistent\n`CURLOPT_READDATA` pointer - including data remaining from unrelated prior\noperations, such as an HTTP POST request executed on a reused handle."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107928","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107928","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"risk":0.5499,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send."},"relatedVulnerabilities":[{"id":"CVE-2026-107928","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"urls":["https://curl.se/docs/CVE-2026-107928.html","https://curl.se/docs/CVE-2026-107928.json","https://hackerone.com/reports/4099194"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl\nsend memory past its send buffer. This is due to an out of bounds read\nfollowing when `gnutls_record_send()` returns a number of bytes sent **greater\nthan the number of bytes it was given to send**. GnuTLS does that after a\nblocked send."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107928","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107928","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"risk":0.5499,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send."},"relatedVulnerabilities":[{"id":"CVE-2026-107928","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"urls":["https://curl.se/docs/CVE-2026-107928.html","https://curl.se/docs/CVE-2026-107928.json","https://hackerone.com/reports/4099194"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl\nsend memory past its send buffer. This is due to an out of bounds read\nfollowing when `gnutls_record_send()` returns a number of bytes sent **greater\nthan the number of bytes it was given to send**. GnuTLS does that after a\nblocked send."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107928","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107928","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"risk":0.5499,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send."},"relatedVulnerabilities":[{"id":"CVE-2026-107928","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"urls":["https://curl.se/docs/CVE-2026-107928.html","https://curl.se/docs/CVE-2026-107928.json","https://hackerone.com/reports/4099194"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl\nsend memory past its send buffer. This is due to an out of bounds read\nfollowing when `gnutls_record_send()` returns a number of bytes sent **greater\nthan the number of bytes it was given to send**. GnuTLS does that after a\nblocked send."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107928","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107928","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"risk":0.5499,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send."},"relatedVulnerabilities":[{"id":"CVE-2026-107928","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"urls":["https://curl.se/docs/CVE-2026-107928.html","https://curl.se/docs/CVE-2026-107928.json","https://hackerone.com/reports/4099194"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl\nsend memory past its send buffer. This is due to an out of bounds read\nfollowing when `gnutls_record_send()` returns a number of bytes sent **greater\nthan the number of bytes it was given to send**. GnuTLS does that after a\nblocked send."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107928","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107928","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"risk":0.5499,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send."},"relatedVulnerabilities":[{"id":"CVE-2026-107928","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107928","cwe":"CWE-126","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107928","date":"2026-11-12","epss":0.00705,"percentile":0.53842}],"urls":["https://curl.se/docs/CVE-2026-107928.html","https://curl.se/docs/CVE-2026-107928.json","https://hackerone.com/reports/4099194"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107928","description":"When curl is built with GnuTLS, a malicious WebSocket server can make curl\nsend memory past its send buffer. This is due to an out of bounds read\nfollowing when `gnutls_record_send()` returns a number of bytes sent **greater\nthan the number of bytes it was given to send**. GnuTLS does that after a\nblocked send."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112320","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112320","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"risk":0.5482499999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."},"relatedVulnerabilities":[{"id":"CVE-2026-112320","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112320","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112320","date":"2026-11-12","epss":0.00731,"percentile":0.54789}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112320","https://bugzilla.redhat.com/show_bug.cgi?id=2478449"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112320","description":"The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by repeatedly establishing and abandoning GSS authentication contexts."}]},{"artifact":{"id":"ff7d9b84c7b8c899","cpes":["cpe:2.3:a:libcairo2:libcairo2:1.18.4-3\\+b1:*:*:*:*:*:*:*"],"name":"libcairo2","purl":"pkg:deb/debian/libcairo2@1.18.4-3%2Bb1?arch=amd64&distro=debian&upstream=cairo%401.18.4-3","type":"deb","version":"1.18.4-3+b1","language":"","licenses":["sha256:408fb9e704e875cd42d432e7c9b3b378f568e3c89db2b5c5ef3d11c025319574"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcairo2/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcairo2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcairo2:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcairo2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"cairo","version":"1.18.4-3"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-7475","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"cairo","version":"1.18.4-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2017-7475","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-7475","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7475","date":"2026-11-12","epss":0.01824,"percentile":0.79102}],"risk":0.5471999999999999,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2017-7475","description":"Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash."},"relatedVulnerabilities":[{"id":"CVE-2017-7475","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-7475","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-7475","date":"2026-11-12","epss":0.01824,"percentile":0.79102}],"urls":["http://seclists.org/oss-sec/2017/q2/151","https://bugs.freedesktop.org/show_bug.cgi?id=100763","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7475","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-7475","description":"Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-107929","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107929","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"risk":0.52026,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding is not part of the connection reuse key, so a later transfer asking for a different source can silently reuse an existing connection and go out from the earlier transfer's source address"},"relatedVulnerabilities":[{"id":"CVE-2026-107929","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"urls":["https://curl.se/docs/CVE-2026-107929.html","https://curl.se/docs/CVE-2026-107929.json","https://hackerone.com/reports/4099618"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is\nset with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that\nbinding is not part of the connection reuse key, so a later transfer asking\nfor a different source can silently reuse an existing connection and go out\nfrom the earlier transfer's source address"}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107929","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107929","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"risk":0.52026,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding is not part of the connection reuse key, so a later transfer asking for a different source can silently reuse an existing connection and go out from the earlier transfer's source address"},"relatedVulnerabilities":[{"id":"CVE-2026-107929","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"urls":["https://curl.se/docs/CVE-2026-107929.html","https://curl.se/docs/CVE-2026-107929.json","https://hackerone.com/reports/4099618"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is\nset with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that\nbinding is not part of the connection reuse key, so a later transfer asking\nfor a different source can silently reuse an existing connection and go out\nfrom the earlier transfer's source address"}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107929","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107929","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"risk":0.52026,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding is not part of the connection reuse key, so a later transfer asking for a different source can silently reuse an existing connection and go out from the earlier transfer's source address"},"relatedVulnerabilities":[{"id":"CVE-2026-107929","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"urls":["https://curl.se/docs/CVE-2026-107929.html","https://curl.se/docs/CVE-2026-107929.json","https://hackerone.com/reports/4099618"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is\nset with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that\nbinding is not part of the connection reuse key, so a later transfer asking\nfor a different source can silently reuse an existing connection and go out\nfrom the earlier transfer's source address"}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107929","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107929","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"risk":0.52026,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding is not part of the connection reuse key, so a later transfer asking for a different source can silently reuse an existing connection and go out from the earlier transfer's source address"},"relatedVulnerabilities":[{"id":"CVE-2026-107929","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"urls":["https://curl.se/docs/CVE-2026-107929.html","https://curl.se/docs/CVE-2026-107929.json","https://hackerone.com/reports/4099618"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is\nset with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that\nbinding is not part of the connection reuse key, so a later transfer asking\nfor a different source can silently reuse an existing connection and go out\nfrom the earlier transfer's source address"}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107929","versionConstraint":"< 8.23.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107929","fix":{"state":"fixed","versions":["8.23.0-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"risk":0.52026,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding is not part of the connection reuse key, so a later transfer asking for a different source can silently reuse an existing connection and go out from the earlier transfer's source address"},"relatedVulnerabilities":[{"id":"CVE-2026-107929","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.1,"impactScore":5.9,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107929","cwe":"CWE-488","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107929","date":"2026-11-12","epss":0.00667,"percentile":0.52376}],"urls":["https://curl.se/docs/CVE-2026-107929.html","https://curl.se/docs/CVE-2026-107929.json","https://hackerone.com/reports/4099618"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107929","description":"When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is\nset with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that\nbinding is not part of the connection reuse key, so a later transfer asking\nfor a different source can silently reuse an existing connection and go out\nfrom the earlier transfer's source address"}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-6988","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-6988","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-6988","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6988","date":"2026-11-12","epss":0.01724,"percentile":0.77853}],"risk":0.5172,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-6988","description":"An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress."},"relatedVulnerabilities":[{"id":"CVE-2019-6988","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6988","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6988","date":"2026-11-12","epss":0.01724,"percentile":0.77853}],"urls":["http://www.securityfocus.com/bid/106785","https://github.com/uclouvain/openjpeg/issues/1178"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-6988","description":"An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-6988","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-6988","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-6988","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6988","date":"2026-11-12","epss":0.01724,"percentile":0.77853}],"risk":0.5172,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-6988","description":"An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress."},"relatedVulnerabilities":[{"id":"CVE-2019-6988","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-6988","cwe":"CWE-770","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-6988","date":"2026-11-12","epss":0.01724,"percentile":0.77853}],"urls":["http://www.securityfocus.com/bid/106785","https://github.com/uclouvain/openjpeg/issues/1178"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-6988","description":"An issue was discovered in OpenJPEG 2.3.0. It allows remote attackers to cause a denial of service (attempted excessive memory allocation) in opj_calloc in openjp2/opj_malloc.c, when called from opj_tcd_init_tile in openjp2/tcd.c, as demonstrated by the 64-bit opj_decompress."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112323","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112323","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."},"relatedVulnerabilities":[{"id":"CVE-2026-112323","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112323","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112323","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112323","https://bugzilla.redhat.com/show_bug.cgi?id=2478440"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112323","description":"The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. Each failed request allocates client state that is only freed after a 15-minute expiration timeout, allowing an attacker to accumulate memory faster than it is reclaimed."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119079","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119079","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"risk":0.47850000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."},"relatedVulnerabilities":[{"id":"CVE-2026-119079","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119079","cwe":"CWE-408","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-119079","date":"2026-11-12","epss":0.00638,"percentile":0.51075}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-119079","https://bugzilla.redhat.com/show_bug.cgi?id=2479231"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119079","description":"decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) by sending an unauthenticated AS-REQ or TGS-REQ with a large number of elements in a SEQUENCE OF field over TCP."}]},{"artifact":{"id":"68df266860572051","cpes":["cpe:2.3:a:libperl5.42:libperl5.42:5.42.3-1:*:*:*:*:*:*:*"],"name":"libperl5.42","purl":"pkg:deb/debian/libperl5.42@5.42.3-1?arch=amd64&distro=debian&upstream=perl","type":"deb","version":"5.42.3-1","language":"","licenses":["Artistic","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","DRAND48","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libperl5.42/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libperl5.42/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libperl5.42:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libperl5.42:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82560","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"perl","version":"5.42.3-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-82560","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-12","epss":0.0063,"percentile":0.5069}],"risk":0.47250000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.  Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.  Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."},"relatedVulnerabilities":[{"id":"CVE-2026-82560","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-12","epss":0.0063,"percentile":0.5069}],"urls":["https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch","https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261","https://metacpan.org/release/RRA/podlators-v6.1.1/changes","http://www.openwall.com/lists/oss-security/2026/09/19/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.\n\nEach =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.\n\nFormatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."}]},{"artifact":{"id":"2a8ddebeaed78579","cpes":["cpe:2.3:a:perl:perl:5.42.3-1:*:*:*:*:*:*:*"],"name":"perl","purl":"pkg:deb/debian/perl@5.42.3-1?arch=amd64&distro=debian","type":"deb","version":"5.42.3-1","language":"","licenses":["Artistic","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","DRAND48","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/perl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/perl.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/perl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/perl.list"},{"path":"/var/lib/dpkg/info/perl.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/perl.postinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-82560","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"perl","version":"5.42.3-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-82560","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-12","epss":0.0063,"percentile":0.5069}],"risk":0.47250000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.  Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.  Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."},"relatedVulnerabilities":[{"id":"CVE-2026-82560","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-12","epss":0.0063,"percentile":0.5069}],"urls":["https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch","https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261","https://metacpan.org/release/RRA/podlators-v6.1.1/changes","http://www.openwall.com/lists/oss-security/2026/09/19/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.\n\nEach =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.\n\nFormatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."}]},{"artifact":{"id":"6c639d2a48be13c9","cpes":["cpe:2.3:a:perl-base:perl-base:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl-base:perl_base:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl-base:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl_base:perl_base:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-base:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_base:5.42.3-1:*:*:*:*:*:*:*"],"name":"perl-base","purl":"pkg:deb/debian/perl-base@5.42.3-1?arch=amd64&distro=debian&upstream=perl","type":"deb","version":"5.42.3-1","language":"","licenses":["Artistic","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","DRAND48","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/perl-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/perl-base.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-base.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/perl-base.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82560","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"perl","version":"5.42.3-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-82560","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-12","epss":0.0063,"percentile":0.5069}],"risk":0.47250000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.  Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.  Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."},"relatedVulnerabilities":[{"id":"CVE-2026-82560","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-12","epss":0.0063,"percentile":0.5069}],"urls":["https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch","https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261","https://metacpan.org/release/RRA/podlators-v6.1.1/changes","http://www.openwall.com/lists/oss-security/2026/09/19/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.\n\nEach =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.\n\nFormatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."}]},{"artifact":{"id":"c51d9c933460bf59","cpes":["cpe:2.3:a:perl-modules-5.42:perl-modules-5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules-5.42:perl_modules_5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules_5.42:perl-modules-5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules_5.42:perl_modules_5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules:perl-modules-5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl-modules:perl_modules_5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules:perl-modules-5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl_modules:perl_modules_5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl-modules-5.42:5.42.3-1:*:*:*:*:*:*:*","cpe:2.3:a:perl:perl_modules_5.42:5.42.3-1:*:*:*:*:*:*:*"],"name":"perl-modules-5.42","purl":"pkg:deb/debian/perl-modules-5.42@5.42.3-1?arch=all&distro=debian&upstream=perl","type":"deb","version":"5.42.3-1","language":"","licenses":["Artistic","Artistic-dist","BSD-3-clause","BSD-3-clause-GENERIC","BSD-3-clause-with-weird-numbering","BSD-4-clause-POWERDOG","BZIP","DONT-CHANGE-THE-GPL","DRAND48","Expat","FSFAP","GPL-1","GPL-1+","GPL-2","GPL-2+","GPL-3+-WITH-BISON-EXCEPTION","REGCOMP","REGCOMP,","SDBM-PUBLIC-DOMAIN","TEXT-TABS","Unicode","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/perl-modules-5.42/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/perl-modules-5.42/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-modules-5.42.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/perl-modules-5.42.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/perl-modules-5.42.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/perl-modules-5.42.list"}],"upstreams":[{"name":"perl"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-82560","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"perl","version":"5.42.3-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-82560","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-12","epss":0.0063,"percentile":0.5069}],"risk":0.47250000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.  Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.  Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."},"relatedVulnerabilities":[{"id":"CVE-2026-82560","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-82560","cwe":"CWE-835","type":"Secondary","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"epss":[{"cve":"CVE-2026-82560","date":"2026-11-12","epss":0.0063,"percentile":0.5069}],"urls":["https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch","https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261","https://metacpan.org/release/RRA/podlators-v6.1.1/changes","http://www.openwall.com/lists/oss-security/2026/09/19/6"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-82560","description":"Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.\n\nEach =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.\n\nFormatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87865","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87865","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"risk":0.44998,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."},"relatedVulnerabilities":[{"id":"CVE-2026-87865","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"urls":["https://curl.se/docs/CVE-2026-87865.html","https://curl.se/docs/CVE-2026-87865.json","https://hackerone.com/reports/3975408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated\ninitial entry can cause host key validation to report a key *mismatch* as a\n*missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87865","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87865","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"risk":0.44998,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."},"relatedVulnerabilities":[{"id":"CVE-2026-87865","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"urls":["https://curl.se/docs/CVE-2026-87865.html","https://curl.se/docs/CVE-2026-87865.json","https://hackerone.com/reports/3975408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated\ninitial entry can cause host key validation to report a key *mismatch* as a\n*missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87865","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87865","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"risk":0.44998,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."},"relatedVulnerabilities":[{"id":"CVE-2026-87865","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"urls":["https://curl.se/docs/CVE-2026-87865.html","https://curl.se/docs/CVE-2026-87865.json","https://hackerone.com/reports/3975408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated\ninitial entry can cause host key validation to report a key *mismatch* as a\n*missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87865","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87865","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"risk":0.44998,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."},"relatedVulnerabilities":[{"id":"CVE-2026-87865","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"urls":["https://curl.se/docs/CVE-2026-87865.html","https://curl.se/docs/CVE-2026-87865.json","https://hackerone.com/reports/3975408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated\ninitial entry can cause host key validation to report a key *mismatch* as a\n*missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87865","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-87865","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"risk":0.44998,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."},"relatedVulnerabilities":[{"id":"CVE-2026-87865","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87865","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87865","date":"2026-11-12","epss":0.00604,"percentile":0.49432}],"urls":["https://curl.se/docs/CVE-2026-87865.html","https://curl.se/docs/CVE-2026-87865.json","https://hackerone.com/reports/3975408"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87865","description":"When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated\ninitial entry can cause host key validation to report a key *mismatch* as a\n*missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-92390","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92390","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"risk":0.44175000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an `ETag` header is processed before `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S) server to overwrite an existing local file specified in the `Content-Disposition` header despite the presence of the `-J` non-overwrite constraint."},"relatedVulnerabilities":[{"id":"CVE-2026-92390","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"urls":["https://curl.se/docs/CVE-2026-92390.html","https://curl.se/docs/CVE-2026-92390.json","https://hackerone.com/reports/4023192"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its\ndocumented anti-clobbering protection if an intermediate 103 Early Hints\nresponse precedes the final HTTP response, or if an `ETag` header is processed\nbefore `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S)\nserver to overwrite an existing local file specified in the\n`Content-Disposition` header despite the presence of the `-J` non-overwrite\nconstraint."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92390","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92390","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"risk":0.44175000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an `ETag` header is processed before `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S) server to overwrite an existing local file specified in the `Content-Disposition` header despite the presence of the `-J` non-overwrite constraint."},"relatedVulnerabilities":[{"id":"CVE-2026-92390","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"urls":["https://curl.se/docs/CVE-2026-92390.html","https://curl.se/docs/CVE-2026-92390.json","https://hackerone.com/reports/4023192"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its\ndocumented anti-clobbering protection if an intermediate 103 Early Hints\nresponse precedes the final HTTP response, or if an `ETag` header is processed\nbefore `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S)\nserver to overwrite an existing local file specified in the\n`Content-Disposition` header despite the presence of the `-J` non-overwrite\nconstraint."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92390","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92390","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"risk":0.44175000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an `ETag` header is processed before `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S) server to overwrite an existing local file specified in the `Content-Disposition` header despite the presence of the `-J` non-overwrite constraint."},"relatedVulnerabilities":[{"id":"CVE-2026-92390","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"urls":["https://curl.se/docs/CVE-2026-92390.html","https://curl.se/docs/CVE-2026-92390.json","https://hackerone.com/reports/4023192"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its\ndocumented anti-clobbering protection if an intermediate 103 Early Hints\nresponse precedes the final HTTP response, or if an `ETag` header is processed\nbefore `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S)\nserver to overwrite an existing local file specified in the\n`Content-Disposition` header despite the presence of the `-J` non-overwrite\nconstraint."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92390","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92390","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"risk":0.44175000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an `ETag` header is processed before `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S) server to overwrite an existing local file specified in the `Content-Disposition` header despite the presence of the `-J` non-overwrite constraint."},"relatedVulnerabilities":[{"id":"CVE-2026-92390","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"urls":["https://curl.se/docs/CVE-2026-92390.html","https://curl.se/docs/CVE-2026-92390.json","https://hackerone.com/reports/4023192"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its\ndocumented anti-clobbering protection if an intermediate 103 Early Hints\nresponse precedes the final HTTP response, or if an `ETag` header is processed\nbefore `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S)\nserver to overwrite an existing local file specified in the\n`Content-Disposition` header despite the presence of the `-J` non-overwrite\nconstraint."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-92390","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-92390","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"risk":0.44175000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an `ETag` header is processed before `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S) server to overwrite an existing local file specified in the `Content-Disposition` header despite the presence of the `-J` non-overwrite constraint."},"relatedVulnerabilities":[{"id":"CVE-2026-92390","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-92390","cwe":"CWE-73","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-92390","date":"2026-11-12","epss":0.00589,"percentile":0.48673}],"urls":["https://curl.se/docs/CVE-2026-92390.html","https://curl.se/docs/CVE-2026-92390.json","https://hackerone.com/reports/4023192"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-92390","description":"When invoked with `--remote-header-name` (`-J`), curl fails to preserve its\ndocumented anti-clobbering protection if an intermediate 103 Early Hints\nresponse precedes the final HTTP response, or if an `ETag` header is processed\nbefore `Content-Disposition` under `--etag-save`. This flaw allows an HTTP(S)\nserver to overwrite an existing local file specified in the\n`Content-Disposition` header despite the presence of the `-J` non-overwrite\nconstraint."}]},{"artifact":{"id":"3339159594e483f3","cpes":["cpe:2.3:a:zlib1g:zlib1g:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*"],"name":"zlib1g","purl":"pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.2-3?arch=amd64&distro=debian&upstream=zlib","type":"deb","version":"1:1.3.dfsg+really1.3.2-3","language":"","licenses":["Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/zlib1g/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/zlib1g/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/zlib1g:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/zlib1g:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"zlib"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:1.3.dfsg+really1.3.2-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-76844","versionConstraint":"< 1:1.3.dfsg+really1.3.2-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"zlib","version":"1:1.3.dfsg+really1.3.2-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-76844","fix":{"state":"fixed","versions":["1:1.3.dfsg+really1.3.2-4"],"available":[{"date":"2026-11-06","kind":"first-observed","version":"1:1.3.dfsg+really1.3.2-4"}]},"cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76844","cwe":"CWE-787","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-76844","date":"2026-11-12","epss":0.00592,"percentile":0.488}],"risk":0.44104,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-76844","description":"zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call."},"relatedVulnerabilities":[{"id":"CVE-2026-76844","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76844","cwe":"CWE-787","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-76844","date":"2026-11-12","epss":0.00592,"percentile":0.488}],"urls":["https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490","https://github.com/madler/zlib","https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393","https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148","https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-76844","description":"zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call."}]},{"artifact":{"id":"b56d73e24bc7ed32","cpes":["cpe:2.3:a:zlib1g-dev:zlib1g-dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g-dev:zlib1g_dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g_dev:zlib1g-dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g_dev:zlib1g_dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g:zlib1g-dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g:zlib1g_dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*"],"name":"zlib1g-dev","purl":"pkg:deb/debian/zlib1g-dev@1%3A1.3.dfsg%2Breally1.3.2-3?arch=amd64&distro=debian&upstream=zlib","type":"deb","version":"1:1.3.dfsg+really1.3.2-3","language":"","licenses":["Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/zlib1g-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/zlib1g-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/zlib1g-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/zlib1g-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"zlib"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:1.3.dfsg+really1.3.2-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-76844","versionConstraint":"< 1:1.3.dfsg+really1.3.2-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"zlib","version":"1:1.3.dfsg+really1.3.2-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-76844","fix":{"state":"fixed","versions":["1:1.3.dfsg+really1.3.2-4"],"available":[{"date":"2026-11-06","kind":"first-observed","version":"1:1.3.dfsg+really1.3.2-4"}]},"cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76844","cwe":"CWE-787","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-76844","date":"2026-11-12","epss":0.00592,"percentile":0.488}],"risk":0.44104,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-76844","description":"zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call."},"relatedVulnerabilities":[{"id":"CVE-2026-76844","cvss":[{"type":"Primary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76844","cwe":"CWE-787","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-76844","date":"2026-11-12","epss":0.00592,"percentile":0.488}],"urls":["https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490","https://github.com/madler/zlib","https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393","https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148","https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-76844","description":"zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call."}]},{"artifact":{"id":"07d7c5dfe0f85e23","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-2768","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-2768","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-2768","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-2768","date":"2026-11-12","epss":0.08615,"percentile":0.95168}],"risk":0.4307500000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-2768","description":"OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243."},"relatedVulnerabilities":[{"id":"CVE-2007-2768","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-2768","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-2768","date":"2026-11-12","epss":0.08615,"percentile":0.95168}],"urls":["http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html","http://www.osvdb.org/34601","https://security.netapp.com/advisory/ntap-20191107-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-2768","description":"OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243."}]},{"artifact":{"id":"c48e99fc55e4e310","cpes":["cpe:2.3:a:openssh-common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-common","purl":"pkg:deb/debian/openssh-common@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.list"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2007-2768","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2007-2768","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2007-2768","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-2768","date":"2026-11-12","epss":0.08615,"percentile":0.95168}],"risk":0.4307500000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2007-2768","description":"OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243."},"relatedVulnerabilities":[{"id":"CVE-2007-2768","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2007-2768","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2007-2768","date":"2026-11-12","epss":0.08615,"percentile":0.95168}],"urls":["http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html","http://www.osvdb.org/34601","https://security.netapp.com/advisory/ntap-20191107-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2007-2768","description":"OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112319","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112319","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"risk":0.42665,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."},"relatedVulnerabilities":[{"id":"CVE-2026-112319","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112319","cwe":"CWE-770","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112319","date":"2026-11-12","epss":0.00742,"percentile":0.55155}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112319","https://bugzilla.redhat.com/show_bug.cgi?id=2478684"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112319","description":"The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that trigger unbounded memory allocations during XDR decoding."}]},{"artifact":{"id":"a3d5d7f96f413ac4","cpes":["cpe:2.3:a:patch:patch:2.8.1-1:*:*:*:*:*:*:*"],"name":"patch","purl":"pkg:deb/debian/patch@2.8.1-1?arch=amd64&distro=debian","type":"deb","version":"2.8.1-1","language":"","licenses":["GPL-3","GPL-3+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/patch/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/patch/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/patch.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/patch.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/patch.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/patch.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-6951","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"patch","version":"2.8.1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-6951","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-6951","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6951","date":"2026-11-12","epss":0.08359,"percentile":0.9504}],"risk":0.41795,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-6951","description":"An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a \"mangled rename\" issue."},"relatedVulnerabilities":[{"id":"CVE-2018-6951","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6951","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6951","date":"2026-11-12","epss":0.08359,"percentile":0.9504}],"urls":["http://www.securityfocus.com/bid/103044","https://git.savannah.gnu.org/cgit/patch.git/commit/?id=f290f48a621867084884bfff87f8093c15195e6a","https://savannah.gnu.org/bugs/index.php?53132","https://security.gentoo.org/glsa/201904-17","https://usn.ubuntu.com/3624-1/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6951","description":"An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_type function in pch.c, aka a \"mangled rename\" issue."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-94266","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94266","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"risk":0.41700000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did."},"relatedVulnerabilities":[{"id":"CVE-2026-94266","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"urls":["https://curl.se/docs/CVE-2026-94266.html","https://curl.se/docs/CVE-2026-94266.json","https://hackerone.com/reports/4041053"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither\nthe URL provided to libcurl nor the redirected URL did."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94266","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94266","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"risk":0.41700000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did."},"relatedVulnerabilities":[{"id":"CVE-2026-94266","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"urls":["https://curl.se/docs/CVE-2026-94266.html","https://curl.se/docs/CVE-2026-94266.json","https://hackerone.com/reports/4041053"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither\nthe URL provided to libcurl nor the redirected URL did."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94266","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94266","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"risk":0.41700000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did."},"relatedVulnerabilities":[{"id":"CVE-2026-94266","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"urls":["https://curl.se/docs/CVE-2026-94266.html","https://curl.se/docs/CVE-2026-94266.json","https://hackerone.com/reports/4041053"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither\nthe URL provided to libcurl nor the redirected URL did."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94266","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94266","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"risk":0.41700000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did."},"relatedVulnerabilities":[{"id":"CVE-2026-94266","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"urls":["https://curl.se/docs/CVE-2026-94266.html","https://curl.se/docs/CVE-2026-94266.json","https://hackerone.com/reports/4041053"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither\nthe URL provided to libcurl nor the redirected URL did."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc2-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-94266","versionConstraint":"< 8.23.0~rc2-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-94266","fix":{"state":"fixed","versions":["8.23.0~rc2-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc2-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"risk":0.41700000000000004,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did."},"relatedVulnerabilities":[{"id":"CVE-2026-94266","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-94266","cwe":"CWE-522","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-94266","date":"2026-11-12","epss":0.00556,"percentile":0.46868}],"urls":["https://curl.se/docs/CVE-2026-94266.html","https://curl.se/docs/CVE-2026-94266.json","https://hackerone.com/reports/4041053"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-94266","description":"libcurl could accidentally return a URL for `curl_easy_getinfo()`'s\n`CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither\nthe URL provided to libcurl nor the redirected URL did."}]},{"artifact":{"id":"a3d5d7f96f413ac4","cpes":["cpe:2.3:a:patch:patch:2.8.1-1:*:*:*:*:*:*:*"],"name":"patch","purl":"pkg:deb/debian/patch@2.8.1-1?arch=amd64&distro=debian","type":"deb","version":"2.8.1-1","language":"","licenses":["GPL-3","GPL-3+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/patch/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/patch/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/patch.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/patch.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/patch.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/patch.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-6952","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"patch","version":"2.8.1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-6952","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-6952","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6952","date":"2026-11-12","epss":0.0819,"percentile":0.94948}],"risk":0.40950000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-6952","description":"A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6."},"relatedVulnerabilities":[{"id":"CVE-2018-6952","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-6952","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-6952","date":"2026-11-12","epss":0.0819,"percentile":0.94948}],"urls":["http://www.securityfocus.com/bid/103047","https://access.redhat.com/errata/RHSA-2019:2033","https://savannah.gnu.org/bugs/index.php?53133","https://security.gentoo.org/glsa/201904-17"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-6952","description":"A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6."}]},{"artifact":{"id":"0695bd7e868d6107","cpes":["cpe:2.3:a:imagemagick:imagemagick:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick","purl":"pkg:deb/debian/imagemagick@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"7a4bc39fb8ea1d58","cpes":["cpe:2.3:a:imagemagick-7-common:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7-common:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7_common:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7_common:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick-7-common","purl":"pkg:deb/debian/imagemagick-7-common@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick-7-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.conffiles","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"711ea8c9616391e6","cpes":["cpe:2.3:a:imagemagick-7.q16:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7.q16:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7.q16:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7.q16:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick-7.q16","purl":"pkg:deb/debian/imagemagick-7.q16@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7.q16/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick-7.q16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.list"},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.postinst","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.postinst"},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.prerm","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.prerm"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"c7b9d56ef8d6960d","cpes":["cpe:2.3:a:libmagickcore-7-arch-config:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch-config:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch_config:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch_config:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7-arch-config","purl":"pkg:deb/debian/libmagickcore-7-arch-config@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7-arch-config/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7-arch-config/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-arch-config:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-arch-config:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"7119e048a56708ab","cpes":["cpe:2.3:a:libmagickcore-7-headers:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-headers:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_headers:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_headers:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7-headers","purl":"pkg:deb/debian/libmagickcore-7-headers@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7-headers/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-headers.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-headers.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-headers.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-headers.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"e3a460b5bee5a3bc","cpes":["cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-10","purl":"pkg:deb/debian/libmagickcore-7.q16-10@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-10/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-10/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-10:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-10:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"a10b653773e8078d","cpes":["cpe:2.3:a:libmagickcore-7.q16-10-extra:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10-extra:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10_extra:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10_extra:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-10-extra","purl":"pkg:deb/debian/libmagickcore-7.q16-10-extra@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-10-extra/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-10-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-10-extra:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-10-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"e9f150127625ceac","cpes":["cpe:2.3:a:libmagickcore-7.q16-dev:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-dev:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_dev:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_dev:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-dev","purl":"pkg:deb/debian/libmagickcore-7.q16-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"971d292dc1c1d557","cpes":["cpe:2.3:a:libmagickcore-dev:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-dev:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_dev:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_dev:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-dev","purl":"pkg:deb/debian/libmagickcore-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-dev.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"3fcb0641d70abb91","cpes":["cpe:2.3:a:libmagickwand-7-headers:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7-headers:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7_headers:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7_headers:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7-headers","purl":"pkg:deb/debian/libmagickwand-7-headers@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7-headers/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7-headers.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7-headers.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7-headers.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7-headers.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"1417d15de079a665","cpes":["cpe:2.3:a:libmagickwand-7.q16-10:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16-10:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_10:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_10:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7.q16-10","purl":"pkg:deb/debian/libmagickwand-7.q16-10@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickwand-7.q16-10/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7.q16-10/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7.q16-10:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7.q16-10:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"63a91a8a99d34271","cpes":["cpe:2.3:a:libmagickwand-7.q16-dev:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16-dev:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_dev:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_dev:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7.q16-dev","purl":"pkg:deb/debian/libmagickwand-7.q16-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickwand-7.q16-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7.q16-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7.q16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7.q16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"7d8cd8c1d380ef25","cpes":["cpe:2.3:a:libmagickwand-dev:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-dev:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_dev:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_dev:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-dev","purl":"pkg:deb/debian/libmagickwand-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-dev.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-34152","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-34152","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"risk":0.40055,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."},"relatedVulnerabilities":[{"id":"CVE-2023-34152","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-34152","cwe":"CWE-20","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2023-34152","cwe":"CWE-78","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2023-34152","date":"2026-11-12","epss":0.08011,"percentile":0.94846}],"urls":["https://access.redhat.com/security/cve/CVE-2023-34152","https://bugzilla.redhat.com/show_bug.cgi?id=2210659","https://github.com/ImageMagick/ImageMagick/issues/6339","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-34152","description":"A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112316","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112316","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"risk":0.40019999999999994,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."},"relatedVulnerabilities":[{"id":"CVE-2026-112316","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112316","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112316","date":"2026-11-12","epss":0.00696,"percentile":0.53489}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112316","https://bugzilla.redhat.com/show_bug.cgi?id=2479331"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112316","description":"xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requests that trigger a decode failure."}]},{"artifact":{"id":"368ecc2a14e64339","cpes":["cpe:2.3:a:wget:wget:1.25.0-3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/debian/wget@1.25.0-3?arch=amd64&distro=debian","type":"deb","version":"1.25.0-3","language":"","licenses":["sha256:289d796794edf8c547691e415ddd7ba3396e6e6d8de03397bd69ce9515914bf8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-58469","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"wget","version":"1.25.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-58469","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58469","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58469","date":"2026-11-12","epss":0.00493,"percentile":0.42871}],"risk":0.39933,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-58469","description":"GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior."},"relatedVulnerabilities":[{"id":"CVE-2026-58469","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58469","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58469","date":"2026-11-12","epss":0.00493,"percentile":0.42871}],"urls":["https://gitlab.com/gnuwget/wget/-/commit/37a40fcb450153f69537c7cbc2a7a4fb0b6f7826","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-underread-via-metalink-url-parsing"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58469","description":"GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior."}]},{"artifact":{"id":"afcdfb1fd4153ff0","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/debian/libpython3.14-minimal@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119170","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119170","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119170","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-119170","date":"2026-11-12","epss":0.00488,"percentile":0.425}],"risk":0.38308,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119170","description":"There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected."},"relatedVulnerabilities":[{"id":"CVE-2026-119170","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119170","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-119170","date":"2026-11-12","epss":0.00488,"percentile":0.425}],"urls":["https://github.com/python/cpython/issues/160923","https://github.com/python/cpython/pull/160984","https://mail.python.org/archives/list/security-announce@python.org/thread/PXVTTOBPUMFJSSUXN6XCS7FC5DZOSZXK/","http://www.openwall.com/lists/oss-security/2026/11/06/30"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119170","description":"There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected."}]},{"artifact":{"id":"2a5133c0b95e31b2","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/debian/libpython3.14-stdlib@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119170","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119170","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119170","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-119170","date":"2026-11-12","epss":0.00488,"percentile":0.425}],"risk":0.38308,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119170","description":"There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected."},"relatedVulnerabilities":[{"id":"CVE-2026-119170","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119170","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-119170","date":"2026-11-12","epss":0.00488,"percentile":0.425}],"urls":["https://github.com/python/cpython/issues/160923","https://github.com/python/cpython/pull/160984","https://mail.python.org/archives/list/security-announce@python.org/thread/PXVTTOBPUMFJSSUXN6XCS7FC5DZOSZXK/","http://www.openwall.com/lists/oss-security/2026/11/06/30"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119170","description":"There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected."}]},{"artifact":{"id":"0e4ec4976150622c","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.10-1:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/debian/python3.14@3.14.10-1?arch=amd64&distro=debian","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-119170","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119170","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119170","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-119170","date":"2026-11-12","epss":0.00488,"percentile":0.425}],"risk":0.38308,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119170","description":"There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected."},"relatedVulnerabilities":[{"id":"CVE-2026-119170","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119170","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-119170","date":"2026-11-12","epss":0.00488,"percentile":0.425}],"urls":["https://github.com/python/cpython/issues/160923","https://github.com/python/cpython/pull/160984","https://mail.python.org/archives/list/security-announce@python.org/thread/PXVTTOBPUMFJSSUXN6XCS7FC5DZOSZXK/","http://www.openwall.com/lists/oss-security/2026/11/06/30"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119170","description":"There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected."}]},{"artifact":{"id":"861fde9fefc30b37","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/debian/python3.14-minimal@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119170","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119170","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119170","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-119170","date":"2026-11-12","epss":0.00488,"percentile":0.425}],"risk":0.38308,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119170","description":"There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected."},"relatedVulnerabilities":[{"id":"CVE-2026-119170","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119170","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-119170","date":"2026-11-12","epss":0.00488,"percentile":0.425}],"urls":["https://github.com/python/cpython/issues/160923","https://github.com/python/cpython/pull/160984","https://mail.python.org/archives/list/security-announce@python.org/thread/PXVTTOBPUMFJSSUXN6XCS7FC5DZOSZXK/","http://www.openwall.com/lists/oss-security/2026/11/06/30"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119170","description":"There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected."}]},{"artifact":{"id":"3339159594e483f3","cpes":["cpe:2.3:a:zlib1g:zlib1g:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*"],"name":"zlib1g","purl":"pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.2-3?arch=amd64&distro=debian&upstream=zlib","type":"deb","version":"1:1.3.dfsg+really1.3.2-3","language":"","licenses":["Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/zlib1g/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/zlib1g/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/zlib1g:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/zlib1g:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"zlib"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:1.3.dfsg+really1.3.2-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"< 1:1.3.dfsg+really1.3.2-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"zlib","version":"1:1.3.dfsg+really1.3.2-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-85091","fix":{"state":"fixed","versions":["1:1.3.dfsg+really1.3.2-4"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"1:1.3.dfsg+really1.3.2-4"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-11-12","epss":0.00469,"percentile":0.41055}],"risk":0.37051,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-85091","description":"zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-85091","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-11-12","epss":0.00469,"percentile":0.41055}],"urls":["https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490","https://github.com/madler/zlib","https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393","https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85091","description":"zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary."}]},{"artifact":{"id":"b56d73e24bc7ed32","cpes":["cpe:2.3:a:zlib1g-dev:zlib1g-dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g-dev:zlib1g_dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g_dev:zlib1g-dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g_dev:zlib1g_dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g:zlib1g-dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*","cpe:2.3:a:zlib1g:zlib1g_dev:1\\:1.3.dfsg\\+really1.3.2-3:*:*:*:*:*:*:*"],"name":"zlib1g-dev","purl":"pkg:deb/debian/zlib1g-dev@1%3A1.3.dfsg%2Breally1.3.2-3?arch=amd64&distro=debian&upstream=zlib","type":"deb","version":"1:1.3.dfsg+really1.3.2-3","language":"","licenses":["Zlib"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/zlib1g-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/zlib1g-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/zlib1g-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/zlib1g-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"zlib"}]},"matchDetails":[{"fix":{"suggestedVersion":"1:1.3.dfsg+really1.3.2-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"< 1:1.3.dfsg+really1.3.2-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"zlib","version":"1:1.3.dfsg+really1.3.2-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-85091","fix":{"state":"fixed","versions":["1:1.3.dfsg+really1.3.2-4"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"1:1.3.dfsg+really1.3.2-4"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-11-12","epss":0.00469,"percentile":0.41055}],"risk":0.37051,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-85091","description":"zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary."},"relatedVulnerabilities":[{"id":"CVE-2026-85091","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-11-12","epss":0.00469,"percentile":0.41055}],"urls":["https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490","https://github.com/madler/zlib","https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393","https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85091","description":"zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary."}]},{"artifact":{"id":"540116853ba87f34","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.9.0-1:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.9.0-1?arch=amd64&distro=debian&upstream=expat","type":"deb","version":"2.9.0-1","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.10.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-113351","versionConstraint":"< 2.10.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"expat","version":"2.9.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-113351","fix":{"state":"fixed","versions":["2.10.0-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"2.10.0-1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113351","cwe":"CWE-909","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-113351","date":"2026-11-12","epss":0.00494,"percentile":0.42915}],"risk":0.3705,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-113351","description":"libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated."},"relatedVulnerabilities":[{"id":"CVE-2026-113351","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113351","cwe":"CWE-909","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-113351","date":"2026-11-12","epss":0.00494,"percentile":0.42915}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L1560","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L860-L884","https://github.com/libexpat/libexpat/pull/1431","https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.9.0-denial-of-service-via-xml-parserreset"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113351","description":"libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated."}]},{"artifact":{"id":"dd626bf403c4c7f1","cpes":["cpe:2.3:a:cpp-16:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"cpp-16","purl":"pkg:deb/debian/cpp-16@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/cpp-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/cpp-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"13ed6b1ac5e61dbc","cpes":["cpe:2.3:a:cpp-16-x86-64-linux-gnu:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux-gnu:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux_gnu:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux_gnu:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"cpp-16-x86-64-linux-gnu","purl":"pkg:deb/debian/cpp-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/cpp-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"6fdf575703efebb7","cpes":["cpe:2.3:a:g\\+\\+-16:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"g++-16","purl":"pkg:deb/debian/g%2B%2B-16@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/g++-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/g++-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/g++-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"156cb016263a72ec","cpes":["cpe:2.3:a:g\\+\\+-16-x86-64-linux-gnu:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux-gnu:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux_gnu:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux_gnu:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"g++-16-x86-64-linux-gnu","purl":"pkg:deb/debian/g%2B%2B-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/g++-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"c64db8787da12d2c","cpes":["cpe:2.3:a:gcc-16:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16","purl":"pkg:deb/debian/gcc-16@16.2.0-3?arch=amd64&distro=debian","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/gcc-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"1b825b249b1ebaeb","cpes":["cpe:2.3:a:gcc-16-base:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-base:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_base:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_base:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16-base","purl":"pkg:deb/debian/gcc-16-base@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16-base:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/gcc-16-base:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"d1c6b2b476fb69b7","cpes":["cpe:2.3:a:gcc-16-x86-64-linux-gnu:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux-gnu:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux_gnu:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux_gnu:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16-x86-64-linux-gnu","purl":"pkg:deb/debian/gcc-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"74052697ab3b5326","cpes":["cpe:2.3:a:libasan8:libasan8:16.2.0-3:*:*:*:*:*:*:*"],"name":"libasan8","purl":"pkg:deb/debian/libasan8@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libasan8:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libasan8:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libasan8/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"a488a702738e4c85","cpes":["cpe:2.3:a:libatomic1:libatomic1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libatomic1","purl":"pkg:deb/debian/libatomic1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libatomic1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libatomic1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libatomic1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"6d3aa2362948430b","cpes":["cpe:2.3:a:libcc1-0:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1-0:libcc1_0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1_0:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1_0:libcc1_0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1:libcc1_0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libcc1-0","purl":"pkg:deb/debian/libcc1-0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libcc1-0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcc1-0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libcc1-0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"7e518a782786994e","cpes":["cpe:2.3:a:libgcc-16-dev:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16-dev:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16_dev:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16_dev:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgcc-16-dev","purl":"pkg:deb/debian/libgcc-16-dev@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libgcc-16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgcc-16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgcc-16-dev/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"8520c2979cc4e2cf","cpes":["cpe:2.3:a:libgcc-s1:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-s1:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgcc-s1","purl":"pkg:deb/debian/libgcc-s1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgcc-s1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"48afdb826bf3dd8a","cpes":["cpe:2.3:a:libgomp1:libgomp1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgomp1","purl":"pkg:deb/debian/libgomp1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libgomp1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgomp1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgomp1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"d3272bdf290e009a","cpes":["cpe:2.3:a:libhwasan0:libhwasan0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libhwasan0","purl":"pkg:deb/debian/libhwasan0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libhwasan0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libhwasan0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libhwasan0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"e0d798b4e81415fc","cpes":["cpe:2.3:a:libitm1:libitm1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libitm1","purl":"pkg:deb/debian/libitm1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libitm1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libitm1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libitm1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"91c02bde87f9e21c","cpes":["cpe:2.3:a:liblsan0:liblsan0:16.2.0-3:*:*:*:*:*:*:*"],"name":"liblsan0","purl":"pkg:deb/debian/liblsan0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/liblsan0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/liblsan0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/liblsan0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"396ed1be8e164552","cpes":["cpe:2.3:a:libquadmath0:libquadmath0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libquadmath0","purl":"pkg:deb/debian/libquadmath0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libquadmath0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libquadmath0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libquadmath0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"6da02f5e6a8df519","cpes":["cpe:2.3:a:libstdc\\+\\+-16-dev:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16-dev:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16_dev:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16_dev:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*"],"name":"libstdc++-16-dev","purl":"pkg:deb/debian/libstdc%2B%2B-16-dev@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libstdc++-16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libstdc++-16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libstdc++-16-dev/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"d4533c669aff8d23","cpes":["cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:16.2.0-3:*:*:*:*:*:*:*"],"name":"libstdc++6","purl":"pkg:deb/debian/libstdc%2B%2B6@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libstdc++6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"950689fe03ace00f","cpes":["cpe:2.3:a:libtsan2:libtsan2:16.2.0-3:*:*:*:*:*:*:*"],"name":"libtsan2","purl":"pkg:deb/debian/libtsan2@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libtsan2:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libtsan2:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libtsan2/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"bb3bee85f74bcbcf","cpes":["cpe:2.3:a:libubsan1:libubsan1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libubsan1","purl":"pkg:deb/debian/libubsan1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libubsan1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libubsan1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libubsan1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-95619","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-95619","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"risk":0.36632,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."},"relatedVulnerabilities":[{"id":"CVE-2026-95619","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H","metrics":{"baseScore":7.7,"impactScore":5.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-95619","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-95619","date":"2026-11-12","epss":0.00482,"percentile":0.42087}],"urls":["https://access.redhat.com/errata/RHSA-2026:58503","https://access.redhat.com/errata/RHSA-2026:67275","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/security/cve/CVE-2026-95619","https://bugzilla.redhat.com/show_bug.cgi?id=2537811"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-95619","description":"A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the aligned operator new in the C++ library. This vulnerability could lead to an undersized memory allocation, potentially causing memory corruption or application instability."}]},{"artifact":{"id":"dd626bf403c4c7f1","cpes":["cpe:2.3:a:cpp-16:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"cpp-16","purl":"pkg:deb/debian/cpp-16@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/cpp-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/cpp-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"13ed6b1ac5e61dbc","cpes":["cpe:2.3:a:cpp-16-x86-64-linux-gnu:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux-gnu:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux_gnu:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux_gnu:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"cpp-16-x86-64-linux-gnu","purl":"pkg:deb/debian/cpp-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/cpp-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"6fdf575703efebb7","cpes":["cpe:2.3:a:g\\+\\+-16:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"g++-16","purl":"pkg:deb/debian/g%2B%2B-16@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/g++-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/g++-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/g++-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"156cb016263a72ec","cpes":["cpe:2.3:a:g\\+\\+-16-x86-64-linux-gnu:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux-gnu:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux_gnu:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux_gnu:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"g++-16-x86-64-linux-gnu","purl":"pkg:deb/debian/g%2B%2B-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/g++-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"c64db8787da12d2c","cpes":["cpe:2.3:a:gcc-16:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16","purl":"pkg:deb/debian/gcc-16@16.2.0-3?arch=amd64&distro=debian","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/gcc-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"1b825b249b1ebaeb","cpes":["cpe:2.3:a:gcc-16-base:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-base:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_base:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_base:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16-base","purl":"pkg:deb/debian/gcc-16-base@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16-base:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/gcc-16-base:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"d1c6b2b476fb69b7","cpes":["cpe:2.3:a:gcc-16-x86-64-linux-gnu:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux-gnu:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux_gnu:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux_gnu:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16-x86-64-linux-gnu","purl":"pkg:deb/debian/gcc-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"74052697ab3b5326","cpes":["cpe:2.3:a:libasan8:libasan8:16.2.0-3:*:*:*:*:*:*:*"],"name":"libasan8","purl":"pkg:deb/debian/libasan8@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libasan8:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libasan8:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libasan8/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"a488a702738e4c85","cpes":["cpe:2.3:a:libatomic1:libatomic1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libatomic1","purl":"pkg:deb/debian/libatomic1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libatomic1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libatomic1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libatomic1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"6d3aa2362948430b","cpes":["cpe:2.3:a:libcc1-0:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1-0:libcc1_0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1_0:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1_0:libcc1_0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1:libcc1_0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libcc1-0","purl":"pkg:deb/debian/libcc1-0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libcc1-0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcc1-0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libcc1-0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"7e518a782786994e","cpes":["cpe:2.3:a:libgcc-16-dev:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16-dev:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16_dev:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16_dev:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgcc-16-dev","purl":"pkg:deb/debian/libgcc-16-dev@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libgcc-16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgcc-16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgcc-16-dev/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"8520c2979cc4e2cf","cpes":["cpe:2.3:a:libgcc-s1:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-s1:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgcc-s1","purl":"pkg:deb/debian/libgcc-s1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgcc-s1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"48afdb826bf3dd8a","cpes":["cpe:2.3:a:libgomp1:libgomp1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgomp1","purl":"pkg:deb/debian/libgomp1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libgomp1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgomp1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgomp1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"d3272bdf290e009a","cpes":["cpe:2.3:a:libhwasan0:libhwasan0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libhwasan0","purl":"pkg:deb/debian/libhwasan0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libhwasan0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libhwasan0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libhwasan0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"e0d798b4e81415fc","cpes":["cpe:2.3:a:libitm1:libitm1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libitm1","purl":"pkg:deb/debian/libitm1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libitm1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libitm1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libitm1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"91c02bde87f9e21c","cpes":["cpe:2.3:a:liblsan0:liblsan0:16.2.0-3:*:*:*:*:*:*:*"],"name":"liblsan0","purl":"pkg:deb/debian/liblsan0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/liblsan0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/liblsan0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/liblsan0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"396ed1be8e164552","cpes":["cpe:2.3:a:libquadmath0:libquadmath0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libquadmath0","purl":"pkg:deb/debian/libquadmath0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libquadmath0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libquadmath0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libquadmath0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"6da02f5e6a8df519","cpes":["cpe:2.3:a:libstdc\\+\\+-16-dev:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16-dev:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16_dev:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16_dev:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*"],"name":"libstdc++-16-dev","purl":"pkg:deb/debian/libstdc%2B%2B-16-dev@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libstdc++-16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libstdc++-16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libstdc++-16-dev/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"d4533c669aff8d23","cpes":["cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:16.2.0-3:*:*:*:*:*:*:*"],"name":"libstdc++6","purl":"pkg:deb/debian/libstdc%2B%2B6@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libstdc++6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"950689fe03ace00f","cpes":["cpe:2.3:a:libtsan2:libtsan2:16.2.0-3:*:*:*:*:*:*:*"],"name":"libtsan2","purl":"pkg:deb/debian/libtsan2@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libtsan2:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libtsan2:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libtsan2/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"bb3bee85f74bcbcf","cpes":["cpe:2.3:a:libubsan1:libubsan1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libubsan1","purl":"pkg:deb/debian/libubsan1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libubsan1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libubsan1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libubsan1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114691","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-114691","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"risk":0.36515000000000003,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."},"relatedVulnerabilities":[{"id":"CVE-2026-114691","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114691","cwe":"CWE-190","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-114691","date":"2026-11-12","epss":0.0067,"percentile":0.5248}],"urls":["https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98115","https://access.redhat.com/errata/RHSA-2026:98524","https://access.redhat.com/errata/RHSA-2026:98526","https://access.redhat.com/errata/RHSA-2026:98534","https://access.redhat.com/errata/RHSA-2026:98633","https://access.redhat.com/errata/RHSA-2026:98640","https://access.redhat.com/errata/RHSA-2026:98648","https://access.redhat.com/errata/RHSA-2026:99632","https://access.redhat.com/security/cve/CVE-2026-114691","https://bugzilla.redhat.com/show_bug.cgi?id=2478508"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114691","description":"A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element count to a boolean vector (std::vector<bool>) constructor can trigger an integer wrap during internal memory calculations. This issue leaves the container in an inconsistent state, leading to out-of-bounds memory access and resulting in an application crash or a Denial of Service (DoS) during subsequent operations."}]},{"artifact":{"id":"540116853ba87f34","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.9.0-1:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.9.0-1?arch=amd64&distro=debian&upstream=expat","type":"deb","version":"2.9.0-1","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.10.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115506","versionConstraint":"< 2.10.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"expat","version":"2.9.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-115506","fix":{"state":"fixed","versions":["2.10.0-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"2.10.0-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115506","cwe":"CWE-776","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-115506","date":"2026-11-12","epss":0.00448,"percentile":0.3943}],"risk":0.3628799999999999,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-115506","description":"libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse."},"relatedVulnerabilities":[{"id":"CVE-2026-115506","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115506","cwe":"CWE-776","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-115506","date":"2026-11-12","epss":0.00448,"percentile":0.3943}],"urls":["https://github.com/hannob/lololol","https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/issues/1160","https://github.com/libexpat/libexpat/pull/1433","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-denial-of-service-via-billion-laughs-detection-delay"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115506","description":"libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can supply a moderately sized XML document with a large DTD and nested entity expansions to consume tens of seconds of CPU per parse."}]},{"artifact":{"id":"f4dbf491a6d57e4f","cpes":["cpe:2.3:a:libldap-dev:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap-dev:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap_dev:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap_dev:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*"],"name":"libldap-dev","purl":"pkg:deb/debian/libldap-dev@2.6.14%2Bdfsg-2?arch=amd64&distro=debian&upstream=openldap","type":"deb","version":"2.6.14+dfsg-2","language":"","licenses":["BSD-3-clause","BSD-3-clause-California","BSD-3-clause-variant","BSD-4-clause-California","Beerware","Expat","Expat-ISC","Expat-UNM","F5","FSF-unlimited","GPL-2","GPL-2+","GPL-3","GPL-3+","JCG","MIT-XC","NeoSoft-permissive","OpenLDAP-2.8","UMich","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libldap-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libldap-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-17740","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openldap","version":"2.6.14+dfsg-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2017-17740","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-17740","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-17740","date":"2026-11-12","epss":0.07022,"percentile":0.94264}],"risk":0.3511,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2017-17740","description":"contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation."},"relatedVulnerabilities":[{"id":"CVE-2017-17740","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-17740","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-17740","date":"2026-11-12","epss":0.07022,"percentile":0.94264}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html","http://www.openldap.org/its/index.cgi/Incoming?id=8759","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-17740","description":"contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation."}]},{"artifact":{"id":"ee1fb93e1790b636","cpes":["cpe:2.3:a:libldap2:libldap2:2.6.14\\+dfsg-2:*:*:*:*:*:*:*"],"name":"libldap2","purl":"pkg:deb/debian/libldap2@2.6.14%2Bdfsg-2?arch=amd64&distro=debian&upstream=openldap","type":"deb","version":"2.6.14+dfsg-2","language":"","licenses":["BSD-3-clause","BSD-3-clause-California","BSD-3-clause-variant","BSD-4-clause-California","Beerware","Expat","Expat-ISC","Expat-UNM","F5","FSF-unlimited","GPL-2","GPL-2+","GPL-3","GPL-3+","JCG","MIT-XC","NeoSoft-permissive","OpenLDAP-2.8","UMich","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libldap2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libldap2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-17740","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openldap","version":"2.6.14+dfsg-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2017-17740","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-17740","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-17740","date":"2026-11-12","epss":0.07022,"percentile":0.94264}],"risk":0.3511,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2017-17740","description":"contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation."},"relatedVulnerabilities":[{"id":"CVE-2017-17740","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-17740","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-17740","date":"2026-11-12","epss":0.07022,"percentile":0.94264}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00053.html","http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00058.html","http://www.openldap.org/its/index.cgi/Incoming?id=8759","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-17740","description":"contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112315","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112315","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"risk":0.340415,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."},"relatedVulnerabilities":[{"id":"CVE-2026-112315","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112315","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112315","date":"2026-11-12","epss":0.00661,"percentile":0.52143}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112315","https://bugzilla.redhat.com/show_bug.cgi?id=2479403"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112315","description":"The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages."}]},{"artifact":{"id":"2b32f90543a7a3e8","cpes":["cpe:2.3:a:libxslt1-dev:libxslt1-dev:1.1.45-0.1:*:*:*:*:*:*:*","cpe:2.3:a:libxslt1-dev:libxslt1_dev:1.1.45-0.1:*:*:*:*:*:*:*","cpe:2.3:a:libxslt1_dev:libxslt1-dev:1.1.45-0.1:*:*:*:*:*:*:*","cpe:2.3:a:libxslt1_dev:libxslt1_dev:1.1.45-0.1:*:*:*:*:*:*:*","cpe:2.3:a:libxslt1:libxslt1-dev:1.1.45-0.1:*:*:*:*:*:*:*","cpe:2.3:a:libxslt1:libxslt1_dev:1.1.45-0.1:*:*:*:*:*:*:*"],"name":"libxslt1-dev","purl":"pkg:deb/debian/libxslt1-dev@1.1.45-0.1?arch=amd64&distro=debian&upstream=libxslt","type":"deb","version":"1.1.45-0.1","language":"","licenses":["sha256:4b82c8dd6e55001a5921bea1d6db20be5c51e5976d892e870324026c23f37b6f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxslt1-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libxslt1-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxslt1-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libxslt1-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxslt"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-7425","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libxslt","version":"1.1.45-0.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2025-7425","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7425","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-7425","date":"2026-11-12","epss":0.00444,"percentile":0.39086}],"risk":0.3396600000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-7425","description":"A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption."},"relatedVulnerabilities":[{"id":"CVE-2025-7425","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7425","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-7425","date":"2026-11-12","epss":0.00444,"percentile":0.39086}],"urls":["https://access.redhat.com/errata/RHBA-2025:12345","https://access.redhat.com/errata/RHSA-2025:12447","https://access.redhat.com/errata/RHSA-2025:12450","https://access.redhat.com/errata/RHSA-2025:13267","https://access.redhat.com/errata/RHSA-2025:13308","https://access.redhat.com/errata/RHSA-2025:13309","https://access.redhat.com/errata/RHSA-2025:13310","https://access.redhat.com/errata/RHSA-2025:13311","https://access.redhat.com/errata/RHSA-2025:13312","https://access.redhat.com/errata/RHSA-2025:13313","https://access.redhat.com/errata/RHSA-2025:13314","https://access.redhat.com/errata/RHSA-2025:13335","https://access.redhat.com/errata/RHSA-2025:13464","https://access.redhat.com/errata/RHSA-2025:13622","https://access.redhat.com/errata/RHSA-2025:14059","https://access.redhat.com/errata/RHSA-2025:14396","https://access.redhat.com/errata/RHSA-2025:14818","https://access.redhat.com/errata/RHSA-2025:14819","https://access.redhat.com/errata/RHSA-2025:14853","https://access.redhat.com/errata/RHSA-2025:14858","https://access.redhat.com/errata/RHSA-2025:15308","https://access.redhat.com/errata/RHSA-2025:15672","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:21913","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2025-7425","https://bugzilla.redhat.com/show_bug.cgi?id=2379274","https://gitlab.gnome.org/GNOME/libxslt/-/issues/140","http://seclists.org/fulldisclosure/2025/Aug/0","http://seclists.org/fulldisclosure/2025/Jul/30","http://seclists.org/fulldisclosure/2025/Jul/32","http://seclists.org/fulldisclosure/2025/Jul/35","http://seclists.org/fulldisclosure/2025/Jul/37","http://www.openwall.com/lists/oss-security/2025/07/11/2","https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-7425","description":"A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption."}]},{"artifact":{"id":"345ba74642c2b817","cpes":["cpe:2.3:a:libxslt1.1:libxslt1.1:1.1.45-0.1:*:*:*:*:*:*:*"],"name":"libxslt1.1","purl":"pkg:deb/debian/libxslt1.1@1.1.45-0.1?arch=amd64&distro=debian&upstream=libxslt","type":"deb","version":"1.1.45-0.1","language":"","licenses":["sha256:4b82c8dd6e55001a5921bea1d6db20be5c51e5976d892e870324026c23f37b6f"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libxslt1.1/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libxslt1.1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libxslt1.1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libxslt1.1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"libxslt"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-7425","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"libxslt","version":"1.1.45-0.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2025-7425","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7425","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-7425","date":"2026-11-12","epss":0.00444,"percentile":0.39086}],"risk":0.3396600000000001,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-7425","description":"A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption."},"relatedVulnerabilities":[{"id":"CVE-2025-7425","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-7425","cwe":"CWE-416","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2025-7425","date":"2026-11-12","epss":0.00444,"percentile":0.39086}],"urls":["https://access.redhat.com/errata/RHBA-2025:12345","https://access.redhat.com/errata/RHSA-2025:12447","https://access.redhat.com/errata/RHSA-2025:12450","https://access.redhat.com/errata/RHSA-2025:13267","https://access.redhat.com/errata/RHSA-2025:13308","https://access.redhat.com/errata/RHSA-2025:13309","https://access.redhat.com/errata/RHSA-2025:13310","https://access.redhat.com/errata/RHSA-2025:13311","https://access.redhat.com/errata/RHSA-2025:13312","https://access.redhat.com/errata/RHSA-2025:13313","https://access.redhat.com/errata/RHSA-2025:13314","https://access.redhat.com/errata/RHSA-2025:13335","https://access.redhat.com/errata/RHSA-2025:13464","https://access.redhat.com/errata/RHSA-2025:13622","https://access.redhat.com/errata/RHSA-2025:14059","https://access.redhat.com/errata/RHSA-2025:14396","https://access.redhat.com/errata/RHSA-2025:14818","https://access.redhat.com/errata/RHSA-2025:14819","https://access.redhat.com/errata/RHSA-2025:14853","https://access.redhat.com/errata/RHSA-2025:14858","https://access.redhat.com/errata/RHSA-2025:15308","https://access.redhat.com/errata/RHSA-2025:15672","https://access.redhat.com/errata/RHSA-2025:15827","https://access.redhat.com/errata/RHSA-2025:15828","https://access.redhat.com/errata/RHSA-2025:18219","https://access.redhat.com/errata/RHSA-2025:21885","https://access.redhat.com/errata/RHSA-2025:21913","https://access.redhat.com/errata/RHSA-2026:0934","https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2025-7425","https://bugzilla.redhat.com/show_bug.cgi?id=2379274","https://gitlab.gnome.org/GNOME/libxslt/-/issues/140","http://seclists.org/fulldisclosure/2025/Aug/0","http://seclists.org/fulldisclosure/2025/Jul/30","http://seclists.org/fulldisclosure/2025/Jul/32","http://seclists.org/fulldisclosure/2025/Jul/35","http://seclists.org/fulldisclosure/2025/Jul/37","http://www.openwall.com/lists/oss-security/2025/07/11/2","https://lists.debian.org/debian-lts-announce/2025/09/msg00035.html","https://cert-portal.siemens.com/productcert/html/ssa-032379.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-265688.html","https://cert-portal.siemens.com/productcert/html/ssa-577017.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-7425","description":"A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption."}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-39329","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-39329","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39329","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39329","date":"2026-11-12","epss":0.00588,"percentile":0.48618}],"risk":0.33809999999999996,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-39329","description":"A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-39329","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39329","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39329","date":"2026-11-12","epss":0.00588,"percentile":0.48618}],"urls":["https://access.redhat.com/errata/RHSA-2026:4128","https://access.redhat.com/security/cve/CVE-2023-39329","https://bugzilla.redhat.com/show_bug.cgi?id=2295816","https://github.com/uclouvain/openjpeg/issues/1474"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39329","description":"A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-39329","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-39329","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39329","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39329","date":"2026-11-12","epss":0.00588,"percentile":0.48618}],"risk":0.33809999999999996,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-39329","description":"A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2023-39329","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39329","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39329","date":"2026-11-12","epss":0.00588,"percentile":0.48618}],"urls":["https://access.redhat.com/errata/RHSA-2026:4128","https://access.redhat.com/security/cve/CVE-2023-39329","https://bugzilla.redhat.com/show_bug.cgi?id=2295816","https://github.com/uclouvain/openjpeg/issues/1474"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39329","description":"A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a crafted image file, causing a denial of service."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112318","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112318","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"risk":0.32775,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."},"relatedVulnerabilities":[{"id":"CVE-2026-112318","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112318","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112318","date":"2026-11-12","epss":0.0057,"percentile":0.47658}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112318","https://bugzilla.redhat.com/show_bug.cgi?id=2478792"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112318","description":"The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code."}]},{"artifact":{"id":"540116853ba87f34","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.9.0-1:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.9.0-1?arch=amd64&distro=debian&upstream=expat","type":"deb","version":"2.9.0-1","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.10.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-117610","versionConstraint":"< 2.10.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"expat","version":"2.9.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-117610","fix":{"state":"fixed","versions":["2.10.0-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"2.10.0-1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-117610","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-117610","date":"2026-11-12","epss":0.00425,"percentile":0.37298}],"risk":0.31875000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-117610","description":"libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application."},"relatedVulnerabilities":[{"id":"CVE-2026-117610","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-117610","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-117610","date":"2026-11-12","epss":0.00425,"percentile":0.37298}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L3468-L3510","https://github.com/libexpat/libexpat/commit/7b0d50e4b1d16fafd55876260701e04279a7489d","https://github.com/libexpat/libexpat/pull/1444","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-null-pointer-dereference-via-external-entity-subparser"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-117610","description":"libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in lib/xmlparse.c that mishandles the XML_TOK_NONE token from empty input. Attackers who control stream chunking can force an empty non-final first parse on an external entity subparser, causing a later parse to crash the application."}]},{"artifact":{"id":"38948bfd6e1d2bb5","cpes":["cpe:2.3:a:curl:curl:8.22.0-1:*:*:*:*:*:*:*"],"name":"curl","purl":"pkg:deb/debian/curl@8.22.0-1?arch=amd64&distro=debian","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/curl/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/curl/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/curl.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/curl.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-86415","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86415","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"risk":0.31425000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this."},"relatedVulnerabilities":[{"id":"CVE-2026-86415","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"urls":["https://curl.se/docs/CVE-2026-86415.html","https://curl.se/docs/CVE-2026-86415.json","https://hackerone.com/reports/3993870"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client\ncertificate option, so a cached, already authenticated Schannel connection can\nbe handed to a transfer that got redirected to a different origin, even though\nthe code explicitly switched off the auto client cert option for that transfer\nto prevent exactly this."}]},{"artifact":{"id":"7967e23e49844fc8","cpes":["cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64-gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64_gnutls:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl3t64:libcurl3t64_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl3t64-gnutls","purl":"pkg:deb/debian/libcurl3t64-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl3t64-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl3t64-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl3t64-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86415","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86415","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"risk":0.31425000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this."},"relatedVulnerabilities":[{"id":"CVE-2026-86415","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"urls":["https://curl.se/docs/CVE-2026-86415.html","https://curl.se/docs/CVE-2026-86415.json","https://hackerone.com/reports/3993870"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client\ncertificate option, so a cached, already authenticated Schannel connection can\nbe handed to a transfer that got redirected to a different origin, even though\nthe code explicitly switched off the auto client cert option for that transfer\nto prevent exactly this."}]},{"artifact":{"id":"fc5bdcc254cfc970","cpes":["cpe:2.3:a:libcurl4-gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_gnutls:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-gnutls:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_gnutls:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-gnutls","purl":"pkg:deb/debian/libcurl4-gnutls@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-gnutls/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libcurl4-gnutls/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libcurl4-gnutls:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86415","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86415","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"risk":0.31425000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this."},"relatedVulnerabilities":[{"id":"CVE-2026-86415","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"urls":["https://curl.se/docs/CVE-2026-86415.html","https://curl.se/docs/CVE-2026-86415.json","https://hackerone.com/reports/3993870"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client\ncertificate option, so a cached, already authenticated Schannel connection can\nbe handed to a transfer that got redirected to a different origin, even though\nthe code explicitly switched off the auto client cert option for that transfer\nto prevent exactly this."}]},{"artifact":{"id":"fc372d6a878a64ac","cpes":["cpe:2.3:a:libcurl4-openssl-dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl-dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl_dev:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4-openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4_openssl:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4-openssl-dev:8.22.0-1:*:*:*:*:*:*:*","cpe:2.3:a:libcurl4:libcurl4_openssl_dev:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4-openssl-dev","purl":"pkg:deb/debian/libcurl4-openssl-dev@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4-openssl-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libcurl4-openssl-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86415","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86415","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"risk":0.31425000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this."},"relatedVulnerabilities":[{"id":"CVE-2026-86415","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"urls":["https://curl.se/docs/CVE-2026-86415.html","https://curl.se/docs/CVE-2026-86415.json","https://hackerone.com/reports/3993870"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client\ncertificate option, so a cached, already authenticated Schannel connection can\nbe handed to a transfer that got redirected to a different origin, even though\nthe code explicitly switched off the auto client cert option for that transfer\nto prevent exactly this."}]},{"artifact":{"id":"30d9d5e8b034a30a","cpes":["cpe:2.3:a:libcurl4t64:libcurl4t64:8.22.0-1:*:*:*:*:*:*:*"],"name":"libcurl4t64","purl":"pkg:deb/debian/libcurl4t64@8.22.0-1?arch=amd64&distro=debian&upstream=curl","type":"deb","version":"8.22.0-1","language":"","licenses":["BSD-3-Clause","FSFUL","FSFULLR","GPL-2","GPL-2+","GPL-3+","ISC","OLDAP-2.8","X11","curl"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libcurl4t64/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libcurl4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libcurl4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"curl"}]},"matchDetails":[{"fix":{"suggestedVersion":"8.23.0~rc1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-86415","versionConstraint":"< 8.23.0~rc1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"curl","version":"8.22.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-86415","fix":{"state":"fixed","versions":["8.23.0~rc1-1"],"available":[{"date":"2026-10-15","kind":"first-observed","version":"8.23.0~rc1-1"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"risk":0.31425000000000003,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this."},"relatedVulnerabilities":[{"id":"CVE-2026-86415","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-86415","cwe":"CWE-201","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-86415","date":"2026-11-12","epss":0.00419,"percentile":0.36732}],"urls":["https://curl.se/docs/CVE-2026-86415.html","https://curl.se/docs/CVE-2026-86415.json","https://hackerone.com/reports/3993870"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-86415","description":"libcurl's connection cache match function never considers the automatic client\ncertificate option, so a cached, already authenticated Schannel connection can\nbe handed to a transfer that got redirected to a different origin, even though\nthe code explicitly switched off the auto client cert option for that transfer\nto prevent exactly this."}]},{"artifact":{"id":"dd626bf403c4c7f1","cpes":["cpe:2.3:a:cpp-16:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"cpp-16","purl":"pkg:deb/debian/cpp-16@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/cpp-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/cpp-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"13ed6b1ac5e61dbc","cpes":["cpe:2.3:a:cpp-16-x86-64-linux-gnu:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux-gnu:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux_gnu:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux_gnu:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64-linux:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64_linux:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86-64:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86_64:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16-x86:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16_x86:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp-16:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp_16:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:cpp:cpp_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"cpp-16-x86-64-linux-gnu","purl":"pkg:deb/debian/cpp-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/cpp-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/cpp-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"6fdf575703efebb7","cpes":["cpe:2.3:a:g\\+\\+-16:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"g++-16","purl":"pkg:deb/debian/g%2B%2B-16@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/g++-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/g++-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/g++-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"156cb016263a72ec","cpes":["cpe:2.3:a:g\\+\\+-16-x86-64-linux-gnu:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux-gnu:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux_gnu:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux_gnu:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64-linux:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64_linux:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86-64:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86_64:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16-x86:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16_x86:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+-16:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+_16:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:g\\+\\+:g\\+\\+_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"g++-16-x86-64-linux-gnu","purl":"pkg:deb/debian/g%2B%2B-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/g++-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/g++-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"c64db8787da12d2c","cpes":["cpe:2.3:a:gcc-16:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16","purl":"pkg:deb/debian/gcc-16@16.2.0-3?arch=amd64&distro=debian","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/gcc-16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"1b825b249b1ebaeb","cpes":["cpe:2.3:a:gcc-16-base:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-base:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_base:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_base:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16-base:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16_base:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16-base","purl":"pkg:deb/debian/gcc-16-base@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16-base/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16-base:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/gcc-16-base:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"d1c6b2b476fb69b7","cpes":["cpe:2.3:a:gcc-16-x86-64-linux-gnu:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux-gnu:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux_gnu:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux_gnu:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64-linux:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64_linux:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86-64:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86_64:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16-x86:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16_x86:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc-16:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc_16:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc-16-x86-64-linux-gnu:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:gcc:gcc_16_x86_64_linux_gnu:16.2.0-3:*:*:*:*:*:*:*"],"name":"gcc-16-x86-64-linux-gnu","purl":"pkg:deb/debian/gcc-16-x86-64-linux-gnu@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/gcc-16-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/gcc-16-x86-64-linux-gnu.list"}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"74052697ab3b5326","cpes":["cpe:2.3:a:libasan8:libasan8:16.2.0-3:*:*:*:*:*:*:*"],"name":"libasan8","purl":"pkg:deb/debian/libasan8@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libasan8:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libasan8:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libasan8/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"a488a702738e4c85","cpes":["cpe:2.3:a:libatomic1:libatomic1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libatomic1","purl":"pkg:deb/debian/libatomic1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libatomic1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libatomic1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libatomic1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"6d3aa2362948430b","cpes":["cpe:2.3:a:libcc1-0:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1-0:libcc1_0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1_0:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1_0:libcc1_0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1:libcc1-0:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libcc1:libcc1_0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libcc1-0","purl":"pkg:deb/debian/libcc1-0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libcc1-0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libcc1-0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libcc1-0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"7e518a782786994e","cpes":["cpe:2.3:a:libgcc-16-dev:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16-dev:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16_dev:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16_dev:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-16:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_16:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_16_dev:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgcc-16-dev","purl":"pkg:deb/debian/libgcc-16-dev@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libgcc-16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgcc-16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgcc-16-dev/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"8520c2979cc4e2cf","cpes":["cpe:2.3:a:libgcc-s1:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc-s1:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc_s1:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc-s1:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libgcc:libgcc_s1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgcc-s1","purl":"pkg:deb/debian/libgcc-s1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgcc-s1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libgcc-s1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"48afdb826bf3dd8a","cpes":["cpe:2.3:a:libgomp1:libgomp1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libgomp1","purl":"pkg:deb/debian/libgomp1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libgomp1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgomp1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libgomp1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"d3272bdf290e009a","cpes":["cpe:2.3:a:libhwasan0:libhwasan0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libhwasan0","purl":"pkg:deb/debian/libhwasan0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libhwasan0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libhwasan0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libhwasan0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"e0d798b4e81415fc","cpes":["cpe:2.3:a:libitm1:libitm1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libitm1","purl":"pkg:deb/debian/libitm1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libitm1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libitm1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libitm1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"91c02bde87f9e21c","cpes":["cpe:2.3:a:liblsan0:liblsan0:16.2.0-3:*:*:*:*:*:*:*"],"name":"liblsan0","purl":"pkg:deb/debian/liblsan0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/liblsan0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/liblsan0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/liblsan0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"396ed1be8e164552","cpes":["cpe:2.3:a:libquadmath0:libquadmath0:16.2.0-3:*:*:*:*:*:*:*"],"name":"libquadmath0","purl":"pkg:deb/debian/libquadmath0@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libquadmath0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libquadmath0:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libquadmath0/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"6da02f5e6a8df519","cpes":["cpe:2.3:a:libstdc\\+\\+-16-dev:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16-dev:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16_dev:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16_dev:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+-16:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+_16:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+-16-dev:16.2.0-3:*:*:*:*:*:*:*","cpe:2.3:a:libstdc\\+\\+:libstdc\\+\\+_16_dev:16.2.0-3:*:*:*:*:*:*:*"],"name":"libstdc++-16-dev","purl":"pkg:deb/debian/libstdc%2B%2B-16-dev@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libstdc++-16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libstdc++-16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libstdc++-16-dev/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"d4533c669aff8d23","cpes":["cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:16.2.0-3:*:*:*:*:*:*:*"],"name":"libstdc++6","purl":"pkg:deb/debian/libstdc%2B%2B6@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libstdc++6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libstdc++6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"950689fe03ace00f","cpes":["cpe:2.3:a:libtsan2:libtsan2:16.2.0-3:*:*:*:*:*:*:*"],"name":"libtsan2","purl":"pkg:deb/debian/libtsan2@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libtsan2:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libtsan2:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libtsan2/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"bb3bee85f74bcbcf","cpes":["cpe:2.3:a:libubsan1:libubsan1:16.2.0-3:*:*:*:*:*:*:*"],"name":"libubsan1","purl":"pkg:deb/debian/libubsan1@16.2.0-3?arch=amd64&distro=debian&upstream=gcc-16","type":"deb","version":"16.2.0-3","language":"","licenses":["sha256:e45db18266750eacd5a728542c8ef53b00e3348aa1b0191de5f52a3ee8e2a6ba"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/var/lib/dpkg/info/libubsan1:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libubsan1:amd64.md5sums","annotations":{"evidence":"supporting"}},{"path":"/usr/share/doc/gcc-16-base/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libubsan1/copyright","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"gcc-16"}]},"matchDetails":[{"fix":{"suggestedVersion":"16.2.0-4"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-102010","versionConstraint":"< 16.2.0-4 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"gcc-16","version":"16.2.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-102010","fix":{"state":"fixed","versions":["16.2.0-4"],"available":[{"date":"2026-10-25","kind":"first-observed","version":"16.2.0-4"}]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"risk":0.311025,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."},"relatedVulnerabilities":[{"id":"CVE-2026-102010","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","metrics":{"baseScore":7,"impactScore":4.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102010","cwe":"CWE-825","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-102010","date":"2026-11-12","epss":0.00429,"percentile":0.37575}],"urls":["https://access.redhat.com/errata/RHSA-2026:73642","https://access.redhat.com/errata/RHSA-2026:74569","https://access.redhat.com/errata/RHSA-2026:89830","https://access.redhat.com/errata/RHSA-2026:89891","https://access.redhat.com/errata/RHSA-2026:90915","https://access.redhat.com/errata/RHSA-2026:95581","https://access.redhat.com/errata/RHSA-2026:98474","https://access.redhat.com/errata/RHSA-2026:98475","https://access.redhat.com/errata/RHSA-2026:98483","https://access.redhat.com/errata/RHSA-2026:98576","https://access.redhat.com/errata/RHSA-2026:98577","https://access.redhat.com/errata/RHSA-2026:98580","https://access.redhat.com/errata/RHSA-2026:99032","https://access.redhat.com/errata/RHSA-2026:99041","https://access.redhat.com/errata/RHSA-2026:99089","https://access.redhat.com/security/cve/CVE-2026-102010","https://bugzilla.redhat.com/show_bug.cgi?id=2478395"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102010","description":"A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107708","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107708","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"risk":0.309995,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."},"relatedVulnerabilities":[{"id":"CVE-2026-107708","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":4.9,"impactScore":3.6,"exploitabilityScore":1.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107708","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107708","date":"2026-11-12","epss":0.00521,"percentile":0.44739}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676","https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d","https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7","https://github.com/krb5/krb5/pull/1510","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107708","description":"MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a malformed client name to crash krb5kdc and deny authentication."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107778","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107778","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"risk":0.30951999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107778","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107778","cwe":"CWE-476","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-107778","date":"2026-11-12","epss":0.00424,"percentile":0.37194}],"urls":["https://github.com/krb5/krb5","https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112","https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08","https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a","https://github.com/krb5/krb5/pull/1511","https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107778","description":"MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticket_info entries through gss_accept_sec_context() to crash GSS-API acceptor services, causing denial of service."}]},{"artifact":{"id":"540116853ba87f34","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.9.0-1:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.9.0-1?arch=amd64&distro=debian&upstream=expat","type":"deb","version":"2.9.0-1","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"fix":{"suggestedVersion":"2.10.0-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-118370","versionConstraint":"< 2.10.0-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"expat","version":"2.9.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-118370","fix":{"state":"fixed","versions":["2.10.0-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"2.10.0-1"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118370","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-118370","date":"2026-11-12","epss":0.00391,"percentile":0.33722}],"risk":0.30693499999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-118370","description":"libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and nPrefixes, crashing applications or corrupting heap memory."},"relatedVulnerabilities":[{"id":"CVE-2026-118370","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-118370","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-118370","date":"2026-11-12","epss":0.00391,"percentile":0.33722}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a76b1174c1ea52abb639a4c69d52b630a8a106a2/expat/lib/xmlparse.c#L4138-L4140","https://github.com/libexpat/libexpat/commit/1bac53c4fc460a03cd9860f39501c7979f6750ae","https://github.com/libexpat/libexpat/commit/621cb2c78b253ee023a86bc91d6ddb048481c04c","https://github.com/libexpat/libexpat/pull/1450","https://www.vulncheck.com/advisories/libexpat-through-2.9.0-integer-overflow-in-storeatts-via-attindex-and-nprefixes"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-118370","description":"libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that allows attackers to trigger out-of-bounds writes via oversized attribute counts. Attackers can supply a multi-gigabyte document with a start tag carrying over 2^30 attributes to overflow attIndex and nPrefixes, crashing applications or corrupting heap memory."}]},{"artifact":{"id":"41ecdf592620f4eb","cpes":["cpe:2.3:a:git:git:1\\:2.53.0-1:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.53.0-1?arch=amd64&distro=debian","type":"deb","version":"1:2.53.0-1","language":"","licenses":["Apache-2.0","Artistic","BSD-3-clause","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-105437","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"git","version":"1:2.53.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-105437","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cve@gitlab.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-105437","cwe":"CWE-122","type":"Primary","source":"cve@gitlab.com"}],"epss":[{"cve":"CVE-2026-105437","date":"2026-11-12","epss":0.00399,"percentile":0.34691}],"risk":0.29924999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-105437","description":"Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger through a repository they control.  When Git merges a file, it first adds up the size of the merged output, allocates a buffer of that size, and then writes the output into it. That total was kept in a 32-bit signed integer. The conflict-marker-size attribute, which can be set from a committed .gitattributes file, accepts any positive integer, and the markers are written several times for every conflict. A small file with a huge marker size and many separate conflicts can therefore push the total past 4 GiB, so the integer wraps to a small value and Git writes attacker-controlled merge output past the end of a buffer that is too small. At minimum this crashes Git, and because the overflow is large and its contents are largely attacker-controlled, worse heap corruption is possible.  Any command that does a textual three-way merge can trigger it, such as git-merge(1), git-rebase(1), git-cherry-pick(1), and git-merge-tree(1). The latter is most likely a target for Git forges, which might use git-merge-tree(1) on the server-side to check mergeability. When the server reads attributes from trees in the repository (for example through attr.tree or --attr-source), any user who can push branches and request that they be merged (for example by opening a pull or merge request) can trigger the overflow without anyone else doing anything, and the data they push is small because the oversized output only appears during the merge.  The problem has been patched by computing the size as size_t and checking every addition for overflow, so Git stops with an error instead of overflowing.  Servers that cannot upgrade right away can add  * conflict-marker-size=7  to each repository's info/attributes as a workaround, which overrides any in-tree .gitattributes, or turn off server-side mergeability checks for untrusted repositories."},"relatedVulnerabilities":[{"id":"CVE-2026-105437","cvss":[{"type":"Secondary","source":"cve@gitlab.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-105437","cwe":"CWE-122","type":"Primary","source":"cve@gitlab.com"}],"epss":[{"cve":"CVE-2026-105437","date":"2026-11-12","epss":0.00399,"percentile":0.34691}],"urls":["https://gitlab.com/gitlab-org/git/-/work_items/814","https://gitlab.com/gitlab-org/gitlab/-/work_items/632121","https://hackerone.com/reports/4044249"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-105437","description":"Affected versions of Git have a heap buffer overflow in the three-way merge\ncode (xdiff), which an attacker can trigger through a repository they\ncontrol.\n\nWhen Git merges a file, it first adds up the size of the merged\noutput, allocates a buffer of that size, and then writes the output into\nit. That total was kept in a 32-bit signed integer. The\nconflict-marker-size attribute, which can be set from a committed\n.gitattributes file, accepts any positive integer, and the markers are\nwritten several times for every conflict. A small file with a huge marker\nsize and many separate conflicts can therefore push the total past 4 GiB,\nso the integer wraps to a small value and Git writes attacker-controlled\nmerge output past the end of a buffer that is too small. At minimum this\ncrashes Git, and because the overflow is large and its contents are largely\nattacker-controlled, worse heap corruption is possible.\n\nAny command that does a textual three-way merge can trigger it, such\nas git-merge(1), git-rebase(1), git-cherry-pick(1), and\ngit-merge-tree(1). The latter is most likely a target for Git forges,\nwhich might use git-merge-tree(1) on the server-side to check\nmergeability. When the server reads attributes from trees in the\nrepository (for example through attr.tree or --attr-source), any\nuser who can push branches and request that they be merged (for\nexample by opening a pull or merge request) can trigger the overflow\nwithout anyone else doing anything, and the data they push is small\nbecause the oversized output only appears during the merge.\n\nThe problem has been patched by computing the size as size_t and\nchecking every addition for overflow, so Git stops with an error\ninstead of overflowing.\n\nServers that cannot upgrade right away can add\n\n* conflict-marker-size=7\n\nto each repository's info/attributes as a workaround, which overrides\nany in-tree .gitattributes, or turn off server-side mergeability checks for\nuntrusted repositories."}]},{"artifact":{"id":"f616434ba805162f","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.53.0-1:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.53.0-1?arch=all&distro=debian&upstream=git","type":"deb","version":"1:2.53.0-1","language":"","licenses":["Apache-2.0","Artistic","BSD-3-clause","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-105437","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"git","version":"1:2.53.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-105437","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cve@gitlab.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-105437","cwe":"CWE-122","type":"Primary","source":"cve@gitlab.com"}],"epss":[{"cve":"CVE-2026-105437","date":"2026-11-12","epss":0.00399,"percentile":0.34691}],"risk":0.29924999999999996,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-105437","description":"Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger through a repository they control.  When Git merges a file, it first adds up the size of the merged output, allocates a buffer of that size, and then writes the output into it. That total was kept in a 32-bit signed integer. The conflict-marker-size attribute, which can be set from a committed .gitattributes file, accepts any positive integer, and the markers are written several times for every conflict. A small file with a huge marker size and many separate conflicts can therefore push the total past 4 GiB, so the integer wraps to a small value and Git writes attacker-controlled merge output past the end of a buffer that is too small. At minimum this crashes Git, and because the overflow is large and its contents are largely attacker-controlled, worse heap corruption is possible.  Any command that does a textual three-way merge can trigger it, such as git-merge(1), git-rebase(1), git-cherry-pick(1), and git-merge-tree(1). The latter is most likely a target for Git forges, which might use git-merge-tree(1) on the server-side to check mergeability. When the server reads attributes from trees in the repository (for example through attr.tree or --attr-source), any user who can push branches and request that they be merged (for example by opening a pull or merge request) can trigger the overflow without anyone else doing anything, and the data they push is small because the oversized output only appears during the merge.  The problem has been patched by computing the size as size_t and checking every addition for overflow, so Git stops with an error instead of overflowing.  Servers that cannot upgrade right away can add  * conflict-marker-size=7  to each repository's info/attributes as a workaround, which overrides any in-tree .gitattributes, or turn off server-side mergeability checks for untrusted repositories."},"relatedVulnerabilities":[{"id":"CVE-2026-105437","cvss":[{"type":"Secondary","source":"cve@gitlab.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.5,"impactScore":5.9,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-105437","cwe":"CWE-122","type":"Primary","source":"cve@gitlab.com"}],"epss":[{"cve":"CVE-2026-105437","date":"2026-11-12","epss":0.00399,"percentile":0.34691}],"urls":["https://gitlab.com/gitlab-org/git/-/work_items/814","https://gitlab.com/gitlab-org/gitlab/-/work_items/632121","https://hackerone.com/reports/4044249"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-105437","description":"Affected versions of Git have a heap buffer overflow in the three-way merge\ncode (xdiff), which an attacker can trigger through a repository they\ncontrol.\n\nWhen Git merges a file, it first adds up the size of the merged\noutput, allocates a buffer of that size, and then writes the output into\nit. That total was kept in a 32-bit signed integer. The\nconflict-marker-size attribute, which can be set from a committed\n.gitattributes file, accepts any positive integer, and the markers are\nwritten several times for every conflict. A small file with a huge marker\nsize and many separate conflicts can therefore push the total past 4 GiB,\nso the integer wraps to a small value and Git writes attacker-controlled\nmerge output past the end of a buffer that is too small. At minimum this\ncrashes Git, and because the overflow is large and its contents are largely\nattacker-controlled, worse heap corruption is possible.\n\nAny command that does a textual three-way merge can trigger it, such\nas git-merge(1), git-rebase(1), git-cherry-pick(1), and\ngit-merge-tree(1). The latter is most likely a target for Git forges,\nwhich might use git-merge-tree(1) on the server-side to check\nmergeability. When the server reads attributes from trees in the\nrepository (for example through attr.tree or --attr-source), any\nuser who can push branches and request that they be merged (for\nexample by opening a pull or merge request) can trigger the overflow\nwithout anyone else doing anything, and the data they push is small\nbecause the oversized output only appears during the merge.\n\nThe problem has been patched by computing the size as size_t and\nchecking every addition for overflow, so Git stops with an error\ninstead of overflowing.\n\nServers that cannot upgrade right away can add\n\n* conflict-marker-size=7\n\nto each repository's info/attributes as a workaround, which overrides\nany in-tree .gitattributes, or turn off server-side mergeability checks for\nuntrusted repositories."}]},{"artifact":{"id":"fe94099ccd737a6c","cpes":["cpe:2.3:a:krb5-multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5-multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5_multidev:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5-multidev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:krb5:krb5_multidev:1.22.1-3:*:*:*:*:*:*:*"],"name":"krb5-multidev","purl":"pkg:deb/debian/krb5-multidev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/krb5-multidev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/krb5-multidev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/krb5-multidev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"d249beb11f885479","cpes":["cpe:2.3:a:libgssapi-krb5-2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5-2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5_2:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi-krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi_krb5:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi-krb5-2:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libgssapi:libgssapi_krb5_2:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssapi-krb5-2","purl":"pkg:deb/debian/libgssapi-krb5-2@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssapi-krb5-2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libgssapi-krb5-2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libgssapi-krb5-2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"4264bf34c3de7058","cpes":["cpe:2.3:a:libgssrpc4t64:libgssrpc4t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libgssrpc4t64","purl":"pkg:deb/debian/libgssrpc4t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libgssrpc4t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgssrpc4t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgssrpc4t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"cf50314958384ae1","cpes":["cpe:2.3:a:libk5crypto3:libk5crypto3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libk5crypto3","purl":"pkg:deb/debian/libk5crypto3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libk5crypto3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libk5crypto3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libk5crypto3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"0651234d92314ea0","cpes":["cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt-mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt_mit12:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5clnt:libkadm5clnt_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5clnt-mit12","purl":"pkg:deb/debian/libkadm5clnt-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5clnt-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5clnt-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5clnt-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"5c40fe2c096933c8","cpes":["cpe:2.3:a:libkadm5srv-mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv-mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv_mit12:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv-mit12:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkadm5srv:libkadm5srv_mit12:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkadm5srv-mit12","purl":"pkg:deb/debian/libkadm5srv-mit12@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkadm5srv-mit12/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkadm5srv-mit12/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkadm5srv-mit12:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"8a078e809d6a2be5","cpes":["cpe:2.3:a:libkdb5-10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5-10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5_10t64:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5-10t64:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkdb5:libkdb5_10t64:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkdb5-10t64","purl":"pkg:deb/debian/libkdb5-10t64@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkdb5-10t64/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkdb5-10t64/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkdb5-10t64:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"ec8a4905fa61cd25","cpes":["cpe:2.3:a:libkrb5-3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_3:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-3:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_3:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-3","purl":"pkg:deb/debian/libkrb5-3@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-3/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5-3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5-3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"798d3607cfd227b6","cpes":["cpe:2.3:a:libkrb5-dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5-dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5_dev:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5-dev:1.22.1-3:*:*:*:*:*:*:*","cpe:2.3:a:libkrb5:libkrb5_dev:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5-dev","purl":"pkg:deb/debian/libkrb5-dev@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libkrb5-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libkrb5-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"ac27a00c1a045150","cpes":["cpe:2.3:a:libkrb5support0:libkrb5support0:1.22.1-3:*:*:*:*:*:*:*"],"name":"libkrb5support0","purl":"pkg:deb/debian/libkrb5support0@1.22.1-3?arch=amd64&distro=debian&upstream=krb5","type":"deb","version":"1.22.1-3","language":"","licenses":["sha256:936728f4181718f42951b881c1e8f1386bf6b2723c4fbc533c374d6f42c71816"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libkrb5support0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libkrb5support0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libkrb5support0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"krb5"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-112317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"krb5","version":"1.22.1-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-112317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"risk":0.297155,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."},"relatedVulnerabilities":[{"id":"CVE-2026-112317","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-112317","cwe":"CWE-772","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-112317","date":"2026-11-12","epss":0.00577,"percentile":0.48064}],"urls":["https://access.redhat.com/errata/RHSA-2026:99624","https://access.redhat.com/errata/RHSA-2026:99625","https://access.redhat.com/errata/RHSA-2026:99715","https://access.redhat.com/errata/RHSA-2026:99716","https://access.redhat.com/security/cve/CVE-2026-112317","https://bugzilla.redhat.com/show_bug.cgi?id=2479209"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-112317","description":"krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the KDC or kadmind) via requests that repeatedly trigger key decryption failures."}]},{"artifact":{"id":"dc3f48400d31e994","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20796","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20796","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"risk":0.2902,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."},"relatedVulnerabilities":[{"id":"CVE-2018-20796","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141","https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html","https://security.netapp.com/advisory/ntap-20190315-0002/","https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."}]},{"artifact":{"id":"5a808e4e593d0f84","cpes":["cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev-bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_dev_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-dev-bin","purl":"pkg:deb/debian/libc-dev-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-dev-bin/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc-dev-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.list"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20796","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20796","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"risk":0.2902,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."},"relatedVulnerabilities":[{"id":"CVE-2018-20796","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141","https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html","https://security.netapp.com/advisory/ntap-20190315-0002/","https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."}]},{"artifact":{"id":"35e83c0ffe516ded","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/debian/libc-gconv-modules-extra@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20796","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20796","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"risk":0.2902,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."},"relatedVulnerabilities":[{"id":"CVE-2018-20796","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141","https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html","https://security.netapp.com/advisory/ntap-20190315-0002/","https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."}]},{"artifact":{"id":"9cdc119bd93005b7","cpes":["cpe:2.3:a:libc6:libc6:2.43-7:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20796","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20796","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"risk":0.2902,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."},"relatedVulnerabilities":[{"id":"CVE-2018-20796","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141","https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html","https://security.netapp.com/advisory/ntap-20190315-0002/","https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."}]},{"artifact":{"id":"d78fb72dc8211e22","cpes":["cpe:2.3:a:libc6-dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6-dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6_dev:2.43-7:*:*:*:*:*:*:*"],"name":"libc6-dev","purl":"pkg:deb/debian/libc6-dev@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc6-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20796","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20796","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"risk":0.2902,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."},"relatedVulnerabilities":[{"id":"CVE-2018-20796","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20796","cwe":"CWE-674","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20796","date":"2026-11-12","epss":0.05804,"percentile":0.93233}],"urls":["http://www.securityfocus.com/bid/107160","https://debbugs.gnu.org/cgi/bugreport.cgi?bug=34141","https://lists.gnu.org/archive/html/bug-gnulib/2019-01/msg00108.html","https://security.netapp.com/advisory/ntap-20190315-0002/","https://support.f5.com/csp/article/K26346590?utm_source=f5support&amp%3Butm_medium=RSS"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20796","description":"In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '(\\227|)(\\\\1\\\\1|t1|\\\\\\2537)+' in grep."}]},{"artifact":{"id":"07d7c5dfe0f85e23","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2008-3234","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2008-3234","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2008-3234","cwe":"CWE-264","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2008-3234","date":"2026-11-12","epss":0.05773,"percentile":0.93195}],"risk":0.28865,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2008-3234","description":"sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username."},"relatedVulnerabilities":[{"id":"CVE-2008-3234","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":6.5,"impactScore":6.5,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2008-3234","cwe":"CWE-264","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2008-3234","date":"2026-11-12","epss":0.05773,"percentile":0.93195}],"urls":["http://www.securityfocus.com/bid/30276","https://exchange.xforce.ibmcloud.com/vulnerabilities/44037","https://www.exploit-db.com/exploits/6094"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2008-3234","description":"sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username."}]},{"artifact":{"id":"c48e99fc55e4e310","cpes":["cpe:2.3:a:openssh-common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-common","purl":"pkg:deb/debian/openssh-common@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.list"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2008-3234","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2008-3234","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2008-3234","cwe":"CWE-264","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2008-3234","date":"2026-11-12","epss":0.05773,"percentile":0.93195}],"risk":0.28865,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2008-3234","description":"sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username."},"relatedVulnerabilities":[{"id":"CVE-2008-3234","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","metrics":{"baseScore":6.5,"impactScore":6.5,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2008-3234","cwe":"CWE-264","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2008-3234","date":"2026-11-12","epss":0.05773,"percentile":0.93195}],"urls":["http://www.securityfocus.com/bid/30276","https://exchange.xforce.ibmcloud.com/vulnerabilities/44037","https://www.exploit-db.com/exploits/6094"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2008-3234","description":"sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username."}]},{"artifact":{"id":"368ecc2a14e64339","cpes":["cpe:2.3:a:wget:wget:1.25.0-3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/debian/wget@1.25.0-3?arch=amd64&distro=debian","type":"deb","version":"1.25.0-3","language":"","licenses":["sha256:289d796794edf8c547691e415ddd7ba3396e6e6d8de03397bd69ce9515914bf8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-58471","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"wget","version":"1.25.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-58471","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58471","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58471","date":"2026-11-12","epss":0.0039,"percentile":0.33555}],"risk":0.28469999999999995,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-58471","description":"GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response."},"relatedVulnerabilities":[{"id":"CVE-2026-58471","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58471","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58471","date":"2026-11-12","epss":0.0039,"percentile":0.33555}],"urls":["https://gitlab.com/gnuwget/wget/-/commit/c2640fe5171c59f87c58dc9fcb195b2d18b010ee","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-convert-fname-in-url-c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58471","description":"GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response."}]},{"artifact":{"id":"368ecc2a14e64339","cpes":["cpe:2.3:a:wget:wget:1.25.0-3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/debian/wget@1.25.0-3?arch=amd64&distro=debian","type":"deb","version":"1.25.0-3","language":"","licenses":["sha256:289d796794edf8c547691e415ddd7ba3396e6e6d8de03397bd69ce9515914bf8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-58472","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"wget","version":"1.25.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-58472","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58472","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58472","date":"2026-11-12","epss":0.0039,"percentile":0.33555}],"risk":0.28469999999999995,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-58472","description":"GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase."},"relatedVulnerabilities":[{"id":"CVE-2026-58472","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58472","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58472","date":"2026-11-12","epss":0.0039,"percentile":0.33555}],"urls":["https://gitlab.com/gnuwget/wget/-/commit/dd692d9cea5335b181d877ae917fe6e75587a812","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-html-attribute-encoding"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58472","description":"GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase."}]},{"artifact":{"id":"d3991ad883195771","cpes":["cpe:2.3:a:libtiff-dev:libtiff-dev:4.7.2-1:*:*:*:*:*:*:*","cpe:2.3:a:libtiff-dev:libtiff_dev:4.7.2-1:*:*:*:*:*:*:*","cpe:2.3:a:libtiff_dev:libtiff-dev:4.7.2-1:*:*:*:*:*:*:*","cpe:2.3:a:libtiff_dev:libtiff_dev:4.7.2-1:*:*:*:*:*:*:*","cpe:2.3:a:libtiff:libtiff-dev:4.7.2-1:*:*:*:*:*:*:*","cpe:2.3:a:libtiff:libtiff_dev:4.7.2-1:*:*:*:*:*:*:*"],"name":"libtiff-dev","purl":"pkg:deb/debian/libtiff-dev@4.7.2-1?arch=amd64&distro=debian&upstream=tiff","type":"deb","version":"4.7.2-1","language":"","licenses":["Hylafax"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtiff-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libtiff-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtiff-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libtiff-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"tiff"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-16232","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"tiff","version":"4.7.2-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2017-16232","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-16232","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16232","date":"2026-11-12","epss":0.05434,"percentile":0.92828}],"risk":0.2717,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2017-16232","description":"LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue"},"relatedVulnerabilities":[{"id":"CVE-2017-16232","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16232","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16232","date":"2026-11-12","epss":0.05434,"percentile":0.92828}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html","http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.html","http://seclists.org/fulldisclosure/2018/Dec/32","http://seclists.org/fulldisclosure/2018/Dec/47","http://www.openwall.com/lists/oss-security/2017/11/01/11","http://www.openwall.com/lists/oss-security/2017/11/01/3","http://www.openwall.com/lists/oss-security/2017/11/01/7","http://www.openwall.com/lists/oss-security/2017/11/01/8","http://www.securityfocus.com/bid/101696"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16232","description":"LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue"}]},{"artifact":{"id":"d5bd1b7c11c0c9d7","cpes":["cpe:2.3:a:libtiff6:libtiff6:4.7.2-1:*:*:*:*:*:*:*"],"name":"libtiff6","purl":"pkg:deb/debian/libtiff6@4.7.2-1?arch=amd64&distro=debian&upstream=tiff","type":"deb","version":"4.7.2-1","language":"","licenses":["Hylafax"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtiff6/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libtiff6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtiff6:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libtiff6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"tiff"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-16232","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"tiff","version":"4.7.2-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2017-16232","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-16232","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16232","date":"2026-11-12","epss":0.05434,"percentile":0.92828}],"risk":0.2717,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2017-16232","description":"LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue"},"relatedVulnerabilities":[{"id":"CVE-2017-16232","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16232","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16232","date":"2026-11-12","epss":0.05434,"percentile":0.92828}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html","http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.html","http://seclists.org/fulldisclosure/2018/Dec/32","http://seclists.org/fulldisclosure/2018/Dec/47","http://www.openwall.com/lists/oss-security/2017/11/01/11","http://www.openwall.com/lists/oss-security/2017/11/01/3","http://www.openwall.com/lists/oss-security/2017/11/01/7","http://www.openwall.com/lists/oss-security/2017/11/01/8","http://www.securityfocus.com/bid/101696"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16232","description":"LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue"}]},{"artifact":{"id":"33bbb0845ac1a142","cpes":["cpe:2.3:a:libtiffxx6:libtiffxx6:4.7.2-1:*:*:*:*:*:*:*"],"name":"libtiffxx6","purl":"pkg:deb/debian/libtiffxx6@4.7.2-1?arch=amd64&distro=debian&upstream=tiff","type":"deb","version":"4.7.2-1","language":"","licenses":["Hylafax"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libtiffxx6/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libtiffxx6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libtiffxx6:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libtiffxx6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"tiff"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-16232","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"tiff","version":"4.7.2-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2017-16232","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-16232","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16232","date":"2026-11-12","epss":0.05434,"percentile":0.92828}],"risk":0.2717,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2017-16232","description":"LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue"},"relatedVulnerabilities":[{"id":"CVE-2017-16232","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-16232","cwe":"CWE-772","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-16232","date":"2026-11-12","epss":0.05434,"percentile":0.92828}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00036.html","http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00041.html","http://packetstormsecurity.com/files/150896/LibTIFF-4.0.8-Memory-Leak.html","http://seclists.org/fulldisclosure/2018/Dec/32","http://seclists.org/fulldisclosure/2018/Dec/47","http://www.openwall.com/lists/oss-security/2017/11/01/11","http://www.openwall.com/lists/oss-security/2017/11/01/3","http://www.openwall.com/lists/oss-security/2017/11/01/7","http://www.openwall.com/lists/oss-security/2017/11/01/8","http://www.securityfocus.com/bid/101696"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-16232","description":"LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue"}]},{"artifact":{"id":"07d7c5dfe0f85e23","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-20012","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2016-20012","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-20012","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-20012","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-20012","date":"2026-11-12","epss":0.05326,"percentile":0.92725}],"risk":0.26630000000000004,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2016-20012","description":"OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product"},"relatedVulnerabilities":[{"id":"CVE-2016-20012","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-20012","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-20012","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-20012","date":"2026-11-12","epss":0.05326,"percentile":0.92725}],"urls":["https://github.com/openssh/openssh-portable/blob/d0fffc88c8fe90c1815c6f4097bc8cbcabc0f3dd/auth2-pubkey.c#L261-L265","https://github.com/openssh/openssh-portable/pull/270","https://github.com/openssh/openssh-portable/pull/270#issuecomment-920577097","https://github.com/openssh/openssh-portable/pull/270#issuecomment-943909185","https://rushter.com/blog/public-ssh-keys/","https://security.netapp.com/advisory/ntap-20211014-0005/","https://utcc.utoronto.ca/~cks/space/blog/tech/SSHKeysAreInfoLeak","https://www.openwall.com/lists/oss-security/2018/08/24/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-20012","description":"OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product"}]},{"artifact":{"id":"c48e99fc55e4e310","cpes":["cpe:2.3:a:openssh-common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-common","purl":"pkg:deb/debian/openssh-common@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.list"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-20012","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2016-20012","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-20012","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-20012","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-20012","date":"2026-11-12","epss":0.05326,"percentile":0.92725}],"risk":0.26630000000000004,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2016-20012","description":"OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product"},"relatedVulnerabilities":[{"id":"CVE-2016-20012","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-20012","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-20012","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-20012","date":"2026-11-12","epss":0.05326,"percentile":0.92725}],"urls":["https://github.com/openssh/openssh-portable/blob/d0fffc88c8fe90c1815c6f4097bc8cbcabc0f3dd/auth2-pubkey.c#L261-L265","https://github.com/openssh/openssh-portable/pull/270","https://github.com/openssh/openssh-portable/pull/270#issuecomment-920577097","https://github.com/openssh/openssh-portable/pull/270#issuecomment-943909185","https://rushter.com/blog/public-ssh-keys/","https://security.netapp.com/advisory/ntap-20211014-0005/","https://utcc.utoronto.ca/~cks/space/blog/tech/SSHKeysAreInfoLeak","https://www.openwall.com/lists/oss-security/2018/08/24/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-20012","description":"OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product"}]},{"artifact":{"id":"f4dbf491a6d57e4f","cpes":["cpe:2.3:a:libldap-dev:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap-dev:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap_dev:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap_dev:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*"],"name":"libldap-dev","purl":"pkg:deb/debian/libldap-dev@2.6.14%2Bdfsg-2?arch=amd64&distro=debian&upstream=openldap","type":"deb","version":"2.6.14+dfsg-2","language":"","licenses":["BSD-3-clause","BSD-3-clause-California","BSD-3-clause-variant","BSD-4-clause-California","Beerware","Expat","Expat-ISC","Expat-UNM","F5","FSF-unlimited","GPL-2","GPL-2+","GPL-3","GPL-3+","JCG","MIT-XC","NeoSoft-permissive","OpenLDAP-2.8","UMich","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libldap-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libldap-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-3276","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openldap","version":"2.6.14+dfsg-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2015-3276","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2015-3276","date":"2026-11-12","epss":0.05269,"percentile":0.9267}],"risk":0.26345,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2015-3276","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors."},"relatedVulnerabilities":[{"id":"CVE-2015-3276","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2015-3276","date":"2026-11-12","epss":0.05269,"percentile":0.9267}],"urls":["http://rhn.redhat.com/errata/RHSA-2015-2131.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","http://www.securitytracker.com/id/1034221","https://bugzilla.redhat.com/show_bug.cgi?id=1238322"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-3276","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors."}]},{"artifact":{"id":"ee1fb93e1790b636","cpes":["cpe:2.3:a:libldap2:libldap2:2.6.14\\+dfsg-2:*:*:*:*:*:*:*"],"name":"libldap2","purl":"pkg:deb/debian/libldap2@2.6.14%2Bdfsg-2?arch=amd64&distro=debian&upstream=openldap","type":"deb","version":"2.6.14+dfsg-2","language":"","licenses":["BSD-3-clause","BSD-3-clause-California","BSD-3-clause-variant","BSD-4-clause-California","Beerware","Expat","Expat-ISC","Expat-UNM","F5","FSF-unlimited","GPL-2","GPL-2+","GPL-3","GPL-3+","JCG","MIT-XC","NeoSoft-permissive","OpenLDAP-2.8","UMich","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libldap2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libldap2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2015-3276","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openldap","version":"2.6.14+dfsg-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2015-3276","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2015-3276","date":"2026-11-12","epss":0.05269,"percentile":0.9267}],"risk":0.26345,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2015-3276","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors."},"relatedVulnerabilities":[{"id":"CVE-2015-3276","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2015-3276","date":"2026-11-12","epss":0.05269,"percentile":0.9267}],"urls":["http://rhn.redhat.com/errata/RHSA-2015-2131.html","http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","http://www.securitytracker.com/id/1034221","https://bugzilla.redhat.com/show_bug.cgi?id=1238322"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2015-3276","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors."}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-39327","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-39327","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39327","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39327","date":"2026-11-12","epss":0.00555,"percentile":0.46781}],"risk":0.258075,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-39327","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal."},"relatedVulnerabilities":[{"id":"CVE-2023-39327","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39327","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39327","date":"2026-11-12","epss":0.00555,"percentile":0.46781}],"urls":["https://access.redhat.com/errata/RHSA-2026:4128","https://access.redhat.com/security/cve/CVE-2023-39327","https://bugzilla.redhat.com/show_bug.cgi?id=2295812","https://github.com/uclouvain/openjpeg/issues/1472"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39327","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-39327","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-39327","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39327","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39327","date":"2026-11-12","epss":0.00555,"percentile":0.46781}],"risk":0.258075,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-39327","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal."},"relatedVulnerabilities":[{"id":"CVE-2023-39327","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":4.3,"impactScore":1.5,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39327","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39327","date":"2026-11-12","epss":0.00555,"percentile":0.46781}],"urls":["https://access.redhat.com/errata/RHSA-2026:4128","https://access.redhat.com/security/cve/CVE-2023-39327","https://bugzilla.redhat.com/show_bug.cgi?id=2295812","https://github.com/uclouvain/openjpeg/issues/1472"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39327","description":"A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal."}]},{"artifact":{"id":"0695bd7e868d6107","cpes":["cpe:2.3:a:imagemagick:imagemagick:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick","purl":"pkg:deb/debian/imagemagick@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"7a4bc39fb8ea1d58","cpes":["cpe:2.3:a:imagemagick-7-common:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7-common:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7_common:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7_common:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick-7-common","purl":"pkg:deb/debian/imagemagick-7-common@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick-7-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.conffiles","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"711ea8c9616391e6","cpes":["cpe:2.3:a:imagemagick-7.q16:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7.q16:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7.q16:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7.q16:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick-7.q16","purl":"pkg:deb/debian/imagemagick-7.q16@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7.q16/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick-7.q16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.list"},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.postinst","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.postinst"},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.prerm","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.prerm"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"c7b9d56ef8d6960d","cpes":["cpe:2.3:a:libmagickcore-7-arch-config:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch-config:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch_config:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch_config:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7-arch-config","purl":"pkg:deb/debian/libmagickcore-7-arch-config@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7-arch-config/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7-arch-config/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-arch-config:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-arch-config:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"7119e048a56708ab","cpes":["cpe:2.3:a:libmagickcore-7-headers:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-headers:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_headers:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_headers:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7-headers","purl":"pkg:deb/debian/libmagickcore-7-headers@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7-headers/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-headers.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-headers.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-headers.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-headers.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"e3a460b5bee5a3bc","cpes":["cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-10","purl":"pkg:deb/debian/libmagickcore-7.q16-10@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-10/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-10/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-10:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-10:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"a10b653773e8078d","cpes":["cpe:2.3:a:libmagickcore-7.q16-10-extra:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10-extra:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10_extra:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10_extra:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-10-extra","purl":"pkg:deb/debian/libmagickcore-7.q16-10-extra@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-10-extra/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-10-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-10-extra:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-10-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"e9f150127625ceac","cpes":["cpe:2.3:a:libmagickcore-7.q16-dev:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-dev:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_dev:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_dev:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-dev","purl":"pkg:deb/debian/libmagickcore-7.q16-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"971d292dc1c1d557","cpes":["cpe:2.3:a:libmagickcore-dev:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-dev:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_dev:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_dev:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-dev","purl":"pkg:deb/debian/libmagickcore-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-dev.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"3fcb0641d70abb91","cpes":["cpe:2.3:a:libmagickwand-7-headers:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7-headers:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7_headers:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7_headers:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7-headers","purl":"pkg:deb/debian/libmagickwand-7-headers@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7-headers/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7-headers.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7-headers.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7-headers.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7-headers.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"1417d15de079a665","cpes":["cpe:2.3:a:libmagickwand-7.q16-10:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16-10:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_10:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_10:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7.q16-10","purl":"pkg:deb/debian/libmagickwand-7.q16-10@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickwand-7.q16-10/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7.q16-10/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7.q16-10:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7.q16-10:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"63a91a8a99d34271","cpes":["cpe:2.3:a:libmagickwand-7.q16-dev:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16-dev:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_dev:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_dev:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7.q16-dev","purl":"pkg:deb/debian/libmagickwand-7.q16-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickwand-7.q16-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7.q16-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7.q16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7.q16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"7d8cd8c1d380ef25","cpes":["cpe:2.3:a:libmagickwand-dev:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-dev:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_dev:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_dev:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-dev","purl":"pkg:deb/debian/libmagickwand-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-dev.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15607","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15607","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"risk":0.25525000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."},"relatedVulnerabilities":[{"id":"CVE-2018-15607","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","metrics":{"baseScore":7.1,"impactScore":6.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15607","cwe":"CWE-400","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-15607","date":"2026-11-12","epss":0.05105,"percentile":0.92486}],"urls":["http://www.securityfocus.com/bid/105137","https://github.com/ImageMagick/ImageMagick/issues/1255","https://usn.ubuntu.com/4034-1/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15607","description":"In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file."}]},{"artifact":{"id":"0695bd7e868d6107","cpes":["cpe:2.3:a:imagemagick:imagemagick:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick","purl":"pkg:deb/debian/imagemagick@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick.list"}],"upstreams":[]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"7a4bc39fb8ea1d58","cpes":["cpe:2.3:a:imagemagick-7-common:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7-common:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7_common:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7_common:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick-7-common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick_7_common:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick-7-common","purl":"pkg:deb/debian/imagemagick-7-common@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick-7-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.conffiles","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7-common.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7-common.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"711ea8c9616391e6","cpes":["cpe:2.3:a:imagemagick-7.q16:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick-7.q16:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7.q16:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick_7.q16:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick-7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:imagemagick:imagemagick_7.q16:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"imagemagick-7.q16","purl":"pkg:deb/debian/imagemagick-7.q16@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7.q16/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/imagemagick-7.q16/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.list"},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.postinst","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.postinst"},{"path":"/var/lib/dpkg/info/imagemagick-7.q16.prerm","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/imagemagick-7.q16.prerm"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"c7b9d56ef8d6960d","cpes":["cpe:2.3:a:libmagickcore-7-arch-config:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch-config:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch_config:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch_config:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-arch:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_arch:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7-arch-config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7_arch_config:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7-arch-config","purl":"pkg:deb/debian/libmagickcore-7-arch-config@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7-arch-config/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7-arch-config/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-arch-config:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-arch-config:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"7119e048a56708ab","cpes":["cpe:2.3:a:libmagickcore-7-headers:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7-headers:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_headers:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7_headers:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7-headers","purl":"pkg:deb/debian/libmagickcore-7-headers@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7-headers/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-headers.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-headers.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7-headers.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7-headers.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"e3a460b5bee5a3bc","cpes":["cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-10","purl":"pkg:deb/debian/libmagickcore-7.q16-10@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-10/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-10/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-10:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-10:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"a10b653773e8078d","cpes":["cpe:2.3:a:libmagickcore-7.q16-10-extra:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10-extra:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10_extra:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10_extra:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-10:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_10:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-10-extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_10_extra:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-10-extra","purl":"pkg:deb/debian/libmagickcore-7.q16-10-extra@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-10-extra/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-10-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-10-extra:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-10-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"e9f150127625ceac","cpes":["cpe:2.3:a:libmagickcore-7.q16-dev:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16-dev:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_dev:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16_dev:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-7.q16:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_7.q16:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-7.q16-dev","purl":"pkg:deb/debian/libmagickcore-7.q16-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickcore-7.q16-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-7.q16-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-7.q16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-7.q16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"971d292dc1c1d557","cpes":["cpe:2.3:a:libmagickcore-dev:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore-dev:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_dev:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore_dev:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickcore:libmagickcore_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickcore-dev","purl":"pkg:deb/debian/libmagickcore-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickcore-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickcore-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickcore-dev.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"3fcb0641d70abb91","cpes":["cpe:2.3:a:libmagickwand-7-headers:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7-headers:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7_headers:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7_headers:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7-headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7_headers:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7-headers","purl":"pkg:deb/debian/libmagickwand-7-headers@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7-headers/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7-headers.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7-headers.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7-headers.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7-headers.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"1417d15de079a665","cpes":["cpe:2.3:a:libmagickwand-7.q16-10:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16-10:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_10:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_10:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7.q16-10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7.q16_10:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7.q16-10","purl":"pkg:deb/debian/libmagickwand-7.q16-10@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickwand-7.q16-10/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7.q16-10/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7.q16-10:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7.q16-10:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"63a91a8a99d34271","cpes":["cpe:2.3:a:libmagickwand-7.q16-dev:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16-dev:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_dev:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16_dev:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-7.q16:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_7.q16:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-7.q16-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_7.q16_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-7.q16-dev","purl":"pkg:deb/debian/libmagickwand-7.q16-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=amd64&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libmagickwand-7.q16-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-7.q16-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-7.q16-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-7.q16-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"7d8cd8c1d380ef25","cpes":["cpe:2.3:a:libmagickwand-dev:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand-dev:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_dev:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand_dev:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand-dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*","cpe:2.3:a:libmagickwand:libmagickwand_dev:8\\:7.1.2.34\\+dfsg1-1:*:*:*:*:*:*:*"],"name":"libmagickwand-dev","purl":"pkg:deb/debian/libmagickwand-dev@8%3A7.1.2.34%2Bdfsg1-1?arch=all&distro=debian&upstream=imagemagick","type":"deb","version":"8:7.1.2.34+dfsg1-1","language":"","licenses":["Artistic","BSD-with-FSF-change-public-domain","GNU-All-Permissive-License","GPL-1","GPL-2","GPL-2+","GPL-3","GPL2+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception","GPL3+-with-Autoconf-Macros-exception-GNU","ImageMagick","ImageMagickLicensePartEZXML","ImageMagickLicensePartFIG","ImageMagickLicensePartGsview","ImageMagickLicensePartOpenSSH","ImageMagickPartGraphicsMagick","ImageMagickPartlibjpeg","ImageMagickPartlibsquish","LGPL-3","LGPL-3+","Magick++","Makefile-in","Perllikelicence","aclocal"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/imagemagick-7-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libmagickwand-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-dev.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-dev.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libmagickwand-dev.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libmagickwand-dev.list"}],"upstreams":[{"name":"imagemagick"}]},"matchDetails":[{"fix":{"suggestedVersion":"8:7.1.2.35+dfsg1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-123273","versionConstraint":"< 8:7.1.2.35+dfsg1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"imagemagick","version":"8:7.1.2.34+dfsg1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-123273","fix":{"state":"fixed","versions":["8:7.1.2.35+dfsg1-1"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"8:7.1.2.35+dfsg1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"risk":0.25039,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."},"relatedVulnerabilities":[{"id":"CVE-2026-123273","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7.1},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-123273","cwe":"CWE-835","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-123273","date":"2026-11-12","epss":0.00343,"percentile":0.2827}],"urls":["https://github.com/ImageMagick/ImageMagick/blob/3a9639c0bd21f61f22fcce4c5f6838f1f0d8f738/MagickCore/cache.c#L4348","https://github.com/ImageMagick/ImageMagick/commit/c5f2c6c9fb1458f960a506691c9351e9da6d2247","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-35","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh","https://github.com/ImageMagick/ImageMagick6/commit/712e523e7f746d35c963b78555e1c24364a9426e","https://github.com/ImageMagick/ImageMagick6/releases/tag/6.9.13-60","https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-35-and-6.9.13-60-infinite-loop-via-svg-decoder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-123273","description":"ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker."}]},{"artifact":{"id":"1ceedad7f5af67fe","cpes":["cpe:2.3:a:tar:tar:1.35\\+dfsg-7:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:deb/debian/tar@1.35%2Bdfsg-7?arch=amd64&distro=debian","type":"deb","version":"1.35+dfsg-7","language":"","licenses":["GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/tar/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/tar/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/tar.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/tar.list"},{"path":"/var/lib/dpkg/info/tar.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/tar.postinst"},{"path":"/var/lib/dpkg/info/tar.prerm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/tar.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-5704","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"tar","version":"1.35+dfsg-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-5704","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5704","cwe":"CWE-434","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5704","date":"2026-11-12","epss":0.00473,"percentile":0.41388}],"risk":0.24832500000000002,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-5704","description":"A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection."},"relatedVulnerabilities":[{"id":"CVE-2026-5704","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5704","cwe":"CWE-434","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5704","date":"2026-11-12","epss":0.00473,"percentile":0.41388}],"urls":["https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:66514","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-5704","https://bugzilla.redhat.com/show_bug.cgi?id=2455360","http://www.openwall.com/lists/oss-security/2026/04/11/10","http://www.openwall.com/lists/oss-security/2026/04/11/11","http://www.openwall.com/lists/oss-security/2026/04/12/2"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5704","description":"A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection."}]},{"artifact":{"id":"a3d5d7f96f413ac4","cpes":["cpe:2.3:a:patch:patch:2.8.1-1:*:*:*:*:*:*:*"],"name":"patch","purl":"pkg:deb/debian/patch@2.8.1-1?arch=amd64&distro=debian","type":"deb","version":"2.8.1-1","language":"","licenses":["GPL-3","GPL-3+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/patch/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/patch/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/patch.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/patch.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/patch.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/patch.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2010-4651","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"patch","version":"2.8.1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2010-4651","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2010-4651","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4651","date":"2026-11-12","epss":0.04874,"percentile":0.92174}],"risk":0.2437,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2010-4651","description":"Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679."},"relatedVulnerabilities":[{"id":"CVE-2010-4651","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","metrics":{"baseScore":5.8,"impactScore":5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2010-4651","cwe":"CWE-22","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4651","date":"2026-11-12","epss":0.04874,"percentile":0.92174}],"urls":["http://git.savannah.gnu.org/cgit/patch.git/commit/?id=685a78b6052f4df6eac6d625a545cfb54a6ac0e1","http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055241.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055246.html","http://lists.gnu.org/archive/html/bug-patch/2010-12/msg00000.html","http://openwall.com/lists/oss-security/2011/01/05/10","http://openwall.com/lists/oss-security/2011/01/06/19","http://openwall.com/lists/oss-security/2011/01/06/20","http://openwall.com/lists/oss-security/2011/01/06/21","http://secunia.com/advisories/43663","http://secunia.com/advisories/43677","http://support.apple.com/kb/HT4723","http://www.securityfocus.com/bid/46768","http://www.vupen.com/english/advisories/2011/0600","https://bugzilla.redhat.com/show_bug.cgi?id=667529"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2010-4651","description":"Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679."}]},{"artifact":{"id":"5450cd701429a721","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/debian/libsqlite3-0@3.53.4-2?arch=amd64&distro=debian&upstream=sqlite3","type":"deb","version":"3.53.4-2","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.54.1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119379","versionConstraint":"< 3.54.1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"sqlite3","version":"3.53.4-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119379","fix":{"state":"fixed","versions":["3.54.1-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.54.1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-12","epss":0.00278,"percentile":0.20526}],"risk":0.2224,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119379","description":"SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation."},"relatedVulnerabilities":[{"id":"CVE-2026-119379","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-12","epss":0.00278,"percentile":0.20526}],"urls":["https://abraxaslabs.tech/research/sqlite-session-ncol","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619","https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52","https://sqlite.org/bugs/info/2026-08-16T10:15:25Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/3f57024aecea0f3b","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119379","description":"SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation."}]},{"artifact":{"id":"9efadf1b7d85fb14","cpes":["cpe:2.3:a:libsqlite3-dev:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-dev:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_dev:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_dev:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*"],"name":"libsqlite3-dev","purl":"pkg:deb/debian/libsqlite3-dev@3.53.4-2?arch=amd64&distro=debian&upstream=sqlite3","type":"deb","version":"3.53.4-2","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libsqlite3-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libsqlite3-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.54.1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119379","versionConstraint":"< 3.54.1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"sqlite3","version":"3.53.4-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119379","fix":{"state":"fixed","versions":["3.54.1-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.54.1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-12","epss":0.00278,"percentile":0.20526}],"risk":0.2224,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119379","description":"SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation."},"relatedVulnerabilities":[{"id":"CVE-2026-119379","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119379","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119379","date":"2026-11-12","epss":0.00278,"percentile":0.20526}],"urls":["https://abraxaslabs.tech/research/sqlite-session-ncol","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619","https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52","https://sqlite.org/bugs/info/2026-08-16T10:15:25Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/3f57024aecea0f3b","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119379","description":"SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation."}]},{"artifact":{"id":"dc3f48400d31e994","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"risk":0.215325,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.  The fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.  LANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"5a808e4e593d0f84","cpes":["cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev-bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_dev_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-dev-bin","purl":"pkg:deb/debian/libc-dev-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-dev-bin/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc-dev-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.list"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"risk":0.215325,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.  The fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.  LANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"35e83c0ffe516ded","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/debian/libc-gconv-modules-extra@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"risk":0.215325,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.  The fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.  LANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"9cdc119bd93005b7","cpes":["cpe:2.3:a:libc6:libc6:2.43-7:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"risk":0.215325,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.  The fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.  LANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"d78fb72dc8211e22","cpes":["cpe:2.3:a:libc6-dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6-dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6_dev:2.43-7:*:*:*:*:*:*:*"],"name":"libc6-dev","purl":"pkg:deb/debian/libc6-dev@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc6-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-84243","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-84243","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"risk":0.215325,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.  The fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.  LANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."},"relatedVulnerabilities":[{"id":"CVE-2026-84243","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":7,"impactScore":5.9,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84243","cwe":"CWE-22","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-84243","date":"2026-11-12","epss":0.00297,"percentile":0.22684}],"urls":["https://inbox.sourceware.org/libc-alpha/20261012112453.47383-1-avinal.xlvii@gmail.com","https://sourceware.org/bugzilla/show_bug.cgi?id=17142","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0025"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84243","description":"The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to \"..\", unless the program is setuid or setgid (AT_SECURE).  An attacker who can set LANGUAGE in the environment of a program that uses gettext can make it load a message catalog (.mo file) from an arbitrary location in the file system.  A crafted .mo file can crash the program through out-of-range offsets, or supply translations whose format directives do not match the arguments passed by the program.  That causes undefined behaviour in the printf family of functions and may allow arbitrary code execution with the privileges of the program.  The safety of message catalogs relies on them being installed in trusted, read-only locations, and the directory traversal bypasses this.\n\nThe fix for CVE-2014-0475 rejects \"..\" path components in locale names passed to setlocale or taken from the LC_ALL, LC_* and LANG environment variables.  gettext reads LANGUAGE directly and appends each colon-separated entry to the message catalog directory, so that fix did not cover LANGUAGE.\n\nLANGUAGE is only used when the LC_MESSAGES locale is not \"C\", \"C.<encoding>\" or \"POSIX\", so the attacker must also be able to select another installed locale, for example through LANG or LC_ALL.  Exploitation also requires that the attacker can place the crafted file in a location readable by the target program, and that the environment crosses a trust boundary without the program running as AT_SECURE.  An example is an SSH server that accepts LANGUAGE and LANG from clients through the AcceptEnv directive and restricts an account to a forced command; the attacker may use this to escape the restriction."}]},{"artifact":{"id":"afcdfb1fd4153ff0","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/debian/libpython3.14-minimal@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15367","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2025-15367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"risk":0.20546500000000004,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters."},"relatedVulnerabilities":[{"id":"CVE-2025-15367","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"urls":["https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7","https://github.com/python/cpython/issues/143923","https://github.com/python/cpython/pull/143924","https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have\nadditional commands injected using newlines. Mitigation rejects commands\ncontaining control characters."}]},{"artifact":{"id":"2a5133c0b95e31b2","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/debian/libpython3.14-stdlib@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15367","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2025-15367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"risk":0.20546500000000004,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters."},"relatedVulnerabilities":[{"id":"CVE-2025-15367","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"urls":["https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7","https://github.com/python/cpython/issues/143923","https://github.com/python/cpython/pull/143924","https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have\nadditional commands injected using newlines. Mitigation rejects commands\ncontaining control characters."}]},{"artifact":{"id":"0e4ec4976150622c","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.10-1:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/debian/python3.14@3.14.10-1?arch=amd64&distro=debian","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2025-15367","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2025-15367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"risk":0.20546500000000004,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters."},"relatedVulnerabilities":[{"id":"CVE-2025-15367","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"urls":["https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7","https://github.com/python/cpython/issues/143923","https://github.com/python/cpython/pull/143924","https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have\nadditional commands injected using newlines. Mitigation rejects commands\ncontaining control characters."}]},{"artifact":{"id":"861fde9fefc30b37","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/debian/python3.14-minimal@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2025-15367","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2025-15367","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"risk":0.20546500000000004,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters."},"relatedVulnerabilities":[{"id":"CVE-2025-15367","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-15367","cwe":"CWE-77","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2025-15367","date":"2026-11-12","epss":0.00377,"percentile":0.32138}],"urls":["https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7","https://github.com/python/cpython/issues/143923","https://github.com/python/cpython/pull/143924","https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-15367","description":"The poplib module, when passed a user-controlled command, can have\nadditional commands injected using newlines. Mitigation rejects commands\ncontaining control characters."}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107080","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107080","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107080","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-107080","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107080","date":"2026-11-12","epss":0.00352,"percentile":0.29316}],"risk":0.20239999999999997,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107080","description":"OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107080","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107080","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-107080","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107080","date":"2026-11-12","epss":0.00352,"percentile":0.29316}],"urls":["https://github.com/uclouvain/openjpeg/commit/a38e970fa59abd796c703ec469e578b09f7ffa33","https://github.com/uclouvain/openjpeg/issues/1673","https://github.com/uclouvain/openjpeg/pull/1674","https://www.openwall.com/lists/oss-security/2026/10/05/5","http://www.openwall.com/lists/oss-security/2026/10/24/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107080","description":"OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-107080","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-107080","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107080","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-107080","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107080","date":"2026-11-12","epss":0.00352,"percentile":0.29316}],"risk":0.20239999999999997,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-107080","description":"OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service."},"relatedVulnerabilities":[{"id":"CVE-2026-107080","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-107080","cwe":"CWE-125","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"cve":"CVE-2026-107080","cwe":"CWE-787","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-107080","date":"2026-11-12","epss":0.00352,"percentile":0.29316}],"urls":["https://github.com/uclouvain/openjpeg/commit/a38e970fa59abd796c703ec469e578b09f7ffa33","https://github.com/uclouvain/openjpeg/issues/1673","https://github.com/uclouvain/openjpeg/pull/1674","https://www.openwall.com/lists/oss-security/2026/10/05/5","http://www.openwall.com/lists/oss-security/2026/10/24/8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-107080","description":"OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj_dwt_encode_and_deinterleave_v() in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service."}]},{"artifact":{"id":"1ceedad7f5af67fe","cpes":["cpe:2.3:a:tar:tar:1.35\\+dfsg-7:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:deb/debian/tar@1.35%2Bdfsg-7?arch=amd64&distro=debian","type":"deb","version":"1.35+dfsg-7","language":"","licenses":["GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2.1","LGPL-2.1+","LGPL-3","LGPL-3+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/tar/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/tar/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/tar.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/tar.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/tar.list"},{"path":"/var/lib/dpkg/info/tar.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/tar.postinst"},{"path":"/var/lib/dpkg/info/tar.prerm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/tar.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2005-2541","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"tar","version":"1.35+dfsg-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2005-2541","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2005-2541","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2005-2541","date":"2026-11-12","epss":0.03992,"percentile":0.90659}],"risk":0.1996,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2005-2541","description":"Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges."},"relatedVulnerabilities":[{"id":"CVE-2005-2541","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","metrics":{"baseScore":10,"impactScore":10.1,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2005-2541","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2005-2541","date":"2026-11-12","epss":0.03992,"percentile":0.90659}],"urls":["http://marc.info/?l=bugtraq&m=112327628230258&w=2","https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2005-2541","description":"Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges."}]},{"artifact":{"id":"74248be0db6ddc14","cpes":["cpe:2.3:a:libpam-modules:libpam-modules:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam_modules:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam-modules:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam_modules:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-modules:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_modules:1.7.0-8:*:*:*:*:*:*:*"],"name":"libpam-modules","purl":"pkg:deb/debian/libpam-modules@1.7.0-8?arch=amd64&distro=debian&upstream=pam","type":"deb","version":"1.7.0-8","language":"","licenses":["BSD-3-clause","BSD-tcp_wrappers","Beerware","GPL-1","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-modules/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libpam-modules/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-modules:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-modules:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54411","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"pam","version":"1.7.0-8"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-54411","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54411","cwe":"CWE-208","type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"epss":[{"cve":"CVE-2026-54411","date":"2026-11-12","epss":0.0032,"percentile":0.25395}],"risk":0.1904,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-54411","description":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences."},"relatedVulnerabilities":[{"id":"CVE-2026-54411","cvss":[{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54411","cwe":"CWE-208","type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"epss":[{"cve":"CVE-2026-54411","date":"2026-11-12","epss":0.0032,"percentile":0.25395}],"urls":["https://cwe.mitre.org/data/definitions/208.html","https://github.com/linux-pam/linux-pam","https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h","https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54411","description":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences."}]},{"artifact":{"id":"91f7902a49a048f3","cpes":["cpe:2.3:a:libpam-modules-bin:libpam-modules-bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules-bin:libpam_modules_bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules_bin:libpam-modules-bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules_bin:libpam_modules_bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam-modules-bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam-modules:libpam_modules_bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam-modules-bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam_modules:libpam_modules_bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-modules-bin:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_modules_bin:1.7.0-8:*:*:*:*:*:*:*"],"name":"libpam-modules-bin","purl":"pkg:deb/debian/libpam-modules-bin@1.7.0-8?arch=amd64&distro=debian&upstream=pam","type":"deb","version":"1.7.0-8","language":"","licenses":["BSD-3-clause","BSD-tcp_wrappers","Beerware","GPL-1","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-modules-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libpam-modules-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-modules-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.list"},{"path":"/var/lib/dpkg/info/libpam-modules-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.postinst"},{"path":"/var/lib/dpkg/info/libpam-modules-bin.postrm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.postrm"},{"path":"/var/lib/dpkg/info/libpam-modules-bin.prerm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-modules-bin.prerm"}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54411","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"pam","version":"1.7.0-8"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-54411","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54411","cwe":"CWE-208","type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"epss":[{"cve":"CVE-2026-54411","date":"2026-11-12","epss":0.0032,"percentile":0.25395}],"risk":0.1904,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-54411","description":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences."},"relatedVulnerabilities":[{"id":"CVE-2026-54411","cvss":[{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54411","cwe":"CWE-208","type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"epss":[{"cve":"CVE-2026-54411","date":"2026-11-12","epss":0.0032,"percentile":0.25395}],"urls":["https://cwe.mitre.org/data/definitions/208.html","https://github.com/linux-pam/linux-pam","https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h","https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54411","description":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences."}]},{"artifact":{"id":"336801a07758bebc","cpes":["cpe:2.3:a:libpam-runtime:libpam-runtime:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam-runtime:libpam_runtime:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam_runtime:libpam-runtime:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam_runtime:libpam_runtime:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam-runtime:1.7.0-8:*:*:*:*:*:*:*","cpe:2.3:a:libpam:libpam_runtime:1.7.0-8:*:*:*:*:*:*:*"],"name":"libpam-runtime","purl":"pkg:deb/debian/libpam-runtime@1.7.0-8?arch=all&distro=debian&upstream=pam","type":"deb","version":"1.7.0-8","language":"","licenses":["BSD-3-clause","BSD-tcp_wrappers","Beerware","GPL-1","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam-runtime/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libpam-runtime/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-runtime.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-runtime.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam-runtime.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-runtime.list"},{"path":"/var/lib/dpkg/info/libpam-runtime.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-runtime.postinst"},{"path":"/var/lib/dpkg/info/libpam-runtime.postrm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-runtime.postrm"},{"path":"/var/lib/dpkg/info/libpam-runtime.prerm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-runtime.prerm"},{"path":"/var/lib/dpkg/info/libpam-runtime.templates","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam-runtime.templates"}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54411","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"pam","version":"1.7.0-8"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-54411","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54411","cwe":"CWE-208","type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"epss":[{"cve":"CVE-2026-54411","date":"2026-11-12","epss":0.0032,"percentile":0.25395}],"risk":0.1904,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-54411","description":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences."},"relatedVulnerabilities":[{"id":"CVE-2026-54411","cvss":[{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54411","cwe":"CWE-208","type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"epss":[{"cve":"CVE-2026-54411","date":"2026-11-12","epss":0.0032,"percentile":0.25395}],"urls":["https://cwe.mitre.org/data/definitions/208.html","https://github.com/linux-pam/linux-pam","https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h","https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54411","description":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences."}]},{"artifact":{"id":"43aeba10c606005a","cpes":["cpe:2.3:a:libpam0g:libpam0g:1.7.0-8:*:*:*:*:*:*:*"],"name":"libpam0g","purl":"pkg:deb/debian/libpam0g@1.7.0-8?arch=amd64&distro=debian&upstream=pam","type":"deb","version":"1.7.0-8","language":"","licenses":["BSD-3-clause","BSD-tcp_wrappers","Beerware","GPL-1","GPL-2","GPL-2+","GPL-3","GPL-3+","LGPL-2","LGPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpam0g/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libpam0g/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpam0g:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libpam0g:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"pam"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54411","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"pam","version":"1.7.0-8"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-54411","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54411","cwe":"CWE-208","type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"epss":[{"cve":"CVE-2026-54411","date":"2026-11-12","epss":0.0032,"percentile":0.25395}],"risk":0.1904,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-54411","description":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences."},"relatedVulnerabilities":[{"id":"CVE-2026-54411","cvss":[{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54411","cwe":"CWE-208","type":"Secondary","source":"309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c"}],"epss":[{"cve":"CVE-2026-54411","date":"2026-11-12","epss":0.0032,"percentile":0.25395}],"urls":["https://cwe.mitre.org/data/definitions/208.html","https://github.com/linux-pam/linux-pam","https://github.com/linux-pam/linux-pam/blob/master/libpam/include/pam_inline.h","https://github.com/linux-pam/linux-pam/blob/master/modules/pam_userdb/pam_userdb.c#L327"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54411","description":"Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedly drive authentication through a calling service to recover the plaintext password of a target account by measuring response-timing differences."}]},{"artifact":{"id":"5450cd701429a721","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/debian/libsqlite3-0@3.53.4-2?arch=amd64&distro=debian&upstream=sqlite3","type":"deb","version":"3.53.4-2","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.54.1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119374","versionConstraint":"< 3.54.1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"sqlite3","version":"3.53.4-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119374","fix":{"state":"fixed","versions":["3.54.1-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.54.1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119374","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119374","date":"2026-11-12","epss":0.0023,"percentile":0.13979}],"risk":0.184,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119374","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application."},"relatedVulnerabilities":[{"id":"CVE-2026-119374","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119374","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119374","date":"2026-11-12","epss":0.0023,"percentile":0.13979}],"urls":["https://abraxaslabs.tech/research/sqlite-fts5-securedel","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525","https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/9cd4f9e920","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119374","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application."}]},{"artifact":{"id":"9efadf1b7d85fb14","cpes":["cpe:2.3:a:libsqlite3-dev:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-dev:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_dev:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_dev:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*"],"name":"libsqlite3-dev","purl":"pkg:deb/debian/libsqlite3-dev@3.53.4-2?arch=amd64&distro=debian&upstream=sqlite3","type":"deb","version":"3.53.4-2","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libsqlite3-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libsqlite3-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.54.1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119374","versionConstraint":"< 3.54.1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"sqlite3","version":"3.53.4-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119374","fix":{"state":"fixed","versions":["3.54.1-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.54.1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119374","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119374","date":"2026-11-12","epss":0.0023,"percentile":0.13979}],"risk":0.184,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119374","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application."},"relatedVulnerabilities":[{"id":"CVE-2026-119374","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119374","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119374","date":"2026-11-12","epss":0.0023,"percentile":0.13979}],"urls":["https://abraxaslabs.tech/research/sqlite-fts5-securedel","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525","https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/9cd4f9e920","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119374","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application."}]},{"artifact":{"id":"07d7c5dfe0f85e23","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15919","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15919","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15919","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-15919","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-15919","date":"2026-11-12","epss":0.03512,"percentile":0.89367}],"risk":0.1756,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15919","description":"Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or \"oracle\") as a vulnerability.'"},"relatedVulnerabilities":[{"id":"CVE-2018-15919","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15919","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-15919","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-15919","date":"2026-11-12","epss":0.03512,"percentile":0.89367}],"urls":["http://seclists.org/oss-sec/2018/q3/180","http://www.securityfocus.com/bid/105163","https://security.netapp.com/advisory/ntap-20181221-0001/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15919","description":"Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or \"oracle\") as a vulnerability.'"}]},{"artifact":{"id":"c48e99fc55e4e310","cpes":["cpe:2.3:a:openssh-common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-common","purl":"pkg:deb/debian/openssh-common@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.list"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-15919","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-15919","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-15919","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-15919","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-15919","date":"2026-11-12","epss":0.03512,"percentile":0.89367}],"risk":0.1756,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-15919","description":"Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or \"oracle\") as a vulnerability.'"},"relatedVulnerabilities":[{"id":"CVE-2018-15919","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-15919","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2018-15919","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2018-15919","date":"2026-11-12","epss":0.03512,"percentile":0.89367}],"urls":["http://seclists.org/oss-sec/2018/q3/180","http://www.securityfocus.com/bid/105163","https://security.netapp.com/advisory/ntap-20181221-0001/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-15919","description":"Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or \"oracle\") as a vulnerability.'"}]},{"artifact":{"id":"dc3f48400d31e994","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010022","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010022","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"risk":0.16245,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010022","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","https://ubuntu.com/security/CVE-2019-1010022","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"5a808e4e593d0f84","cpes":["cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev-bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_dev_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-dev-bin","purl":"pkg:deb/debian/libc-dev-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-dev-bin/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc-dev-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.list"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010022","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010022","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"risk":0.16245,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010022","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","https://ubuntu.com/security/CVE-2019-1010022","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"35e83c0ffe516ded","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/debian/libc-gconv-modules-extra@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010022","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010022","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"risk":0.16245,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010022","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","https://ubuntu.com/security/CVE-2019-1010022","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"9cdc119bd93005b7","cpes":["cpe:2.3:a:libc6:libc6:2.43-7:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010022","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010022","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"risk":0.16245,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010022","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","https://ubuntu.com/security/CVE-2019-1010022","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"d78fb72dc8211e22","cpes":["cpe:2.3:a:libc6-dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6-dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6_dev:2.43-7:*:*:*:*:*:*:*"],"name":"libc6-dev","purl":"pkg:deb/debian/libc6-dev@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc6-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010022","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010022","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"risk":0.16245,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010022","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010022","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010022","date":"2026-11-12","epss":0.03249,"percentile":0.88507}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010022","https://sourceware.org/bugzilla/show_bug.cgi?id=22850","https://sourceware.org/bugzilla/show_bug.cgi?id=22850#c3","https://ubuntu.com/security/CVE-2019-1010022","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010022","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"dc3f48400d31e994","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010024","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010024","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"risk":0.161,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010024","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"urls":["http://www.securityfocus.com/bid/109162","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010024","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"5a808e4e593d0f84","cpes":["cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev-bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_dev_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-dev-bin","purl":"pkg:deb/debian/libc-dev-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-dev-bin/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc-dev-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.list"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010024","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010024","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"risk":0.161,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010024","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"urls":["http://www.securityfocus.com/bid/109162","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010024","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"35e83c0ffe516ded","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/debian/libc-gconv-modules-extra@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010024","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010024","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"risk":0.161,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010024","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"urls":["http://www.securityfocus.com/bid/109162","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010024","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"9cdc119bd93005b7","cpes":["cpe:2.3:a:libc6:libc6:2.43-7:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010024","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010024","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"risk":0.161,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010024","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"urls":["http://www.securityfocus.com/bid/109162","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010024","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"d78fb72dc8211e22","cpes":["cpe:2.3:a:libc6-dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6-dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6_dev:2.43-7:*:*:*:*:*:*:*"],"name":"libc6-dev","purl":"pkg:deb/debian/libc6-dev@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc6-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010024","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010024","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"risk":0.161,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010024","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010024","cwe":"CWE-200","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010024","date":"2026-11-12","epss":0.0322,"percentile":0.88401}],"urls":["http://www.securityfocus.com/bid/109162","https://security-tracker.debian.org/tracker/CVE-2019-1010024","https://sourceware.org/bugzilla/show_bug.cgi?id=22852","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010024","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010024","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-9114","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2016-9114","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-9114","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9114","date":"2026-11-12","epss":0.03077,"percentile":0.87852}],"risk":0.15385,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2016-9114","description":"There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service."},"relatedVulnerabilities":[{"id":"CVE-2016-9114","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9114","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9114","date":"2026-11-12","epss":0.03077,"percentile":0.87852}],"urls":["http://www.securityfocus.com/bid/93979","https://github.com/uclouvain/openjpeg/issues/857","https://security.gentoo.org/glsa/201710-26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9114","description":"There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-9114","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2016-9114","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-9114","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9114","date":"2026-11-12","epss":0.03077,"percentile":0.87852}],"risk":0.15385,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2016-9114","description":"There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service."},"relatedVulnerabilities":[{"id":"CVE-2016-9114","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9114","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9114","date":"2026-11-12","epss":0.03077,"percentile":0.87852}],"urls":["http://www.securityfocus.com/bid/93979","https://github.com/uclouvain/openjpeg/issues/857","https://security.gentoo.org/glsa/201710-26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9114","description":"There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service."}]},{"artifact":{"id":"dc3f48400d31e994","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010023","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010023","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"risk":0.15345,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010023","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"urls":["http://www.securityfocus.com/bid/109167","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010023","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"5a808e4e593d0f84","cpes":["cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev-bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_dev_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-dev-bin","purl":"pkg:deb/debian/libc-dev-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-dev-bin/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc-dev-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.list"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010023","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010023","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"risk":0.15345,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010023","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"urls":["http://www.securityfocus.com/bid/109167","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010023","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"35e83c0ffe516ded","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/debian/libc-gconv-modules-extra@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010023","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010023","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"risk":0.15345,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010023","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"urls":["http://www.securityfocus.com/bid/109167","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010023","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"9cdc119bd93005b7","cpes":["cpe:2.3:a:libc6:libc6:2.43-7:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010023","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010023","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"risk":0.15345,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010023","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"urls":["http://www.securityfocus.com/bid/109167","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010023","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"d78fb72dc8211e22","cpes":["cpe:2.3:a:libc6-dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6-dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6_dev:2.43-7:*:*:*:*:*:*:*"],"name":"libc6-dev","purl":"pkg:deb/debian/libc6-dev@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc6-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010023","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010023","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"risk":0.15345,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."},"relatedVulnerabilities":[{"id":"CVE-2019-1010023","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"epss":[{"cve":"CVE-2019-1010023","date":"2026-11-12","epss":0.03069,"percentile":0.87825}],"urls":["http://www.securityfocus.com/bid/109167","https://security-tracker.debian.org/tracker/CVE-2019-1010023","https://sourceware.org/bugzilla/show_bug.cgi?id=22851","https://support.f5.com/csp/article/K11932200?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010023","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010023","description":"GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat."}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-9113","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2016-9113","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-9113","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9113","date":"2026-11-12","epss":0.0305,"percentile":0.8775}],"risk":0.1525,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2016-9113","description":"There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service."},"relatedVulnerabilities":[{"id":"CVE-2016-9113","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9113","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9113","date":"2026-11-12","epss":0.0305,"percentile":0.8775}],"urls":["http://www.securityfocus.com/bid/93980","https://github.com/uclouvain/openjpeg/issues/856","https://security.gentoo.org/glsa/201710-26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9113","description":"There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-9113","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2016-9113","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-9113","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9113","date":"2026-11-12","epss":0.0305,"percentile":0.8775}],"risk":0.1525,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2016-9113","description":"There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service."},"relatedVulnerabilities":[{"id":"CVE-2016-9113","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9113","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9113","date":"2026-11-12","epss":0.0305,"percentile":0.8775}],"urls":["http://www.securityfocus.com/bid/93980","https://github.com/uclouvain/openjpeg/issues/856","https://security.gentoo.org/glsa/201710-26"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9113","description":"There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image->comps[0].data is not assigned a value after initialization(NULL). Impact is Denial of Service."}]},{"artifact":{"id":"5450cd701429a721","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/debian/libsqlite3-0@3.53.4-2?arch=amd64&distro=debian&upstream=sqlite3","type":"deb","version":"3.53.4-2","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.54.1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119378","versionConstraint":"< 3.54.1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"sqlite3","version":"3.53.4-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119378","fix":{"state":"fixed","versions":["3.54.1-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.54.1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119378","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119378","date":"2026-11-12","epss":0.00251,"percentile":0.16587}],"risk":0.14809,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119378","description":"SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits."},"relatedVulnerabilities":[{"id":"CVE-2026-119378","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119378","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119378","date":"2026-11-12","epss":0.00251,"percentile":0.16587}],"urls":["https://abraxaslabs.tech/research/sqlite-rtree-rowid0","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/rtree/rtree.c#L905","https://github.com/sqlite/sqlite/commit/d21bd37c7cfc1b85b17a6703555f0926b6236e04","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/6a9e1415659f9e75","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-r-tree-nodewrite"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119378","description":"SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits."}]},{"artifact":{"id":"9efadf1b7d85fb14","cpes":["cpe:2.3:a:libsqlite3-dev:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-dev:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_dev:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_dev:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*"],"name":"libsqlite3-dev","purl":"pkg:deb/debian/libsqlite3-dev@3.53.4-2?arch=amd64&distro=debian&upstream=sqlite3","type":"deb","version":"3.53.4-2","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libsqlite3-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libsqlite3-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.54.1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119378","versionConstraint":"< 3.54.1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"sqlite3","version":"3.53.4-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119378","fix":{"state":"fixed","versions":["3.54.1-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.54.1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119378","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119378","date":"2026-11-12","epss":0.00251,"percentile":0.16587}],"risk":0.14809,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119378","description":"SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits."},"relatedVulnerabilities":[{"id":"CVE-2026-119378","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119378","cwe":"CWE-416","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119378","date":"2026-11-12","epss":0.00251,"percentile":0.16587}],"urls":["https://abraxaslabs.tech/research/sqlite-rtree-rowid0","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/rtree/rtree.c#L905","https://github.com/sqlite/sqlite/commit/d21bd37c7cfc1b85b17a6703555f0926b6236e04","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/6a9e1415659f9e75","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-use-after-free-in-r-tree-nodewrite"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119378","description":"SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits."}]},{"artifact":{"id":"13f175aa8ba1a7f1","cpes":["cpe:2.3:a:m4:m4:1.4.21-1:*:*:*:*:*:*:*"],"name":"m4","purl":"pkg:deb/debian/m4@1.4.21-1?arch=amd64&distro=debian","type":"deb","version":"1.4.21-1","language":"","licenses":["sha256:808b0b1173cf08e27b01a4d1771b944322d848b589ea703c9f9cdab4f1582fa6"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/m4/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/m4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/m4.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/m4.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/m4.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/m4.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2008-1688","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"m4","version":"1.4.21-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2008-1688","fix":{"state":"not-fixed","versions":[]},"cvss":[],"epss":[{"cve":"CVE-2008-1688","date":"2026-11-12","epss":0.02957,"percentile":0.87386}],"risk":0.14785,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2008-1688","description":"Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option.  NOTE: it is not clear when this issue crosses privilege boundaries."},"relatedVulnerabilities":[{"id":"CVE-2008-1688","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"epss":[{"cve":"CVE-2008-1688","date":"2026-11-12","epss":0.02957,"percentile":0.87386}],"urls":["http://osvdb.org/44272","http://secunia.com/advisories/29671","http://secunia.com/advisories/29729","http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612","http://www.openwall.com/lists/oss-security/2008/04/07/1","http://www.openwall.com/lists/oss-security/2008/04/07/3","http://www.securityfocus.com/bid/28688","http://www.vupen.com/english/advisories/2008/1151/references","https://exchange.xforce.ibmcloud.com/vulnerabilities/41704"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2008-1688","description":"Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option.  NOTE: it is not clear when this issue crosses privilege boundaries."}]},{"artifact":{"id":"3573f57411a83d8c","cpes":["cpe:2.3:a:libjbig-dev:libjbig-dev:2.1-6.1\\+b3:*:*:*:*:*:*:*","cpe:2.3:a:libjbig-dev:libjbig_dev:2.1-6.1\\+b3:*:*:*:*:*:*:*","cpe:2.3:a:libjbig_dev:libjbig-dev:2.1-6.1\\+b3:*:*:*:*:*:*:*","cpe:2.3:a:libjbig_dev:libjbig_dev:2.1-6.1\\+b3:*:*:*:*:*:*:*","cpe:2.3:a:libjbig:libjbig-dev:2.1-6.1\\+b3:*:*:*:*:*:*:*","cpe:2.3:a:libjbig:libjbig_dev:2.1-6.1\\+b3:*:*:*:*:*:*:*"],"name":"libjbig-dev","purl":"pkg:deb/debian/libjbig-dev@2.1-6.1%2Bb3?arch=amd64&distro=debian&upstream=jbigkit%402.1-6.1","type":"deb","version":"2.1-6.1+b3","language":"","licenses":["GPL-2","GPL-2+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjbig-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libjbig-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjbig-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libjbig-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"jbigkit","version":"2.1-6.1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-9937","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"jbigkit","version":"2.1-6.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2017-9937","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-9937","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9937","date":"2026-11-12","epss":0.02949,"percentile":0.87359}],"risk":0.14745000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2017-9937","description":"In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack."},"relatedVulnerabilities":[{"id":"CVE-2017-9937","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9937","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9937","date":"2026-11-12","epss":0.02949,"percentile":0.87359}],"urls":["http://bugzilla.maptools.org/show_bug.cgi?id=2707","http://www.securityfocus.com/bid/99304","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9937","description":"In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack."}]},{"artifact":{"id":"8728e57fa8c17c97","cpes":["cpe:2.3:a:libjbig0:libjbig0:2.1-6.1\\+b3:*:*:*:*:*:*:*"],"name":"libjbig0","purl":"pkg:deb/debian/libjbig0@2.1-6.1%2Bb3?arch=amd64&distro=debian&upstream=jbigkit%402.1-6.1","type":"deb","version":"2.1-6.1+b3","language":"","licenses":["GPL-2","GPL-2+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libjbig0/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libjbig0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libjbig0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libjbig0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"jbigkit","version":"2.1-6.1"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2017-9937","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"jbigkit","version":"2.1-6.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2017-9937","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2017-9937","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9937","date":"2026-11-12","epss":0.02949,"percentile":0.87359}],"risk":0.14745000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2017-9937","description":"In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack."},"relatedVulnerabilities":[{"id":"CVE-2017-9937","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2017-9937","cwe":"CWE-119","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2017-9937","date":"2026-11-12","epss":0.02949,"percentile":0.87359}],"urls":["http://bugzilla.maptools.org/show_bug.cgi?id=2707","http://www.securityfocus.com/bid/99304","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2017-9937","description":"In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack."}]},{"artifact":{"id":"07d7c5dfe0f85e23","cpes":["cpe:2.3:a:openssh-client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_client:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-client:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_client:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-client","purl":"pkg:deb/debian/openssh-client@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-client/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-client.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.list"},{"path":"/var/lib/dpkg/info/openssh-client.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postinst"},{"path":"/var/lib/dpkg/info/openssh-client.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.postrm"},{"path":"/var/lib/dpkg/info/openssh-client.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.preinst"},{"path":"/var/lib/dpkg/info/openssh-client.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-client.prerm"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-14145","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2020-14145","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-14145","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-14145","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-14145","date":"2026-11-12","epss":0.02949,"percentile":0.87358}],"risk":0.14745000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-14145","description":"The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected."},"relatedVulnerabilities":[{"id":"CVE-2020-14145","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-14145","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-14145","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-14145","date":"2026-11-12","epss":0.02949,"percentile":0.87358}],"urls":["http://www.openwall.com/lists/oss-security/2020/12/02/1","https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d","https://docs.ssh-mitm.at/CVE-2020-14145.html","https://github.com/openssh/openssh-portable/compare/V_8_3_P1...V_8_4_P1","https://github.com/ssh-mitm/ssh-mitm/blob/master/ssh_proxy_server/plugins/session/cve202014145.py","https://security.gentoo.org/glsa/202105-35","https://security.netapp.com/advisory/ntap-20200709-0004/","https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informationslecks-fuer-gezielte-mitm-angriffe-auf-ssh-clients/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-14145","description":"The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected."}]},{"artifact":{"id":"c48e99fc55e4e310","cpes":["cpe:2.3:a:openssh-common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh-common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh_common:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh-common:1\\:10.6p1-1:*:*:*:*:*:*:*","cpe:2.3:a:openssh:openssh_common:1\\:10.6p1-1:*:*:*:*:*:*:*"],"name":"openssh-common","purl":"pkg:deb/debian/openssh-common@1%3A10.6p1-1?arch=amd64&distro=debian&upstream=openssh","type":"deb","version":"1:10.6p1-1","language":"","licenses":["BSD-2-clause","BSD-3-clause","Expat","Expat-with-advertising-restriction","FSFULLR","FSFULLRWD","GPL-2","GPL-2+","ISC","Krovetz-BSD-style","Mazieres-BSD-style","OpenSSH","Powell-BSD-style","X11","curl","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/openssh-common/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/openssh-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/openssh-common.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/openssh-common.list"}],"upstreams":[{"name":"openssh"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-14145","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openssh","version":"1:10.6p1-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2020-14145","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-14145","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-14145","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-14145","date":"2026-11-12","epss":0.02949,"percentile":0.87358}],"risk":0.14745000000000003,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-14145","description":"The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected."},"relatedVulnerabilities":[{"id":"CVE-2020-14145","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-14145","cwe":"CWE-203","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2020-14145","cwe":"CWE-203","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2020-14145","date":"2026-11-12","epss":0.02949,"percentile":0.87358}],"urls":["http://www.openwall.com/lists/oss-security/2020/12/02/1","https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d","https://docs.ssh-mitm.at/CVE-2020-14145.html","https://github.com/openssh/openssh-portable/compare/V_8_3_P1...V_8_4_P1","https://github.com/ssh-mitm/ssh-mitm/blob/master/ssh_proxy_server/plugins/session/cve202014145.py","https://security.gentoo.org/glsa/202105-35","https://security.netapp.com/advisory/ntap-20200709-0004/","https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informationslecks-fuer-gezielte-mitm-angriffe-auf-ssh-clients/","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-14145","description":"The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected."}]},{"artifact":{"id":"368ecc2a14e64339","cpes":["cpe:2.3:a:wget:wget:1.25.0-3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:deb/debian/wget@1.25.0-3?arch=amd64&distro=debian","type":"deb","version":"1.25.0-3","language":"","licenses":["sha256:289d796794edf8c547691e415ddd7ba3396e6e6d8de03397bd69ce9515914bf8"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/wget/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/wget/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.conffiles","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/wget.list","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/wget.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-58470","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"wget","version":"1.25.0-3"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-58470","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58470","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58470","date":"2026-11-12","epss":0.00247,"percentile":0.16149}],"risk":0.14696499999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-58470","description":"GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigger undefined behavior and download desynchronization in the affected client."},"relatedVulnerabilities":[{"id":"CVE-2026-58470","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58470","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58470","date":"2026-11-12","epss":0.00247,"percentile":0.16149}],"urls":["https://gitlab.com/gnuwget/wget/-/commit/43d3ba9336bc94937e6fae2365c6ffd30c34ffcf","https://www.vulncheck.com/advisories/gnu-wget-integer-overflow-via-content-range-header-parsing"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58470","description":"GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigger undefined behavior and download desynchronization in the affected client."}]},{"artifact":{"id":"540116853ba87f34","cpes":["cpe:2.3:a:libexpat1:libexpat1:2.9.0-1:*:*:*:*:*:*:*"],"name":"libexpat1","purl":"pkg:deb/debian/libexpat1@2.9.0-1?arch=amd64&distro=debian&upstream=expat","type":"deb","version":"2.9.0-1","language":"","licenses":["MIT"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libexpat1/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libexpat1/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libexpat1:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"expat"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-124317","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"expat","version":"2.9.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-124317","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-124317","cwe":"CWE-126","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-124317","date":"2026-11-12","epss":0.00249,"percentile":0.16318}],"risk":0.14068499999999998,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-124317","description":"libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in xmltok.c when handling application-registered unknown encodings. Attackers can supply a document ending in a truncated multibyte sequence so the convert callback reads past the parse buffer, leaking adjacent memory or crashing applications."},"relatedVulnerabilities":[{"id":"CVE-2026-124317","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-124317","cwe":"CWE-126","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-124317","date":"2026-11-12","epss":0.00249,"percentile":0.16318}],"urls":["https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/blob/a70841d9ffa64ddde29ab824ed6305035ebe4c47/expat/lib/xmltok.c#L1274-L1322","https://github.com/libexpat/libexpat/pull/1492","https://www.vulncheck.com/advisories/libexpat-through-2.10.0-out-of-bounds-read-via-unknown-toutf8-and-unknown-toutf16"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-124317","description":"libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in xmltok.c when handling application-registered unknown encodings. Attackers can supply a document ending in a truncated multibyte sequence so the convert callback reads past the parse buffer, leaking adjacent memory or crashing applications."}]},{"artifact":{"id":"c50904c94a8e63df","cpes":["cpe:2.3:a:login.defs:login.defs:1\\:4.20.3-1:*:*:*:*:*:*:*"],"name":"login.defs","purl":"pkg:deb/debian/login.defs@1%3A4.20.3-1?arch=all&distro=debian&upstream=shadow","type":"deb","version":"1:4.20.3-1","language":"","licenses":["BSD-3-clause","GPL-1","GPL-2","GPL-2+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/login.defs/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/login.defs/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/login.defs.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/login.defs.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/login.defs.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/login.defs.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/login.defs.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/login.defs.list"},{"path":"/var/lib/dpkg/info/login.defs.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/login.defs.postinst"}],"upstreams":[{"name":"shadow"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-56433","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"shadow","version":"1:4.20.3-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2024-56433","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56433","cwe":"CWE-1188","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2024-56433","date":"2026-11-12","epss":0.00426,"percentile":0.37383}],"risk":0.14057999999999998,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-56433","description":"shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid."},"relatedVulnerabilities":[{"id":"CVE-2024-56433","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56433","cwe":"CWE-1188","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2024-56433","date":"2026-11-12","epss":0.00426,"percentile":0.37383}],"urls":["https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241","https://github.com/shadow-maint/shadow/issues/1157","https://github.com/shadow-maint/shadow/releases/tag/4.4","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-56433","description":"shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid."}]},{"artifact":{"id":"8fdbbe5398eea1c1","cpes":["cpe:2.3:a:passwd:passwd:1\\:4.20.3-1:*:*:*:*:*:*:*"],"name":"passwd","purl":"pkg:deb/debian/passwd@1%3A4.20.3-1?arch=amd64&distro=debian&upstream=shadow","type":"deb","version":"1:4.20.3-1","language":"","licenses":["BSD-3-clause","GPL-1","GPL-2","GPL-2+"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/passwd/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/passwd/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/passwd.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/passwd.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/passwd.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/passwd.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/passwd.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/passwd.list"},{"path":"/var/lib/dpkg/info/passwd.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/passwd.postinst"},{"path":"/var/lib/dpkg/info/passwd.postrm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/passwd.postrm"},{"path":"/var/lib/dpkg/info/passwd.preinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/passwd.preinst"},{"path":"/var/lib/dpkg/info/passwd.prerm","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/passwd.prerm"}],"upstreams":[{"name":"shadow"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2024-56433","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"shadow","version":"1:4.20.3-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2024-56433","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56433","cwe":"CWE-1188","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2024-56433","date":"2026-11-12","epss":0.00426,"percentile":0.37383}],"risk":0.14057999999999998,"urls":[],"severity":"Low","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2024-56433","description":"shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid."},"relatedVulnerabilities":[{"id":"CVE-2024-56433","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2024-56433","cwe":"CWE-1188","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2024-56433","date":"2026-11-12","epss":0.00426,"percentile":0.37383}],"urls":["https://github.com/shadow-maint/shadow/blob/e2512d5741d4a44bdd81a8c2d0029b6222728cf0/etc/login.defs#L238-L241","https://github.com/shadow-maint/shadow/issues/1157","https://github.com/shadow-maint/shadow/releases/tag/4.4","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2024-56433","description":"shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid."}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-16376","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-16376","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-16376","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16376","date":"2026-11-12","epss":0.02802,"percentile":0.86674}],"risk":0.1401,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-16376","description":"An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact."},"relatedVulnerabilities":[{"id":"CVE-2018-16376","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-16376","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16376","date":"2026-11-12","epss":0.02802,"percentile":0.86674}],"urls":["http://www.securityfocus.com/bid/105262","https://github.com/uclouvain/openjpeg/issues/1127"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-16376","description":"An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-16376","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-16376","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-16376","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16376","date":"2026-11-12","epss":0.02802,"percentile":0.86674}],"risk":0.1401,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-16376","description":"An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact."},"relatedVulnerabilities":[{"id":"CVE-2018-16376","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":8.8,"impactScore":5.9,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","metrics":{"baseScore":6.8,"impactScore":6.5,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-16376","cwe":"CWE-787","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-16376","date":"2026-11-12","epss":0.02802,"percentile":0.86674}],"urls":["http://www.securityfocus.com/bid/105262","https://github.com/uclouvain/openjpeg/issues/1127"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-16376","description":"An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact."}]},{"artifact":{"id":"afcdfb1fd4153ff0","cpes":["cpe:2.3:a:libpython3.14-minimal:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-minimal:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_minimal:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_minimal:3.14.10-1:*:*:*:*:*:*:*"],"name":"libpython3.14-minimal","purl":"pkg:deb/debian/libpython3.14-minimal@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libpython3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-minimal:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"risk":0.133385,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"2a5133c0b95e31b2","cpes":["cpe:2.3:a:libpython3.14-stdlib:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14-stdlib:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14_stdlib:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14-stdlib:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:libpython3.14:libpython3.14_stdlib:3.14.10-1:*:*:*:*:*:*:*"],"name":"libpython3.14-stdlib","purl":"pkg:deb/debian/libpython3.14-stdlib@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libpython3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/libpython3.14-stdlib/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/libpython3.14-stdlib:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"risk":0.133385,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"0e4ec4976150622c","cpes":["cpe:2.3:a:python3.14:python3.14:3.14.10-1:*:*:*:*:*:*:*"],"name":"python3.14","purl":"pkg:deb/debian/python3.14@3.14.10-1?arch=amd64&distro=debian","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/python3.14/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.list"},{"path":"/var/lib/dpkg/info/python3.14.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.postinst"},{"path":"/var/lib/dpkg/info/python3.14.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"risk":0.133385,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"861fde9fefc30b37","cpes":["cpe:2.3:a:python3.14-minimal:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14-minimal:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14_minimal:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14-minimal:3.14.10-1:*:*:*:*:*:*:*","cpe:2.3:a:python3.14:python3.14_minimal:3.14.10-1:*:*:*:*:*:*:*"],"name":"python3.14-minimal","purl":"pkg:deb/debian/python3.14-minimal@3.14.10-1?arch=amd64&distro=debian&upstream=python3.14","type":"deb","version":"3.14.10-1","language":"","licenses":["sha256:f1cbf908e1daa8789b389fdcf17811ed36b675d736b39a103591399861350382"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/python3.14-minimal/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/python3.14-minimal/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/python3.14-minimal.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.list"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.postrm"},{"path":"/var/lib/dpkg/info/python3.14-minimal.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.preinst"},{"path":"/var/lib/dpkg/info/python3.14-minimal.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/python3.14-minimal.prerm"}],"upstreams":[{"name":"python3.14"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-116566","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"python3.14","version":"3.14.10-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-116566","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"risk":0.133385,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."},"relatedVulnerabilities":[{"id":"CVE-2026-116566","cvss":[{"type":"Secondary","source":"cna@python.org","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":5.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-116566","cwe":"CWE-158","type":"Secondary","source":"cna@python.org"}],"epss":[{"cve":"CVE-2026-116566","date":"2026-11-12","epss":0.00259,"percentile":0.17806}],"urls":["https://github.com/python/cpython/commit/131a3a66c5f400b588f9fd2732a5ed4e89623ee3","https://github.com/python/cpython/issues/160898","https://github.com/python/cpython/pull/160899","https://mail.python.org/archives/list/security-announce@python.org/thread/HCHE62VYTPYI6WOPJQDWUBR4CINBPSM7/","http://www.openwall.com/lists/oss-security/2026/10/29/4"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-116566","description":"socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to be silently truncated."}]},{"artifact":{"id":"40390d25901d3a04","cpes":["cpe:2.3:a:binutils:binutils:2.47.50.20261021-1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:deb/debian/binutils@2.47.50.20261021-1?arch=amd64&distro=debian","type":"deb","version":"2.47.50.20261021-1","language":"","licenses":["sha256:a56dae56c0793ffea98de7024c3417701298d7ac4d5e563a085e8a092b02a114"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/binutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.conffiles","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/binutils.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/binutils.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/binutils.list"},{"path":"/var/lib/dpkg/info/binutils.preinst","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/binutils.preinst"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2018-20712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"binutils","version":"2.47.50.20261021-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"risk":0.13195,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."},"relatedVulnerabilities":[{"id":"CVE-2018-20712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"urls":["http://www.securityfocus.com/bid/106563","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629","https://sourceware.org/bugzilla/show_bug.cgi?id=24043","https://support.f5.com/csp/article/K38336243"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."}]},{"artifact":{"id":"b9ffb30a63c2cc5f","cpes":["cpe:2.3:a:binutils-common:binutils-common:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils-common:binutils_common:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils-common:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_common:binutils_common:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-common:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_common:2.47.50.20261021-1:*:*:*:*:*:*:*"],"name":"binutils-common","purl":"pkg:deb/debian/binutils-common@2.47.50.20261021-1?arch=amd64&distro=debian&upstream=binutils","type":"deb","version":"2.47.50.20261021-1","language":"","licenses":["sha256:a56dae56c0793ffea98de7024c3417701298d7ac4d5e563a085e8a092b02a114"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/binutils-common/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.conffiles","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/binutils-common:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"binutils","version":"2.47.50.20261021-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"risk":0.13195,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."},"relatedVulnerabilities":[{"id":"CVE-2018-20712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"urls":["http://www.securityfocus.com/bid/106563","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629","https://sourceware.org/bugzilla/show_bug.cgi?id=24043","https://support.f5.com/csp/article/K38336243"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."}]},{"artifact":{"id":"1d66fdc4599c3e16","cpes":["cpe:2.3:a:binutils-x86-64-linux-gnu:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux-gnu:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux_gnu:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64-linux:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64_linux:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86-64:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86_64:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils-x86:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils_x86:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils-x86-64-linux-gnu:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:binutils:binutils_x86_64_linux_gnu:2.47.50.20261021-1:*:*:*:*:*:*:*"],"name":"binutils-x86-64-linux-gnu","purl":"pkg:deb/debian/binutils-x86-64-linux-gnu@2.47.50.20261021-1?arch=amd64&distro=debian&upstream=binutils","type":"deb","version":"2.47.50.20261021-1","language":"","licenses":["sha256:a56dae56c0793ffea98de7024c3417701298d7ac4d5e563a085e8a092b02a114"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/binutils-x86-64-linux-gnu/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/binutils-x86-64-linux-gnu.list"}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"binutils","version":"2.47.50.20261021-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"risk":0.13195,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."},"relatedVulnerabilities":[{"id":"CVE-2018-20712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"urls":["http://www.securityfocus.com/bid/106563","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629","https://sourceware.org/bugzilla/show_bug.cgi?id=24043","https://support.f5.com/csp/article/K38336243"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."}]},{"artifact":{"id":"e69ba2397cdf8abe","cpes":["cpe:2.3:a:libbinutils:libbinutils:2.47.50.20261021-1:*:*:*:*:*:*:*"],"name":"libbinutils","purl":"pkg:deb/debian/libbinutils@2.47.50.20261021-1?arch=amd64&distro=debian&upstream=binutils","type":"deb","version":"2.47.50.20261021-1","language":"","licenses":["sha256:a56dae56c0793ffea98de7024c3417701298d7ac4d5e563a085e8a092b02a114"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libbinutils/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libbinutils:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"binutils","version":"2.47.50.20261021-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"risk":0.13195,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."},"relatedVulnerabilities":[{"id":"CVE-2018-20712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"urls":["http://www.securityfocus.com/bid/106563","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629","https://sourceware.org/bugzilla/show_bug.cgi?id=24043","https://support.f5.com/csp/article/K38336243"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."}]},{"artifact":{"id":"3be6fa41615e2af0","cpes":["cpe:2.3:a:libctf-nobfd0:libctf-nobfd0:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:libctf-nobfd0:libctf_nobfd0:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf-nobfd0:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:libctf_nobfd0:libctf_nobfd0:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf-nobfd0:2.47.50.20261021-1:*:*:*:*:*:*:*","cpe:2.3:a:libctf:libctf_nobfd0:2.47.50.20261021-1:*:*:*:*:*:*:*"],"name":"libctf-nobfd0","purl":"pkg:deb/debian/libctf-nobfd0@2.47.50.20261021-1?arch=amd64&distro=debian&upstream=binutils","type":"deb","version":"2.47.50.20261021-1","language":"","licenses":["sha256:a56dae56c0793ffea98de7024c3417701298d7ac4d5e563a085e8a092b02a114"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libctf-nobfd0/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libctf-nobfd0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libctf-nobfd0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"binutils","version":"2.47.50.20261021-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"risk":0.13195,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."},"relatedVulnerabilities":[{"id":"CVE-2018-20712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"urls":["http://www.securityfocus.com/bid/106563","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629","https://sourceware.org/bugzilla/show_bug.cgi?id=24043","https://support.f5.com/csp/article/K38336243"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."}]},{"artifact":{"id":"e41740d8ad011a04","cpes":["cpe:2.3:a:libctf0:libctf0:2.47.50.20261021-1:*:*:*:*:*:*:*"],"name":"libctf0","purl":"pkg:deb/debian/libctf0@2.47.50.20261021-1?arch=amd64&distro=debian&upstream=binutils","type":"deb","version":"2.47.50.20261021-1","language":"","licenses":["sha256:a56dae56c0793ffea98de7024c3417701298d7ac4d5e563a085e8a092b02a114"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libctf0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libctf0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libctf0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"binutils","version":"2.47.50.20261021-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"risk":0.13195,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."},"relatedVulnerabilities":[{"id":"CVE-2018-20712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"urls":["http://www.securityfocus.com/bid/106563","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629","https://sourceware.org/bugzilla/show_bug.cgi?id=24043","https://support.f5.com/csp/article/K38336243"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."}]},{"artifact":{"id":"4911011d26d21bbd","cpes":["cpe:2.3:a:libgprofng0:libgprofng0:2.47.50.20261021-1:*:*:*:*:*:*:*"],"name":"libgprofng0","purl":"pkg:deb/debian/libgprofng0@2.47.50.20261021-1?arch=amd64&distro=debian&upstream=binutils","type":"deb","version":"2.47.50.20261021-1","language":"","licenses":["sha256:a56dae56c0793ffea98de7024c3417701298d7ac4d5e563a085e8a092b02a114"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/binutils-common/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libgprofng0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libgprofng0:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libgprofng0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"binutils","version":"2.47.50.20261021-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"risk":0.13195,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."},"relatedVulnerabilities":[{"id":"CVE-2018-20712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"urls":["http://www.securityfocus.com/bid/106563","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629","https://sourceware.org/bugzilla/show_bug.cgi?id=24043","https://support.f5.com/csp/article/K38336243"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."}]},{"artifact":{"id":"4e028af065b691db","cpes":["cpe:2.3:a:libsframe3:libsframe3:2.47.50.20261021-1:*:*:*:*:*:*:*"],"name":"libsframe3","purl":"pkg:deb/debian/libsframe3@2.47.50.20261021-1?arch=amd64&distro=debian&upstream=binutils","type":"deb","version":"2.47.50.20261021-1","language":"","licenses":["sha256:a56dae56c0793ffea98de7024c3417701298d7ac4d5e563a085e8a092b02a114"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsframe3/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libsframe3/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsframe3:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libsframe3:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"binutils"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2018-20712","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"binutils","version":"2.47.50.20261021-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2018-20712","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"risk":0.13195,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."},"relatedVulnerabilities":[{"id":"CVE-2018-20712","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2018-20712","cwe":"CWE-125","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2018-20712","date":"2026-11-12","epss":0.02639,"percentile":0.85787}],"urls":["http://www.securityfocus.com/bid/106563","https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629","https://sourceware.org/bugzilla/show_bug.cgi?id=24043","https://support.f5.com/csp/article/K38336243"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2018-20712","description":"A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt."}]},{"artifact":{"id":"dc3f48400d31e994","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2010-4756","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2010-4756","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"risk":0.13165,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."},"relatedVulnerabilities":[{"id":"CVE-2010-4756","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"urls":["http://cxib.net/stuff/glob-0day.c","http://securityreason.com/achievement_securityalert/89","http://securityreason.com/exploitalert/9223","https://bugzilla.redhat.com/show_bug.cgi?id=681681","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."}]},{"artifact":{"id":"5a808e4e593d0f84","cpes":["cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev-bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_dev_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-dev-bin","purl":"pkg:deb/debian/libc-dev-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-dev-bin/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc-dev-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.list"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2010-4756","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2010-4756","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"risk":0.13165,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."},"relatedVulnerabilities":[{"id":"CVE-2010-4756","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"urls":["http://cxib.net/stuff/glob-0day.c","http://securityreason.com/achievement_securityalert/89","http://securityreason.com/exploitalert/9223","https://bugzilla.redhat.com/show_bug.cgi?id=681681","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."}]},{"artifact":{"id":"35e83c0ffe516ded","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/debian/libc-gconv-modules-extra@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2010-4756","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2010-4756","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"risk":0.13165,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."},"relatedVulnerabilities":[{"id":"CVE-2010-4756","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"urls":["http://cxib.net/stuff/glob-0day.c","http://securityreason.com/achievement_securityalert/89","http://securityreason.com/exploitalert/9223","https://bugzilla.redhat.com/show_bug.cgi?id=681681","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."}]},{"artifact":{"id":"9cdc119bd93005b7","cpes":["cpe:2.3:a:libc6:libc6:2.43-7:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2010-4756","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2010-4756","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"risk":0.13165,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."},"relatedVulnerabilities":[{"id":"CVE-2010-4756","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"urls":["http://cxib.net/stuff/glob-0day.c","http://securityreason.com/achievement_securityalert/89","http://securityreason.com/exploitalert/9223","https://bugzilla.redhat.com/show_bug.cgi?id=681681","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."}]},{"artifact":{"id":"d78fb72dc8211e22","cpes":["cpe:2.3:a:libc6-dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6-dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6_dev:2.43-7:*:*:*:*:*:*:*"],"name":"libc6-dev","purl":"pkg:deb/debian/libc6-dev@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc6-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2010-4756","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2010-4756","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"risk":0.13165,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."},"relatedVulnerabilities":[{"id":"CVE-2010-4756","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","metrics":{"baseScore":4,"impactScore":2.9,"exploitabilityScore":8},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2010-4756","cwe":"CWE-399","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2010-4756","date":"2026-11-12","epss":0.02633,"percentile":0.85755}],"urls":["http://cxib.net/stuff/glob-0day.c","http://securityreason.com/achievement_securityalert/89","http://securityreason.com/exploitalert/9223","https://bugzilla.redhat.com/show_bug.cgi?id=681681","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4756","https://security.netapp.com/advisory/ntap-20241108-0002/"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2010-4756","description":"The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632."}]},{"artifact":{"id":"41ecdf592620f4eb","cpes":["cpe:2.3:a:git:git:1\\:2.53.0-1:*:*:*:*:*:*:*"],"name":"git","purl":"pkg:deb/debian/git@1%3A2.53.0-1?arch=amd64&distro=debian","type":"deb","version":"1:2.53.0-1","language":"","licenses":["Apache-2.0","Artistic","BSD-3-clause","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/git/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.conffiles","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.list"},{"path":"/var/lib/dpkg/info/git.postinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.postinst"},{"path":"/var/lib/dpkg/info/git.postrm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.postrm"},{"path":"/var/lib/dpkg/info/git.preinst","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.preinst"},{"path":"/var/lib/dpkg/info/git.prerm","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git.prerm"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2022-24975","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"git","version":"1:2.53.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2022-24975","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-24975","cwe":"CWE-668","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-24975","date":"2026-11-12","epss":0.02624,"percentile":0.85694}],"risk":0.1312,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-24975","description":"The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the \"GitBleed\" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk."},"relatedVulnerabilities":[{"id":"CVE-2022-24975","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-24975","cwe":"CWE-668","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-24975","date":"2026-11-12","epss":0.02624,"percentile":0.85694}],"urls":["https://github.com/git/git/blob/2dc94da3744bfbbf145eca587a0f5ff480cc5867/Documentation/git-clone.txt#L185-L191","https://lore.kernel.org/git/xmqq4k14qe9g.fsf%40gitster.g/","https://www.aquasec.com/blog/undetected-hard-code-secrets-expose-corporations/","https://wwws.nightwatchcybersecurity.com/2022/02/11/gitbleed/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-24975","description":"The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the \"GitBleed\" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk."}]},{"artifact":{"id":"f616434ba805162f","cpes":["cpe:2.3:a:git-man:git-man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git-man:git_man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git-man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git_man:git_man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git:git-man:1\\:2.53.0-1:*:*:*:*:*:*:*","cpe:2.3:a:git:git_man:1\\:2.53.0-1:*:*:*:*:*:*:*"],"name":"git-man","purl":"pkg:deb/debian/git-man@1%3A2.53.0-1?arch=all&distro=debian&upstream=git","type":"deb","version":"1:2.53.0-1","language":"","licenses":["Apache-2.0","Artistic","BSD-3-clause","Boost","EDL-1.0","Expat","GPL","GPL-1+","GPL-2","GPL-2+","ISC","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","dlmalloc","mingw-runtime"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/git-man/copyright","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/usr/share/doc/git-man/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.md5sums","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git-man.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/git-man.list","layerID":"sha256:25f4c5cee9094757ea021161c11a316c4a01d040655869629d98f55cec967c27","accessPath":"/var/lib/dpkg/info/git-man.list"}],"upstreams":[{"name":"git"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2022-24975","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"git","version":"1:2.53.0-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2022-24975","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2022-24975","cwe":"CWE-668","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-24975","date":"2026-11-12","epss":0.02624,"percentile":0.85694}],"risk":0.1312,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2022-24975","description":"The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the \"GitBleed\" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk."},"relatedVulnerabilities":[{"id":"CVE-2022-24975","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2022-24975","cwe":"CWE-668","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2022-24975","date":"2026-11-12","epss":0.02624,"percentile":0.85694}],"urls":["https://github.com/git/git/blob/2dc94da3744bfbbf145eca587a0f5ff480cc5867/Documentation/git-clone.txt#L185-L191","https://lore.kernel.org/git/xmqq4k14qe9g.fsf%40gitster.g/","https://www.aquasec.com/blog/undetected-hard-code-secrets-expose-corporations/","https://wwws.nightwatchcybersecurity.com/2022/02/11/gitbleed/"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2022-24975","description":"The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the \"GitBleed\" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk."}]},{"artifact":{"id":"5450cd701429a721","cpes":["cpe:2.3:a:libsqlite3-0:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-0:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_0:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-0:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_0:3.53.4-2:*:*:*:*:*:*:*"],"name":"libsqlite3-0","purl":"pkg:deb/debian/libsqlite3-0@3.53.4-2?arch=amd64&distro=debian&upstream=sqlite3","type":"deb","version":"3.53.4-2","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-0/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libsqlite3-0/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libsqlite3-0:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.54.1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119373","versionConstraint":"< 3.54.1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"sqlite3","version":"3.53.4-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119373","fix":{"state":"fixed","versions":["3.54.1-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.54.1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119373","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119373","date":"2026-11-12","epss":0.00162,"percentile":0.05485}],"risk":0.1296,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119373","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process."},"relatedVulnerabilities":[{"id":"CVE-2026-119373","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119373","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119373","date":"2026-11-12","epss":0.00162,"percentile":0.05485}],"urls":["https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107","https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80","https://sqlite.org/bugs/info/2026-08-04T08:49:27Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/a7f8c92f62","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119373","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process."}]},{"artifact":{"id":"9efadf1b7d85fb14","cpes":["cpe:2.3:a:libsqlite3-dev:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3-dev:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_dev:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3_dev:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3-dev:3.53.4-2:*:*:*:*:*:*:*","cpe:2.3:a:libsqlite3:libsqlite3_dev:3.53.4-2:*:*:*:*:*:*:*"],"name":"libsqlite3-dev","purl":"pkg:deb/debian/libsqlite3-dev@3.53.4-2?arch=amd64&distro=debian&upstream=sqlite3","type":"deb","version":"3.53.4-2","language":"","licenses":["GPL-2","GPL-2+","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libsqlite3-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libsqlite3-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libsqlite3-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libsqlite3-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"sqlite3"}]},"matchDetails":[{"fix":{"suggestedVersion":"3.54.1-1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-119373","versionConstraint":"< 3.54.1-1 (deb)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"sqlite3","version":"3.53.4-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-119373","fix":{"state":"fixed","versions":["3.54.1-1"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.54.1-1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119373","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119373","date":"2026-11-12","epss":0.00162,"percentile":0.05485}],"risk":0.1296,"urls":[],"severity":"High","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-119373","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process."},"relatedVulnerabilities":[{"id":"CVE-2026-119373","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.5},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-119373","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-119373","date":"2026-11-12","epss":0.00162,"percentile":0.05485}],"urls":["https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge","https://github.com/sqlite/sqlite","https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107","https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80","https://sqlite.org/bugs/info/2026-08-04T08:49:27Z","https://sqlite.org/releaselog/3_54_0.html","https://sqlite.org/src/info/a7f8c92f62","https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-119373","description":"SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process."}]},{"artifact":{"id":"dc3f48400d31e994","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115819","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-115819","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"risk":0.12887,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.  These conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.  The narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."},"relatedVulnerabilities":[{"id":"CVE-2026-115819","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34989","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0027"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.\n\nThese conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.\n\nThe narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."}]},{"artifact":{"id":"5a808e4e593d0f84","cpes":["cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev-bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_dev_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-dev-bin","purl":"pkg:deb/debian/libc-dev-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-dev-bin/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc-dev-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.list"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115819","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-115819","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"risk":0.12887,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.  These conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.  The narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."},"relatedVulnerabilities":[{"id":"CVE-2026-115819","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34989","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0027"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.\n\nThese conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.\n\nThe narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."}]},{"artifact":{"id":"35e83c0ffe516ded","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/debian/libc-gconv-modules-extra@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115819","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-115819","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"risk":0.12887,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.  These conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.  The narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."},"relatedVulnerabilities":[{"id":"CVE-2026-115819","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34989","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0027"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.\n\nThese conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.\n\nThe narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."}]},{"artifact":{"id":"9cdc119bd93005b7","cpes":["cpe:2.3:a:libc6:libc6:2.43-7:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115819","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-115819","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"risk":0.12887,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.  These conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.  The narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."},"relatedVulnerabilities":[{"id":"CVE-2026-115819","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34989","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0027"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.\n\nThese conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.\n\nThe narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."}]},{"artifact":{"id":"d78fb72dc8211e22","cpes":["cpe:2.3:a:libc6-dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6-dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6_dev:2.43-7:*:*:*:*:*:*:*"],"name":"libc6-dev","purl":"pkg:deb/debian/libc6-dev@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc6-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-115819","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2026-115819","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"risk":0.12887,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.  These conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.  The narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."},"relatedVulnerabilities":[{"id":"CVE-2026-115819","cvss":[{"type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-115819","cwe":"CWE-193","type":"Secondary","source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"}],"epss":[{"cve":"CVE-2026-115819","date":"2026-11-12","epss":0.00263,"percentile":0.18296}],"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=34989","https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0027"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-115819","description":"Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the destination array when the converted multibyte string and its terminating null byte exactly fill that array.\n\nThese conversions store each wide input character into the caller's char array as a multibyte sequence.  The conversion ends with the sequence that returns to the initial shift state, which also stores the terminating null byte, and the functions then append a second null byte.  A destination sized for the converted string and one terminator, as the C standard requires the caller to provide, is therefore written one byte past its end.  The out-of-bounds byte is always a null byte, which may corrupt adjacent data or crash the process.  An attacker who supplies the input can trigger the overflow with a string whose converted length exactly fills the destination.\n\nThe narrow scanf functions, the %ls and %l[ conversions into a wchar_t array, and the 'a' and 'm' allocation modifiers are not affected, and storing a wide scanf conversion into a narrow char array is uncommon.  This issue affects all architectures and ABIs supported by the GNU C Library."}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-9117","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2016-9117","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-9117","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9117","date":"2026-11-12","epss":0.02558,"percentile":0.85303}],"risk":0.12789999999999999,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2016-9117","description":"NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file."},"relatedVulnerabilities":[{"id":"CVE-2016-9117","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9117","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9117","date":"2026-11-12","epss":0.02558,"percentile":0.85303}],"urls":["http://www.securityfocus.com/bid/93783","https://github.com/uclouvain/openjpeg/issues/860","https://security.gentoo.org/glsa/201710-26"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9117","description":"NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2016-9117","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2016-9117","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2016-9117","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9117","date":"2026-11-12","epss":0.02558,"percentile":0.85303}],"risk":0.12789999999999999,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2016-9117","description":"NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file."},"relatedVulnerabilities":[{"id":"CVE-2016-9117","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","metrics":{"baseScore":4.3,"impactScore":2.9,"exploitabilityScore":8.6},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-9117","cwe":"CWE-476","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2016-9117","date":"2026-11-12","epss":0.02558,"percentile":0.85303}],"urls":["http://www.securityfocus.com/bid/93783","https://github.com/uclouvain/openjpeg/issues/860","https://security.gentoo.org/glsa/201710-26"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-9117","description":"NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file."}]},{"artifact":{"id":"6f38aebcc016f4bd","cpes":["cpe:2.3:a:libopenjp2-7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7","purl":"pkg:deb/debian/libopenjp2-7@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-39328","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-39328","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39328","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39328","date":"2026-11-12","epss":0.00242,"percentile":0.15557}],"risk":0.12705,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-39328","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file."},"relatedVulnerabilities":[{"id":"CVE-2023-39328","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39328","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39328","date":"2026-11-12","epss":0.00242,"percentile":0.15557}],"urls":["https://access.redhat.com/security/cve/CVE-2023-39328","https://bugzilla.redhat.com/show_bug.cgi?id=2219236","https://github.com/uclouvain/openjpeg/issues/1476","https://github.com/uclouvain/openjpeg/pull/1470","https://github.com/uclouvain/openjpeg/pull/1471"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39328","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file."}]},{"artifact":{"id":"bad5c2ca041014a5","cpes":["cpe:2.3:a:libopenjp2-7-dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7-dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7_dev:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2-7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2_7:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2-7-dev:2.5.4-1.1:*:*:*:*:*:*:*","cpe:2.3:a:libopenjp2:libopenjp2_7_dev:2.5.4-1.1:*:*:*:*:*:*:*"],"name":"libopenjp2-7-dev","purl":"pkg:deb/debian/libopenjp2-7-dev@2.5.4-1.1?arch=amd64&distro=debian&upstream=openjpeg2","type":"deb","version":"2.5.4-1.1","language":"","licenses":["BSD-2","BSD-3","LIBPNG","LIBTIFF","LIBTIFF-GLARSON","LIBTIFF-PIXAR","MIT","ZLIB"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libopenjp2-7-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libopenjp2-7-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libopenjp2-7-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openjpeg2"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2023-39328","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openjpeg2","version":"2.5.4-1.1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2023-39328","fix":{"state":"not-fixed","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39328","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39328","date":"2026-11-12","epss":0.00242,"percentile":0.15557}],"risk":0.12705,"urls":[],"severity":"Medium","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2023-39328","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file."},"relatedVulnerabilities":[{"id":"CVE-2023-39328","cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2023-39328","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2023-39328","date":"2026-11-12","epss":0.00242,"percentile":0.15557}],"urls":["https://access.redhat.com/security/cve/CVE-2023-39328","https://bugzilla.redhat.com/show_bug.cgi?id=2219236","https://github.com/uclouvain/openjpeg/issues/1476","https://github.com/uclouvain/openjpeg/pull/1470","https://github.com/uclouvain/openjpeg/pull/1471"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2023-39328","description":"A vulnerability was found in OpenJPEG similar to CVE-2019-6988. This flaw allows an attacker to bypass existing protections and cause an application crash through a maliciously crafted file."}]},{"artifact":{"id":"f4dbf491a6d57e4f","cpes":["cpe:2.3:a:libldap-dev:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap-dev:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap_dev:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap_dev:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap-dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*","cpe:2.3:a:libldap:libldap_dev:2.6.14\\+dfsg-2:*:*:*:*:*:*:*"],"name":"libldap-dev","purl":"pkg:deb/debian/libldap-dev@2.6.14%2Bdfsg-2?arch=amd64&distro=debian&upstream=openldap","type":"deb","version":"2.6.14+dfsg-2","language":"","licenses":["BSD-3-clause","BSD-3-clause-California","BSD-3-clause-variant","BSD-4-clause-California","Beerware","Expat","Expat-ISC","Expat-UNM","F5","FSF-unlimited","GPL-2","GPL-2+","GPL-3","GPL-3+","JCG","MIT-XC","NeoSoft-permissive","OpenLDAP-2.8","UMich","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libldap-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libldap-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-15719","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openldap","version":"2.6.14+dfsg-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2020-15719","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-15719","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-15719","date":"2026-11-12","epss":0.02515,"percentile":0.85042}],"risk":0.12575,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-15719","description":"libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux."},"relatedVulnerabilities":[{"id":"CVE-2020-15719","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","metrics":{"baseScore":4,"impactScore":5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-15719","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-15719","date":"2026-11-12","epss":0.02515,"percentile":0.85042}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html","https://access.redhat.com/errata/RHBA-2019:3674","https://bugs.openldap.org/show_bug.cgi?id=9266","https://bugzilla.redhat.com/show_bug.cgi?id=1740070","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-15719","description":"libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux."}]},{"artifact":{"id":"ee1fb93e1790b636","cpes":["cpe:2.3:a:libldap2:libldap2:2.6.14\\+dfsg-2:*:*:*:*:*:*:*"],"name":"libldap2","purl":"pkg:deb/debian/libldap2@2.6.14%2Bdfsg-2?arch=amd64&distro=debian&upstream=openldap","type":"deb","version":"2.6.14+dfsg-2","language":"","licenses":["BSD-3-clause","BSD-3-clause-California","BSD-3-clause-variant","BSD-4-clause-California","Beerware","Expat","Expat-ISC","Expat-UNM","F5","FSF-unlimited","GPL-2","GPL-2+","GPL-3","GPL-3+","JCG","MIT-XC","NeoSoft-permissive","OpenLDAP-2.8","UMich","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libldap2/copyright","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/usr/share/doc/libldap2/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libldap2:amd64.md5sums","layerID":"sha256:45adf2131e2656ae5f6f5f04ab124122355d7b2025249d76c4c49d1cf3fe6eae","accessPath":"/var/lib/dpkg/info/libldap2:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"openldap"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2020-15719","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"openldap","version":"2.6.14+dfsg-2"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2020-15719","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2020-15719","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-15719","date":"2026-11-12","epss":0.02515,"percentile":0.85042}],"risk":0.12575,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2020-15719","description":"libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux."},"relatedVulnerabilities":[{"id":"CVE-2020-15719","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.2,"impactScore":2.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N","metrics":{"baseScore":4,"impactScore":5,"exploitabilityScore":5},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2020-15719","cwe":"CWE-295","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2020-15719","date":"2026-11-12","epss":0.02515,"percentile":0.85042}],"urls":["http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00033.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00059.html","https://access.redhat.com/errata/RHBA-2019:3674","https://bugs.openldap.org/show_bug.cgi?id=9266","https://bugzilla.redhat.com/show_bug.cgi?id=1740070","https://kc.mcafee.com/corporate/index?page=content&id=SB10365","https://www.oracle.com/security-alerts/cpuapr2022.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2020-15719","description":"libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux."}]},{"artifact":{"id":"dc3f48400d31e994","cpes":["cpe:2.3:a:libc-bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_bin:libc_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-bin","purl":"pkg:deb/debian/libc-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-bin/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-bin.list","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.list"},{"path":"/var/lib/dpkg/info/libc-bin.postinst","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.postinst"},{"path":"/var/lib/dpkg/info/libc-bin.triggers","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-bin.triggers"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010025","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010025","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"risk":0.12390000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2019-1010025","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010025","https://sourceware.org/bugzilla/show_bug.cgi?id=22853","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010025","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."}]},{"artifact":{"id":"5a808e4e593d0f84","cpes":["cpe:2.3:a:libc-dev-bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev-bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev_bin:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_dev:libc_dev_bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-dev-bin:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_dev_bin:2.43-7:*:*:*:*:*:*:*"],"name":"libc-dev-bin","purl":"pkg:deb/debian/libc-dev-bin@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-dev-bin/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc-dev-bin/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-dev-bin.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc-dev-bin.list"}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010025","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010025","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"risk":0.12390000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2019-1010025","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010025","https://sourceware.org/bugzilla/show_bug.cgi?id=22853","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010025","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."}]},{"artifact":{"id":"35e83c0ffe516ded","cpes":["cpe:2.3:a:libc-gconv-modules-extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules-extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules_extra:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv-modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv_modules:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc-gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc_gconv:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc-gconv-modules-extra:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc:libc_gconv_modules_extra:2.43-7:*:*:*:*:*:*:*"],"name":"libc-gconv-modules-extra","purl":"pkg:deb/debian/libc-gconv-modules-extra@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc-gconv-modules-extra/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc-gconv-modules-extra/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc-gconv-modules-extra:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010025","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010025","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"risk":0.12390000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2019-1010025","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010025","https://sourceware.org/bugzilla/show_bug.cgi?id=22853","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010025","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."}]},{"artifact":{"id":"9cdc119bd93005b7","cpes":["cpe:2.3:a:libc6:libc6:2.43-7:*:*:*:*:*:*:*"],"name":"libc6","purl":"pkg:deb/debian/libc6@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6/copyright","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/usr/share/doc/libc6/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.conffiles","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.conffiles","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6:amd64.md5sums","layerID":"sha256:99638954530c7ea43725440ad0069ed1b010eaf3c57769a6a2ce380f22c08459","accessPath":"/var/lib/dpkg/info/libc6:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010025","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010025","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"risk":0.12390000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2019-1010025","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010025","https://sourceware.org/bugzilla/show_bug.cgi?id=22853","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010025","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."}]},{"artifact":{"id":"d78fb72dc8211e22","cpes":["cpe:2.3:a:libc6-dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6-dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6_dev:libc6_dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6-dev:2.43-7:*:*:*:*:*:*:*","cpe:2.3:a:libc6:libc6_dev:2.43-7:*:*:*:*:*:*:*"],"name":"libc6-dev","purl":"pkg:deb/debian/libc6-dev@2.43-7?arch=amd64&distro=debian&upstream=glibc","type":"deb","version":"2.43-7","language":"","licenses":["BSD-2-clause","BSD-3-clause-Berkeley","BSD-3-clause-Carnegie","BSD-3-clause-Oracle","BSD-3-clause-WIDE","BSD-like-Spencer","BSL-1.0","CORE-MATH","Carnegie","DEC","FSFAP","GPL-2","GPL-2+","GPL-2+-with-link-exception","GPL-3","GPL-3+","IBM","ISC","Inner-Net","LGPL-2","LGPL-2+","LGPL-2.1","LGPL-2.1+","LGPL-2.1+-with-link-exception","LGPL-3","LGPL-3+","MIT-like-Lord","PCRE","SunPro","Unicode-DFS-2016","Univ-Coimbra","public-domain"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/libc6-dev/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/libc6-dev/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/libc6-dev:amd64.md5sums","annotations":{"evidence":"supporting"}}],"upstreams":[{"name":"glibc"}]},"matchDetails":[{"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2019-1010025","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"glibc","version":"2.43-7"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2019-1010025","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"risk":0.12390000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."},"relatedVulnerabilities":[{"id":"CVE-2019-1010025","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","metrics":{"baseScore":5,"impactScore":2.9,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2019-1010025","cwe":"CWE-330","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2019-1010025","date":"2026-11-12","epss":0.02478,"percentile":0.84799}],"urls":["https://security-tracker.debian.org/tracker/CVE-2019-1010025","https://sourceware.org/bugzilla/show_bug.cgi?id=22853","https://support.f5.com/csp/article/K06046097","https://support.f5.com/csp/article/K06046097?utm_source=f5support&amp%3Butm_medium=RSS","https://ubuntu.com/security/CVE-2019-1010025","https://cert-portal.siemens.com/productcert/html/ssa-398330.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010025","description":"GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is \"ASLR bypass itself is not a vulnerability."}]},{"artifact":{"id":"13f175aa8ba1a7f1","cpes":["cpe:2.3:a:m4:m4:1.4.21-1:*:*:*:*:*:*:*"],"name":"m4","purl":"pkg:deb/debian/m4@1.4.21-1?arch=amd64&distro=debian","type":"deb","version":"1.4.21-1","language":"","licenses":["sha256:808b0b1173cf08e27b01a4d1771b944322d848b589ea703c9f9cdab4f1582fa6"],"locations":[{"path":"/var/lib/dpkg/status","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/status","annotations":{"evidence":"primary"}},{"path":"/usr/share/doc/m4/copyright","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/usr/share/doc/m4/copyright","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/m4.md5sums","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/m4.md5sums","annotations":{"evidence":"supporting"}},{"path":"/var/lib/dpkg/info/m4.list","layerID":"sha256:7a4038b7b8f3171bff97525623d9b1b27d47b5b4952018d82b506f6e896364c3","accessPath":"/var/lib/dpkg/info/m4.list"}],"upstreams":[]},"matchDetails":[{"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2008-1687","versionConstraint":"none (unknown)"},"matcher":"dpkg-matcher","searchedBy":{"distro":{"type":"debian","version":"forky"},"package":{"name":"m4","version":"1.4.21-1"},"namespace":"debian:distro:debian:unstable"}}],"vulnerability":{"id":"CVE-2008-1687","fix":{"state":"not-fixed","versions":[]},"cvss":[],"cwes":[{"cve":"CVE-2008-1687","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2008-1687","date":"2026-11-12","epss":0.0245,"percentile":0.84611}],"risk":0.12250000000000001,"urls":[],"severity":"Negligible","namespace":"debian:distro:debian:unstable","advisories":[],"dataSource":"https://security-tracker.debian.org/tracker/CVE-2008-1687","description":"The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename."},"relatedVulnerabilities":[{"id":"CVE-2008-1687","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","metrics":{"baseScore":7.5,"impactScore":6.5,"exploitabilityScore":10},"version":"2.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2008-1687","cwe":"NVD-CWE-Other","type":"Primary","source":"nvd@nist.gov"}],"epss":[{"cve":"CVE-2008-1687","date":"2026-11-12","epss":0.0245,"percentile":0.84611}],"urls":["http://secunia.com/advisories/29671","http://secunia.com/advisories/29729","http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.510612","http://www.openwall.com/lists/oss-security/2008/04/07/1","http://www.openwall.com/lists/oss-security/2008/04/07/12","http://www.openwall.com/lists/oss-security/2008/04/07/3","http://www.openwall.com/lists/oss-security/2008/04/07/4","http://www.securityfocus.com/bid/28688","http://www.vupen.com/english/advisories/2008/1151/references","https://exchange.xforce.ibmcloud.com/vulnerabilities/41706"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2008-1687","description":"The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename."}]}],"grade":"F","score":"0.00","as_of":"2026-11-14T08:25:23.792Z","grype_db_version":"2026-11-13T15:40:34.000Z"}